CITRIX
CITRIX
CITRIX
Scenario: There are two domains in an organization: Domain A and Domain B. A Citrix Engineer configured SAML
authentication for Domain A, without implementing Citrix Federated Authentication Service (FAS). While launching the Citrix
apps, the Single Sign-on will __________.
Options :
o A: Work for users from Domain A and NOT for users from Domain B.
o B: Work for users from Domain B and NOT for users from Domain A.
Explanation: Since SAML authentication is configured for Domain A and FAS is not implemented, users from Domain B can
authenticate using SAML, but Domain A users will not have Single Sign-On (SSO) enabled due to the absence of FAS. FAS is
required to enable SSO for Domain A users.
Question 2 (Topic 1)
Scenario: A Citrix Engineer is managing a large environment with multiple locations. The setup is as follows:
The setup has a single Citrix Virtual Apps and Desktops site with multiple zones such as a Primary zone and 3 Satellite
zones.
Virtual Delivery Agents (VDAs) are available for all applications in all 3 Satellite zones.
As a sovereign mandate, it is desirable that this application database should NOT be accessible from zones 2 and 3.
The application does NOT create any database cache and cannot work if the database is NOT reachable.
Which zone preference should the engineer configure to achieve this setup?
Options :
Explanation: Setting the application home to Satellite zone 1 ensures that only zone 1 has access to the application’s
database, complying with the mandate to restrict database access from zones 2 and 3.
Question 3 (Topic 1)
Scenario: A Citrix Engineer noticed that a Citrix Virtual Apps and Desktops environment lost connection to the SQL servers
where the Citrix databases are running. Due to this, the Site has become unmanaged and first-time users CANNOT connect to
their Citrix Virtual Apps & Desktops resources. The setup was recently upgraded from Citrix Virtual Apps and Desktops 7.11 to
Citrix Virtual Apps and Desktops 7.15 CU4.
What should the engineer do to minimize the impact of the SQL outage?
Options:
o B: Enable IntelliCache.
Explanation: Local Host Cache (LHC) allows the Citrix environment to continue functioning during SQL outages. It helps
ensure that existing users can still access their resources while the SQL server is down. Connection Leasing is deprecated, and
IntelliCache is used for optimizing storage, so LHC is the appropriate solution here.
Question 4 (Topic 1)
Scenario: A Citrix Engineer wants to enable the "Log Off Web Portal When Session is Launched" feature within Workspace
Environment Management (WEM) transformer settings.
What does the engineer need to do prior to enabling this feature?
Options:
o A: Set Workspace control to NOT automatically reconnect to the sessions when users log onto StoreFront.
o B: Set Workspace control settings to log off from session when users log off from StoreFront.
o C: Set Workspace control to automatically reconnect to the sessions when users log onto StoreFront.
o D: Set Workspace control settings to NOT log off a session when users log off from StoreFront.
Answer: B. Set Workspace control settings to log off from session when users log off from StoreFront
Explanation: To enable the "Log Off Web Portal When Session is Launched" feature, you need to configure Workspace control
settings so that users are logged off from the session when they log off from StoreFront. This ensures that the Web Portal
session is terminated once a session is launched.
Question 5 (Topic 1)
Which three layers can a Citrix Engineer include in an image template? (Choose three.)
Options:
o A: Platform
o B: OS
o C: User
o D: Application
o E: Elastic
Explanation: Citrix App Layering supports creating templates by including the Platform Layer (for hypervisor and
provisioning integration), OS Layer (operating system), and Application Layer (applications to be delivered). The User
Layer and Elastic Layer are not part of the base image template.
Question 6 (Topic 1)
Which two statements are true for a Workspace Environment Management (WEM) configuration set? (Choose two.)
Options:
o A: A WEM Agent can point to more than one WEM configuration set.
o B: The Environmental Settings within the WEM Administration Console are per machine, NOT per user.
o C: Multiple configuration sets are needed in cases of different global settings for different agents.
o D: A configuration set is related to a Citrix Virtual Desktops site and is NOT an independent entity.
Answer: B. The Environmental Settings within the WEM Administration Console are per machine, NOT per user,
C. Multiple configuration sets are needed in cases of different global settings for different agents
Explanation: Environmental Settings in WEM are configured on a per-machine basis. Additionally, multiple configuration
sets are required if you need different global settings for different agents. However, a WEM agent cannot point to more than
one configuration set, and a configuration set is an independent entity, not directly tied to a Citrix Virtual Desktops site.
Question 7 (Topic 1)
Scenario: A newly created Citrix Virtual Apps and Desktops site has sensitive information. The users consistently use
different browsers for their daily tasks. A Citrix Engineer is looking for ways to minimize attacks like ransomware, phishing,
and session hijacking.
Which two steps can the engineer take to minimize attacks without interfering with user productivity? (Choose two.)
Options:
Answer: B. Disable all the user plugins, D. Use HTTP response headers to send security policies to endpoint
browsers
Explanation: Disabling user plugins can prevent vulnerabilities in browser extensions that may lead to security breaches.
Additionally, using HTTP response headers to send security policies enhances security without hindering productivity.
Disabling specific browsers is too restrictive and might impact productivity, and while HSTS is important, it does not directly
help with session hijacking or phishing.
Question 8 (Topic 1)
Which command should a Citrix Engineer use to review recent connections and brokering attempts within a Citrix Virtual Apps
and Desktops site?
Options:
o A: Get-BrokerConnection
o B: Get-BrokerSession
o C: Get-BrokerConnectionLog
o D: Get-BrokerSessionLog
Answer: C. Get-BrokerConnectionLog
Explanation: The Get-BrokerConnectionLog command allows engineers to review recent connection attempts and
brokering activities within the site. This is essential for troubleshooting connection issues or verifying session activity.
Question 9 (Topic 1)
Options:
o A: Documented sequence of steps for integrating applications into Citrix App Layering.
Answer: C. Scripts to automate the deployment of applications into Citrix App Layering
Explanation: A Citrix App Layering recipe is a script or set of steps that automates the process of deploying applications
within Citrix App Layering. This makes the process more efficient and reduces manual errors.
Question 10 (Topic 1)
o A: PersistentDictionary.edb
o B: Web.config
o C: Subscription.txt
o D: Style.csv
Answer: B. Web.config
Explanation: The Web.config file stores information related to Storefront configuration, including subscriptions, which are
used to maintain user-specific settings and preferences for the StoreFront environment.
Question 11 (Topic 1)
Which database high availability option does Citrix recommend for Workspace Environment Management
(WEM)?
Options:
o A: Always On
o B: Mirroring
o C: Replication
o D: Clustering
Answer: B. Mirroring
Explanation: Citrix recommends database mirroring as the high availability option for Workspace Environment Management
(WEM) because it ensures redundancy and reliability without the complexities of Always On or clustering.
Question 12 (Topic 1)
Scenario: A Citrix Engineer is managing a large Citrix Virtual Apps and Desktops environment with three sites. Users
connecting to applications and VDI machines in these sites are using a common Citrix ADC Gateway. The engineer wants to
configure peripheral federation and port redirection policies for secure access to the site resources.
Which feature should the engineer use to configure policies centrally only once and avoid configuring them on each site?
Options:
o A: SmartAccess
o B: SmartCheck
o C: SmartTools
o D: SmartControl
Answer: D. SmartControl
Explanation: SmartControl allows centralized configuration and enforcement of policies like peripheral federation and port
redirection at the ADC Gateway level, simplifying the management across multiple sites.
Question 13 (Topic 1)
Scenario: An existing setup of session recording has stopped working. After investigating, a Citrix Engineer finds that the
Session Recording Agent cannot connect to the Session Recording Server. The following error is displayed:
"The underlying connection was closed. Could not establish a trust relationship for the SSL/TLS secure channel."
Which two issues could cause this error? (Choose two.)
Options:
o B: The sessions are started but a request for a record policy evaluation was NOT made.
o C: The server hosting the Session Recording Agent does NOT have a CA certificate.
o D: The Session Recording server is using a certificate signed by a CA that the server hosting the Session
Recording Agent does NOT trust.
Answer: C. The server hosting the Session Recording Agent does NOT have a CA certificate, D. The Session
Recording server is using a certificate signed by a CA that the server hosting the Session Recording Agent does
NOT trust.
Explanation: The error occurs due to SSL/TLS trust issues, often stemming from a missing or untrusted CA certificate on the
Session Recording Agent.
Question 14 (Topic 1)
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps environment. The engineer has recently noticed two single-
threaded applications consistently consuming 25% of the CPU resources, causing substantial performance issues for users of
these servers. The engineer has deployed Workspace Environment Management (WEM) within the infrastructure and enabled
CPU Spikes Protection.
What else can the engineer enable within WEM to address this issue?
Options:
o C: CPU Clamping and set it to 10% for the two problem applications
o D: Limit Sample Time and set it to 10% for the two problem applications
Answer: C. CPU Clamping and set it to 10% for the two problem applications
Explanation: Enabling CPU Clamping allows you to restrict CPU usage for specific applications, preventing them from
consuming excessive resources.
Question 15 (Topic 1)
Scenario: A Citrix Engineer created four application layers with different applications at different time stamps as shown
below:
App Layer B: Adobe Acrobat Reader and Cisco Webex – 14/07/2019, 11:45
App Layer C: Active Directory Users & Computers, Citrix Studio – 20/08/2019, 16:10
Options:
o A: App Layer A
o B: App Layer D
o C: App Layer B
o D: App Layer C
Explanation: App Layer C has the latest timestamp and therefore holds the highest priority in this scenario.
Question 16 (Topic 1)
Which service on the StoreFront server is responsible for replication of user subscriptions?
Options:
Explanation: The Citrix Subscriptions Store service handles the replication of user subscriptions across StoreFront
servers, ensuring a consistent user experience.
Question 17 (Topic 1)
Which PowerShell cmdlet is used to check the connection string, which connects the Citrix Delivery Controller
to communicate to the site database?
Options:
o A: Get-BrokerServiceInstance
o B: Get-BrokerDbconnection
o C: Get-BrokerConnectionLog
o D: Get-BrokerInstalledDbVersion
Answer: B. Get-BrokerDbconnection
Explanation: Get-BrokerDbconnection is the PowerShell cmdlet used to retrieve the connection string that connects the
Delivery Controller to the Citrix site database.
Question 18 (Topic 1)
Which three considerations are accurate regarding the Enterprise Layer Manager (ELM) server? (Choose three.)
Options:
o A: It hosts the SMB file share for the Elastic Layers data.
o E: It coordinates all communication within the Citrix App Layering imaging process.
o F: It hosts the secondary file share for User Layer profile data.
Answer: A. It hosts the SMB file share for the Elastic Layers data, B. It manages and maintains copies of all
layers and layered images, C. It is a Windows-based virtual appliance maintained on the hypervisor
Explanation: The Enterprise Layer Manager (ELM) is responsible for hosting the SMB file share for Elastic Layers, managing
copies of layers, and is maintained on the hypervisor as a Windows-based virtual appliance.
Question 19 (Topic 1)
In which two ways can a Citrix Engineer encrypt communication between the Virtual Delivery Agent (VDA)
machines and Citrix Workspace app? (Choose two.)
Options:
Answer: B. Enable TLS on the VDA machines, C. Install a certificate on the VDA machines
Explanation: To encrypt communication between VDAs and the Citrix Workspace app, you need to enable TLS on the VDA
machines and install a certificate on them for secure communication.
Question 20 (Topic 1)
Which three considerations are accurate when adding Active Directory (AD) objects to a Workspace
Environment Management (WEM) Configuration set? (Choose three.)
Options:
o A: Multiple users can be added at the same time by separating names with semicolons.
o B: Individual or multiple AD users can be added to the WEM console but NOT groups.
o C: Machine objects can be added using the Add Object button or Add OU button.
o E: Item Priority can be assigned to user or OU objects but NOT to machine objects.
Answer: C. Machine objects can be added using the Add Object button or Add OU button, D. Objects must be
configured in WEM before actions can be applied to them, E. Item Priority can be assigned to user or OU objects
but NOT to machine objects
Explanation: When adding AD objects to a WEM configuration, machine objects can be added using buttons in the console,
objects must be configured before applying actions, and Item Priority can be assigned to user or OU objects, but not to
machine objects.
Question 21 (Topic 1)
How can a Citrix Engineer use Session-Based Computing/Hosted Virtual Desktop (SBC/HVD) Tuning to optimize a
user's desktop?
Options:
Explanation: Session-Based Computing/Hosted Virtual Desktop (SBC/HVD) tuning is focused on optimizing resource usage,
such as modifying CPU resource allocation to improve user experience and performance.
Question 22 (Topic 1)
A Citrix Engineer can use ___________ and ___________ to optimize the performance of Windows workloads.
Options:
o B: Citrix Studio
o C: Citrix Optimizer
o D: Citrix Director
Explanation: WEM and Citrix Optimizer are the tools provided by Citrix to optimize Windows workloads by adjusting
resource settings and optimizing configurations to ensure better performance.
Question 23 (Topic 1)
A Citrix Engineer is using the Citrix Profile Management Health Status feature within the Workspace
Environment Management (WEM) environment. Which file should the engineer review for results of these
health checks to identify specific issues?
Options:
o A: AuthManConfig.xml
o B: UpmConfigCheckOutput.xml
o C: UserProfileManager.log
o D: #_pm_config.log
Answer: B. UpmConfigCheckOutput.xml
Explanation: The UpmConfigCheckOutput.xml file contains the results of the health checks in Citrix Profile Management.
This file can be used to identify specific issues within the profile management configuration.
Question 24 (Topic 1)
Scenario: A large company recently acquired a smaller company. A Citrix Engineer needs to add more resources in the
environment, so that all users can access the published resources. The engineer has planned to add six more StoreFront
servers to the existing StoreFront server group with four StoreFront servers. The engineer found that the scalability declined
after reaching the seventh StoreFront.
What should the engineer increase in the StoreFront server group to prevent issues in the scalability?
Options:
o A: The RAM for the initial StoreFront servers before adding more servers.
o B: The CPUs allocated to the initial StoreFront servers before adding more servers.
Answer: B. The CPUs allocated to the initial StoreFront servers before adding more servers
Explanation: Increasing the CPU allocation for the initial StoreFront servers will prevent scalability issues when adding
additional servers to the group.
Question 25 (Topic 1)
Which two statements are true regarding the creation of OS Layers with Citrix App Layering? (Choose two.)
Options:
o A: When there is a need to update the OS of a layered image, it is ideal to create a new OS Layer.
o B: Virtual machines built as the OS Layer should be joined to a functional Active Directory domain within the
infrastructure that will be utilized.
o C: The Windows Updates feature should be left enabled within the OS Layer in case any new updates occur
once the OS Layer is deployed.
o D: Any Microsoft products that are updated by the Windows Updates feature should be included in the OS
Layer.
o E: For best performance, complete a clean installation of the Windows operating system when building an OS
Layer.
Answer: D. Any Microsoft products that are updated by the Windows Updates feature should be included in the
OS Layer, E. For best performance, complete a clean installation of the Windows operating system when
building an OS Layer
Explanation: When building an OS Layer, including Microsoft products updated by Windows Updates ensures that the base
layer is consistent. A clean installation provides optimal performance and reduces potential errors in the layer.
Question 26 (Topic 1)
Scenario: A Citrix Engineer is working on an existing Citrix Virtual Apps and Desktops environment with two Delivery
Controllers each in a Primary zone and Secondary zone located in two different datacenters respectively. Due to an outage in
the Primary zone datacenter, both Delivery Controllers in the Primary zone failed to start.
Which three statements will be true in this scenario? (Choose three.)
Options:
o A: Site performance will increasingly degrade until the Delivery Controllers in the Primary zone become
available.
o B: Connections to Virtual Delivery Agent (VDA) machines in the Secondary zone cannot be made.
o D: Connections to Virtual Delivery Agent (VDA) machines in the Primary zone cannot be made.
Answer: A. Site performance will increasingly degrade until the Delivery Controllers in the Primary zone become
available, C. Studio cannot connect to the site, D. Connections to Virtual Delivery Agent (VDA) machines in the
Primary zone cannot be made
Explanation: When Delivery Controllers in the Primary zone are unavailable, the site performance will degrade over time,
Studio will not be able to connect to the site, and VDA machines in the Primary zone will not be accessible.
Question 27 (Topic 1)
Which three layers are stored in the storage repository of the Enterprise Layer Manager (ELM) Appliance?
(Choose three.)
Options:
o A: Application
o B: User
o C: Platform
o D: OS
o E: Elastic
Explanation: The Application, Platform, and OS layers are stored in the storage repository of the Enterprise Layer
Manager (ELM) Appliance.
Question 28 (Topic 1)
Which three pre-requisites should a Citrix Engineer take into consideration when configuring Smart Card
authentication in the Citrix Virtual Apps and Desktops environment? (Choose three.)
Options:
o A: Install the vendor's Smart Card middleware on the virtual or physical machines running the Virtual Delivery
Agent (VDA) that provide user's desktops and applications.
o B: Enable pass-through with Smart Card authentication to ensure Smart Card readers type, middleware type
and configuration, and middleware PIN caching policy permit this.
o C: Enable a two-way trust relationship with the StoreFront server and the domain.
o E: Ensure that Domain Passthrough authentication for the Store is on the StoreFront server.
Answer: A. Install the vendor's Smart Card middleware on the virtual or physical machines running the Virtual
Delivery Agent (VDA), B. Enable pass-through with Smart Card authentication, D. Ensure that the public-key
infrastructure (PKI) is configured appropriately
Explanation: For Smart Card authentication, ensure that the Smart Card middleware is installed on the VDA, pass-through
authentication is enabled, and PKI is properly configured.
Question 29 (Topic 1)
What does a Citrix Engineer need to consider when upgrading the Workspace Environment Management (WEM)
Administration Console?
Options:
o A: The PowerShell command New-DatabaseConfiguration must be run prior to updating the Administration
Console.
o C: The associated .DLL files must be updated using the command-line interface after upgrading the
Administration Console.
o D: The infrastructure service and the database must be upgraded prior to upgrading the Administration
Console.
Answer: D. The infrastructure service and the database must be upgraded prior to upgrading the
Administration Console
Explanation: The infrastructure service and database must be upgraded before upgrading the WEM Administration
Console to ensure compatibility and prevent issues during the upgrade process.
Question 30 (Topic 1)
Within Workspace Environment Management (WEM), the engineer needs to increase the default Active
Directory search timeout value of __________ under the __________ option of Active Directory Objects to correct this
issue.
Options:
o A: 1000; Advanced
o B: 1000; Rules
o C: 500; Advanced
o D: 500; Rules
Explanation: To address Active Directory search timeout issues, the search timeout value should be set to 1000 under the
Advanced option in WEM.
Question 31 (Topic 1)
Scenario: A Citrix Engineer needs to use Citrix App Layering to create layered images for use with a Citrix Virtual Apps and
Desktops environment. The environment currently has the following Machine Creation Services (MCS)-provisioned images:
Windows 10 Virtual Delivery Agent (VDA) machines with App A, App B, and App C installed
Application A is a common app needed by all users. Application B is a time reporting app needed by all individual contributors,
and Application C is a managerial app needed by executives but restricted from use by everyone else. The environment uses
Citrix Hypervisor to host all VDA machines.
To meet the minimum requirements while reducing administrative effort, the engineer would need __________ layered
image(s), using __________.
Options:
o A: 1; an Elastic Layer
o B: 1; a User Layer
Question 32 (Topic 1)
Which User Layer requires the least amount of administrative effort to store user settings limited to Microsoft
Outlook data and settings for a hosted shared desktop solution based on Windows Server 2012?
Options:
o C: Full
o D: Office 365
Explanation: The Session Office 365 layer is optimized for environments where only Office 365 data and settings need to
be managed, requiring less administrative effort compared to the Full layer.
Question 33 (Topic 1)
Which command can a Citrix Engineer use to get information about a Citrix Virtual Apps and Desktops setup?
Options:
o A: Get-BrokerSite
o B: Get-BrokerController
o C: Get-BrokerDesktop
o D: Get-BrokerSession
Answer: C. Get-BrokerDesktop
Explanation: Get-BrokerDesktop provides detailed information about desktop machines in a Citrix Virtual Apps and
Desktops environment.
Question 34 (Topic 1)
Which two statements are true for Workspace Environment Management (WEM) Memory Management? (Choose
two.)
Options:
o A: WEM will NOT release the process's excess RAM to the page file when the process becomes idle.
o C: WEM calculates how much RAM a process is using and the minimum amount of RAM a process needs.
Answer: C. WEM calculates how much RAM a process is using and the minimum amount of RAM a process needs,
D. WEM optimizes specific applications during a desktop session based on priority
Explanation: WEM Memory Management analyzes RAM usage and optimizes application memory based on priority,
ensuring efficient resource use.
Question 35 (Topic 1)
Scenario: A Citrix Engineer needs to upgrade a large Citrix Virtual Apps and Desktops environment to a higher version. The
engineer is looking for information on Delivery Controller and Virtual Delivery Agent (VDA) machine Microsoft hotfixes and
service packs along with the site information and the License Server information.
Which tool should the engineer use to extract the required information?
Options:
o B: Citrix Director
o D: Citrix Scout
Explanation: Citrix Director provides a central dashboard where the engineer can find detailed information on site
performance, licensing, and related data.
Question 36 (Topic 1)
What does a Citrix Engineer need to know when adding a new StoreFront server, in terms of StoreFront
scalability?
Options:
Answer: B. All servers in a server group must reside in the same location
Explanation: StoreFront servers within a group must be located in the same geographical location to ensure optimal
performance and synchronization.
Question 37 (Topic 1)
Scenario: A Citrix Engineer needs to integrate the current Citrix Gateway with the StoreFront servers. During the wizard
setup, the engineer was asked to add two Secure Ticket Authority (STA) servers as Citrix leading practice for high availability.
The engineer should add two __________ servers as STA servers to accomplish this.
Options:
o A: Delivery Controller
o B: StoreFront
o D: Domain Controller
Explanation: The Citrix Cloud Connector is commonly used as the Secure Ticket Authority (STA) server for environments
that integrate Citrix Gateway with StoreFront.
Question 38 (Topic 1)
Scenario: A Citrix Engineer administering a Citrix Virtual Apps and Desktops environment is experiencing inconsistency with
Virtual Delivery Agent (VDA) registration. After much investigation, the engineer determined the issue is resulting from
intermittent problems with the Windows services on the VDA machine and the Delivery Controller.
Which set of Citrix services should the engineer troubleshoot to find the root cause?
Options:
Explanation: BrokerAgent.exe and BrokerService.exe are the two key services responsible for the communication and
registration of VDAs in a Citrix environment.
Question 39 (Topic 1)
Scenario: A Citrix Engineer needs to make a change to the OS Layer. The OS Layer is currently used in several layered
images that include different application layers.
Which two steps should the engineer take to make the necessary changes to the OS Layer and the layered images while
minimizing administrative effort? (Choose two.)
Options:
Answer: B. Recreate all application layers associated with the existing OS Layer, D. Update the existing OS
Layer with the needed changes
Explanation: Updating the existing OS Layer with the required changes will ensure continuity, and recreating the
application layers associated with it ensures proper functioning of applications on the updated OS.
Question 40 (Topic 1)
Scenario: A Citrix Engineer is managing Virtual Delivery Agent (VDA) registrations in a Citrix Virtual Apps and Desktops
environment.
In which two types of deployments will the auto-update policy for VDA registration be self-managed? (Choose two.)
Options:
o B: Deployments that use the Delivery Controllers or Controller SIDs policy setting.
Answer: B. Deployments that use the Delivery Controllers or Controller SIDs policy setting, D. Deployments that
use ListOfSIDs
Explanation: In deployments that rely on the Delivery Controllers or Controller SIDs policy or ListOfSIDs, VDA
registration is managed automatically by the system.
Question 41 (Topic 1)
Which two statements are true regarding the Application Security feature of Workspace Environment
Management (WEM)? (Choose two.)
Options:
o A: It is recommended to NOT use both WEM Application Security and Windows AppLocker interfaces at the
same time to manage rules.
Answer: B. Application Security rules set to "Audit" are still enforced, D. It provides control over which
applications users are permitted to run on a given machine
Explanation: The Application Security feature in WEM helps manage which applications users can run on machines. Rules
in "Audit" mode are still enforced, and it is recommended to avoid using both WEM and Windows AppLocker for rule
management.
Question 42 (Topic 1)
Which two statements are valid regarding communication of Flexcast Management Architecture (FMA) services
with the database? (Choose two.)
Options:
o A: Monitoring Service will NOT have an additional separate connection to a secondary database.
o B: Configuration Logging will NOT have an additional separate connection to a secondary database.
o C: Each of the Citrix services establishes its own direct connection to the site database.
o D: Each of the Citrix services uses Citrix Configuration Service (CCS) to connect to the site database.
Answer: C. Each of the Citrix services establishes its own direct connection to the site database, D. Each of the
Citrix services uses Citrix Configuration Service (CCS) to connect to the site database
Explanation: Each FMA service in Citrix Virtual Apps and Desktops establishes a direct connection to the database. The
Citrix Configuration Service (CCS) helps to manage and establish these connections.
Question 43 (Topic 1)
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment and has deployed Workspace
Environment Management (WEM) within the infrastructure to provide resources to users in their sessions. The engineer
initially deployed a Network Printer that works correctly for all users in their sessions. Recently, the engineer added a second
resource, a Network Share Drive, and users report that it is never available in their sessions. The engineer verified that the
Action for this Network Share Drive is correctly configured, and the required Conditions are listed under the WEM Filters node.
The Everyone group has already been added to the Assignments node within the WEM console.
What should the engineer enable from the Advanced Settings node to correct this issue?
Options:
Explanation: Enabling Process Network Drivers under Agent Actions ensures that the network share drive is processed
correctly within the session.
Question 44 (Topic 1)
In which two situations should a Citrix Engineer consider using Elastic App Layers? (Choose two.)
Options:
o A: A few managers need to be able to install applications when accessing a layered image.
o B: Specific applications have compatibility issues and are needed by all users in the company.
Answer: A. A few managers need to be able to install applications when accessing a layered image, D. A specific
application is only needed by a few users in the Marketing department
Explanation: Elastic App Layers allow specific users to access applications without including them in the base image. This
is useful when certain apps are only needed by specific users or departments.
Question 45 (Topic 1)
What is the first step in the migration process of an on-premises Workspace Environment Management (WEM)
environment that is currently in production to a WEM Citrix Cloud service?
Options:
o C: Download the migration tool from the WEM service Downloads tab.
Answer: C. Download the migration tool from the WEM service Downloads tab
Explanation: The first step in migrating a WEM environment to Citrix Cloud is to download the migration tool provided by
Citrix from the WEM service Downloads tab.
Question 46 (Topic 1)
Which component must a Citrix Engineer use to configure security settings on User Layer folders?
Options:
o A: Delivery Controller
o B: Site database
o C: File server
Explanation: Security settings for User Layer folders are typically configured on the file server that stores these folders.
Question 47 (Topic 1)
Which two statements are valid when designing a Citrix Cloud Disaster Recovery plan? (Choose two.)
Options:
o A: Disaster Recovery for Citrix Cloud includes only the components that are NOT within Citrix Cloud.
o D: Local Host Cache (LHC) would NOT be helpful in a Citrix Cloud setup during a Disaster Recovery scenario.
Answer: A. Disaster Recovery for Citrix Cloud includes only the components that are NOT within Citrix Cloud, B.
Citrix Cloud supports multiple zones
Explanation: Citrix Cloud supports multiple zones, and the Disaster Recovery process focuses on components that are
not within Citrix Cloud, as cloud-hosted services are managed by Citrix.
Question 48 (Topic 1)
Scenario: A Citrix Engineer is deploying a Citrix Virtual Apps and Desktops environment. The engineer noticed some Virtual
Delivery Agent (VDA) machines are having registration issues.
Which three items should the engineer review within the company infrastructure to determine the root cause of the issue?
(Choose three.)
Options:
o A: Time synchronization (NTP) configuration of the VDA machines with the domain
o B: The SSL certificates on the VDA machines and the Delivery Controller servers
o D: DNS configurations on either the VDA machines or the Delivery Controller servers
Answer: A. Time synchronization (NTP) configuration of the VDA machines with the domain, C. The VDA
machines registry setting for ListOfDDCs entries, D. DNS configurations on either the VDA machines or the
Delivery Controller servers
Explanation: Time synchronization, ListOfDDCs entries, and DNS configurations are critical for VDA registration with
Delivery Controllers. Misconfigurations in these areas can prevent VDAs from registering properly.
Question 49 (Topic 1)
Which statement is true regarding Citrix Workspace Environment Management (WEM) Agent?
Options:
o A: WEM Agent synchronizes with the WEM Infrastructure Service on port TCP 8287.
o B: WEM Agent can be installed on the Citrix Workspace Environment Management Infrastructure Services
server.
o C: WEM Agent can be installed on either a Windows Desktop OS or on a Windows Server OS.
o D: Norskale Agent Host Service manages WEM Agent and it runs under Network Service.
Answer: D. Norskale Agent Host Service manages WEM Agent and it runs under Network Service
Explanation: Norskale Agent Host Service is responsible for managing the WEM Agent, which runs under the Network
Service account.
Question 50 (Topic 1)
A Citrix Engineer wants to set up multi-site configurations, grouping Citrix Virtual Apps and Desktops
deployments that deliver the same desktop or application so that identical resources can be aggregated for
users.
What are two considerations regarding resources that the engineer needs to consider before setting up multi-
site configuration? (Choose two.)
Options:
Answer: A. They must have the same name, C. They must have the same path on each server to be aggregated
Explanation: To set up a multi-site configuration, resources (applications or desktops) must have the same name and the
same path on each server to ensure consistency and proper aggregation across sites.
Question 51 (Topic 1)
Scenario: A Citrix Engineer is working on a Citrix Virtual Apps and Desktops deployment. The engineer is considering the
implementation of a multi-zone site instead of multiple sites.
Which three benefits of zones can help the engineer to support this decision? (Choose three.)
Options:
o A: Zones can help in managing multiple locations without multiple SQL databases.
o E: Zones can help in controlling application location launches through zone preference.
Answer: C. Zones lower the administrative overhead and implementation cost, D. Zones help users with fast
resource access, E. Zones can help in controlling application location launches through zone preference
Explanation: Zones offer several benefits, including reducing administrative overhead, allowing users to access resources
faster, and providing control over application launches through zone preference.
Question 52 (Topic 1)
Which two components are hosted in Citrix Cloud when using Workspace Environment Management (WEM)
service? (Choose two.)
Options:
Explanation: When using Citrix Cloud with WEM, the WEM Infrastructure Service and the Microsoft SQL Server
database are hosted in Citrix Cloud. The other components like the Active Directory remain on-premises.
Question 53 (Topic 1)
Which two statements are true regarding the Citrix App Layering Management Console? (Choose two.)
Options:
o D: It is a web-based console that runs on the Enterprise Layer Manager (ELM) server.
Answer: A. It is only supported as an on-premises solution for Citrix App Layering, B. It is used to manage
system settings for Citrix App Layering
Explanation: The Citrix App Layering Management Console is used for managing system settings and is primarily
supported for on-premises Citrix App Layering solutions.
Question 54 (Topic 1)
Scenario: A Citrix user is accessing a Windows 10 VDI machine using a personal laptop. The VDI is becoming unregistered
frequently, making it difficult for the user to access it. In order to troubleshoot the issue, a Citrix Engineer is assigned to
collect CDF logs.
On which two components should the engineer run Citrix Diagnostic Facility (CDF) control to capture the required logs?
(Choose two.)
Options:
o A: Windows 10 VDI
o B: Delivery Controller
o C: StoreFront server
Explanation: CDF control logs should be collected from the Windows 10 VDI and the Delivery Controller to
troubleshoot registration issues in the Citrix environment.
Question 55 (Topic 1)
Which two components directly communicate with each other during the process of resource launch, when
Federated Authentication Service (FAS) is used? (Choose two.)
Options:
Answer: B. FAS Server and Delivery Controller, D. FAS Server and Virtual Delivery Agent (VDA)
Explanation: When FAS is used, the FAS Server communicates with the Delivery Controller to validate the authentication
process and with the VDA to complete resource access.
Question 56 (Topic 1)
A Citrix Engineer needs to return an environment back to normal operations after a Disaster Recovery (DR)
occurred.
Which two tasks does Citrix recommend to move the users from the backup datacenter to the primary
datacenter? (Choose two.)
Options:
Answer: A. Terminate existing user sessions, C. Enable access to the primary datacenter
Explanation: Citrix recommends enabling access to the primary datacenter and terminating user sessions that are
currently connected to the backup datacenter to ensure a smooth transition back to normal operations.
Question 57 (Topic 1)
How often should a Citrix Engineer backup the Citrix database, based on Citrix recommendations?
Options:
o B: Daily
o C: Weekly
Explanation: Citrix recommends backing up the Citrix database daily to ensure data integrity and recoverability in case of
issues.
Question 58 (Topic 1)
Which two FlexCast Management Architecture (FMA) services will have an additional connection to a secondary
database apart from having a connection with the Site database? (Choose two.)
Options:
o C: Monitoring service
o D: Broker service
Explanation: The Citrix Configuration service and the Broker service both maintain additional connections to secondary
databases to ensure high availability and data integrity.
Question 59 (Topic 1)
Scenario: A Citrix Engineer is working on a StoreFront subscription synchronization issue in an existing Citrix Virtual Apps and
Desktops environment. One StoreFront server is in the New York datacenter and another in the San Francisco datacenter. The
servers are NOT in the same group. The engineer has run all the required PowerShell commands on both StoreFront servers.
In which local Windows user group of each StoreFront server should the engineer add the Microsoft Active Directory domain
machine accounts?
Options:
o A: CitrixSuscriptionServerUsers
o B: CitrixClusterMembers
o C: CitrixSubscriptionsStoreServiceUsers
o D: CitrixSubscriptionsSyncUsers
Answer: B. CitrixClusterMembers
Explanation: The CitrixClusterMembers group is used to synchronize StoreFront subscriptions across multiple servers in
different datacenters.
Question 60 (Topic 1)
Which tool can a Citrix Engineer use as a first step in reviewing issues with Virtual Delivery Agent (VDA) session
launch status?
Options:
Explanation: The Citrix Health Assistant is an efficient tool for diagnosing and troubleshooting VDA session launch
issues and should be the first step in identifying root causes.
Question 61 (Topic 1)
What are two valid Redundancy options for the Citrix License Server? (Choose two.)
Options:
Answer: C. Create a standby License Server, D. Create a Microsoft cluster with multiple nodes
Explanation: Two common options for Citrix License Server redundancy include setting up a standby License Server or
configuring a Microsoft cluster with multiple nodes to ensure availability.
Question 62 (Topic 1)
Scenario: An organization has two Citrix Virtual Apps and Desktop Sites: Site A and Site B. Both Sites have their own
StoreFront and Citrix ADC. The resource group is placed in Site B. A user from Site A tries to log in and launch an application
from Site B.
The enumeration will occur through StoreFront Site __________ and the application launch will occur through Citrix ADC Site
__________ when Optimal Gateway routing is configured.
Options:
o A: B; A
o B: A; A
o C: B; B
o D: A; B
Answer: A. B; A
Explanation: With Optimal Gateway routing, enumeration happens at StoreFront Site B, and the application launch
occurs through Citrix ADC Site A.
Question 63 (Topic 1)
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment. The engineer has recently
deployed a new Workspace Environment Management (WEM) configuration to help improve the performance of published
applications and desktops.
In which two ways can the new WEM deployment benefit the user experience? (Choose two.)
Options:
Answer: A. Improved overall logon performance for both applications and desktops, C. Pro-active monitoring of
system resources to provide optimal performance
Explanation: WEM improves overall logon performance and monitors system resources, ensuring optimal application
and desktop performance for users.
Question 64 (Topic 1)
Which two considerations should a Citrix Engineer be aware of when creating application layers with Citrix App
Layering? (Choose two.)
Options:
o B: Applications should be installed onto the packaging machine from an ISO or a fileshare location.
o D: Install the appropriate hypervisor tools on the packaging machine at the same time the applications are
installed.
o E: Cross-talk between application layers is NOT supported after they are published in Citrix App Layering.
Answer: A. Windows and Application updates should be turned off, E. Cross-talk between application layers is
NOT supported after they are published in Citrix App Layering
Explanation: Updates should be disabled to avoid conflicts during app layering, and cross-talk between application
layers is not supported once the layers are published.
Question 65 (Topic 1)
Scenario: A user from the 'test.com' domain is browsing a StoreFront server from the 'corp.com' domain with URL:
https://sf.corp.com. The user notices that the browser redirects to a server with URL: https://apps.test.com and again back to
https://sf.corp.com. The user logged into the StoreFront store without getting any authentication prompt.
__________ is the Identity provider and __________ is the authentication method used in this scenario.
Options:
o A: sf.corp.com; Kerberos
o B: sf.corp.com; NTLM
o C: apps.test.com; SAML
o D: apps.test.com; NTLM
o E: sf.corp.com; SAML
Explanation: NTLM is likely being used as the authentication method, with sf.corp.com acting as the identity provider since
the user is not prompted for authentication.
Question 66 (Topic 1)
Which two statements are true when Citrix App Layering is used with Citrix Virtual Apps and Desktops? (Choose
two.)
Options:
o A: Citrix App Layering offers all the same functionality as Citrix Provisioning (PVS).
o D: Citrix Machine Creation Services (MCS) catalogs can be updated within the Citrix App Layering
Management console.
Answer: C. Citrix App Layering reduces management of multiple golden images, D. Citrix Machine Creation
Services (MCS) catalogs can be updated within the Citrix App Layering Management console
Explanation: Citrix App Layering simplifies the management of multiple golden images and allows for updating MCS
catalogs directly through its management console.
Question 67 (Topic 1)
Which two considerations should a Citrix Engineer be aware of when building Platform Layers within a multi-
hypervisor Citrix App Layering environment? (Choose two.)
Options:
o B: Platform Layers are optional and are NOT required when publishing a Layered Image base.
o C: The Enterprise Layer Manager (ELM) Repository storage maintains a maximum limit of five Platform Layers
that can be built and maintained on it at a given time.
o D: There needs to be one Platform Layer per targeted virtual environment considering the provisioning type
and hypervisor destination.
Answer: A. Platform Layers allow for publishing a Layered Image, D. There needs to be one Platform Layer per
targeted virtual environment considering the provisioning type and hypervisor destination
Explanation: Platform Layers are crucial for publishing Layered Images, and each hypervisor environment requires a
specific Platform Layer based on its configuration.
Question 68 (Topic 1)
Scenario: A Citrix Engineer has recently implemented Citrix Gateway in a Citrix Virtual Apps and Desktops environment. The
engineer has done the testing with the test user account for authentication and enumeration of the published resources.
During the authentication at Citrix Gateway, the test user is getting the error ''403 - Forbidden: Access is denied."
Which two configuration steps are causing this error? (Choose two.)
Options:
o A: The StoreFront address in the Citrix Gateway Session Profile matches the site address in StoreFront.
o B: DNS host entry is present on StoreFront to point to the Citrix Gateway virtual server.
o C: The intermediate and root certificates in Citrix Gateway console are NOT linked.
Answer: B. DNS host entry is present on StoreFront to point to the Citrix Gateway virtual server, D. The call
back address is set to HTTP
Explanation: The DNS host entry pointing to the Citrix Gateway virtual server and an incorrectly configured HTTP call
back address are likely causing the 403 error.
Question 69 (Topic 1)
Which three minimum permissions should a Citrix Engineer configure for a user or group in the security settings
of the User Layer folder? (Choose three.)
Options:
o A: Modify Folder
o C: Write Attributes
o D: Read Attributes
Explanation: To ensure proper functioning of User Layer folders, the user or group must have permissions to Create
Folder/Append Data, Read Attributes, and List Folder/Read Data.
Question 70 (Topic 1)
A SQL Database Administrator has been asked to create a backup policy for the Citrix Virtual Apps and
Desktops databases.
Which three SQL databases does a SQL Database Administrator need to back up for a Citrix environment?
(Choose three.)
Options:
o A: Monitoring database
o B: Site database
o E: Subscription database
Explanation: The key databases in a Citrix environment that should be backed up include the Monitoring database, Site
database, and Configuration Logging database to ensure data integrity and recovery.
Question 71 (Topic 1)
Which tool should a Citrix Engineer use to change the priority of an application layer to meet business
requirements?
Options:
o D: LayerPriority Utility
Explanation: The LayerPriority Utility is specifically designed for changing the priority of application layers within Citrix
App Layering.
Question 72 (Topic 1)
Which FlexCast Management Architecture (FMA) service failure can cause issues when accessing Citrix Studio?
Options:
o A: Citrix Analytics
Explanation: Citrix Broker Service is crucial for accessing Citrix Studio. If this service is down, Studio will show a specific
error preventing users from accessing resources properly.
Question 73 (Topic 1)
Options:
Explanation: The User Layer supports applications with add-ins, allowing users to have personalized settings without
affecting the system layer.
Question 74 (Topic 1)
Scenario: A Citrix Engineer is administering a Citrix Virtual Apps and Desktops environment consisting of multiple zones,
including a Primary zone and two Satellite zones. Both the Primary and Satellite zones contain just a single Delivery Controller.
Recently, the Virtual Delivery Agent (VDA) machines in the Primary zone experienced failures with registration, resulting in
many users being unable to access resources for several days.
With minimal administrative effort, the engineer should add a second Delivery Controller to ___________ to prevent this issue
from occurring.
Options:
Explanation: Adding a second Delivery Controller to the Primary zone ensures redundancy, preventing registration
issues with minimal administrative effort.
Question 75 (Topic 1)
When troubleshooting authentication issues through Citrix Gateway, the raw event output from the audit
daemon can be reviewed in the __________.
Options:
o A: ns.log
o B: aaad.debug module
o C: Wireshark trace
o D: nsvpn.log
Explanation: The aaad.debug module provides detailed information when troubleshooting authentication issues
through Citrix Gateway.
Question 76 (Topic 1)
Scenario: A Citrix Engineer is working on ICA policies to restrict sharing of client clipboard data to user sessions. However,
the engineer wants to allow some specific formats to be shared.
Which two policies should the engineer configure to allow this? (Choose two.)
Options:
Correct Answer: A. Client clipboard write allowed formats, D. Session clipboard write allowed formats
Explanation: To allow specific formats to be shared between the client and session clipboard, both Client clipboard write
allowed formats and Session clipboard write allowed formats must be configured.
Question 77 (Topic 1)
Which step does a Citrix Engineer need to perform prior to installing the applications when creating an
application layer?
Options:
o D: Verify that the layer is listed as Deployable in the Citrix App Layering Management Console
Correct Answer: B. Select the OS Layer version to be assigned to the packaging machine
Explanation: Before installing applications on a packaging machine, the engineer must select the appropriate OS Layer
version to be used.
Question 78 (Topic 1)
Scenario: A Citrix Engineer needs to use Citrix App Layering to create layered images for use with a Citrix Virtual Apps and
Desktops environment. The environment requires the following (MCS) Machine Creation Services-provisioned images:
Windows 10 Virtual Delivery Agent (VDA) machines with App A, App B, and App C installed
Windows Server 2016 VDA machines with App A, App B, and App C installed
The environment is in the middle of long-term hypervisor migration and uses both Citrix Hypervisor and Microsoft Hyper-V to
host VDA machines. The images must be available on both hypervisor types. The engineer has determined that Elastic and
User Layers will NOT be used in this environment.
In this scenario, the engineer will need _______________ layered image(s) and _______________ OS Layer(s) to meet the image
requirements while minimizing administrative effort.
Options:
o A: 4; 4
o B: 4; 1
o C: 2; 1
o D: 2; 2
o E: 4; 2
o F: 2; 4
Explanation: The engineer will need 4 layered images (2 for Windows 10 and 2 for Windows Server 2016, each on different
hypervisors) and 2 OS Layers (one for Windows 10 and one for Windows Server 2016).
Question 79 (Topic 1)
From which component does a Delivery Controller get load index session distribution?
Options:
o B: Citrix Director
o C: Citrix policies
o D: Site database
Explanation: The VDA machines provide the load index information to the Delivery Controller, which helps in session
distribution.
Question 80 (Topic 1)
Which two Citrix Diagnostic tools can upload files directly to Citrix Insight Services (CIS)? (Choose two.)
Options:
o A: Citrix Scout
Explanation: Both Citrix Scout and Citrix Receiver Diagnostics can upload diagnostic data directly to Citrix Insight
Services (CIS) for analysis.
Question 80 (Topic 1)
Which two Citrix Diagnostic tools can upload files directly to Citrix Insight Services (CIS)? (Choose two.)
Options:
o A: Citrix Scout
Explanation: Citrix Scout and Citrix Diagnostic Facility (CDF) Control are the primary tools that can be used to directly
upload diagnostic files to Citrix Insight Services (CIS) for analysis.
Question 81 (Topic 1)
Which two components should be managed by the customer as per Citrix recommendations, in order to move
an existing on-premises Citrix Virtual Apps and Desktops environment to Citrix Cloud? (Choose two.)
Options:
o A: Citrix ADC/Gateway
o B: Cloud Connector
o C: VDA Machines
o D: SQL Servers
Explanation: When migrating an on-premises Citrix environment to Citrix Cloud, the Citrix ADC/Gateway and Cloud
Connector need to be managed by the customer, as these components are essential for secure connections and bridging to
the cloud environment.
Question 82 (Topic 1)
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment with both internal and external
users and has deployed Workspace Environment Management (WEM) within the infrastructure to provide resources to users
within their sessions. The engineer has recently added a network printer to WEM under the Actions node, using the New
Network Printer dialog tab, and wants to limit this printer usage to internal Citrix users.
The engineer needs to create a Condition based on ______________ from within the Filters node and ______________ the Matching
Result field within WEM to complete this task.
Options:
Correct Answer: B. Client IP Address Match; add the IP address range 192.168.20.50 to 192.168.20.90 to
Explanation: To limit the printer usage to internal users, the engineer should create a Client IP Address Match condition
and specify the internal IP address range (192.168.20.50 to 192.168.20.90).
Question 83 (Topic 1)
Scenario: A Citrix Engineer recently changed the XML port in the Citrix Virtual Apps and Desktops site. After the change, the
engineer observed that there is an XML communication port mismatch. The engineer immediately identified that the port was
only changed on the Delivery Controller and no change was performed on the StoreFront server.
What are the two ways the engineer can change the port on the StoreFront server to match the changes made on the Delivery
Controller? (Choose two.)
Options:
o A: Run a PowerShell command on the Delivery Controller to change the port on the StoreFront server
Correct Answer: B. Make changes in the web.config file on the StoreFront server, C. Run a PowerShell command
on the StoreFront server
Explanation: The XML communication port can be modified either by editing the web.config file or by using PowerShell
commands on the StoreFront server.
Question 84 (Topic 1)
Scenario: A Citrix Engineer is working on a Citrix Virtual Apps and Desktops deployment. The current setup has three data
centers (A, B, and C) with high network latency between them (more than 300 ms RTT).
Which design should the engineer choose to ensure optimum performance?
Options:
o A: A Multi-zone site with three zones (one primary and two secondary), with a site database in each of the
three zones
o B: A Multi-zone site with three zones (one primary and two secondary), with a site database in the Primary
zone
o C: One site for each data center with a common site database deployed at the largest site
o D: One site for each data center with a separate site database for each site
Correct Answer: D. One site for each data center with a separate site database for each site
Explanation: With high network latency (over 250 ms RTT) between data centers, Citrix recommends deploying separate
sites with separate site databases to ensure optimal performance.
Question 85 (Topic 1)
A Citrix Engineer is in the process of updating application layers. Which three layer integrity messages must
the engineer address before finalizing the application layer? (Choose three.)
Options:
Correct Answer: B. A restart is pending to update drivers on the boot disk, D. A post-installation restart is
pending, E. An MSI install operation is in progress
Explanation: Before finalizing the application layer, the engineer needs to ensure that any pending restarts and MSI
install operations are completed, and no driver updates are pending.
Question 86 (Topic 1)
Which two actions should a Citrix Engineer take when upgrading a Workspace Environment Management (WEM)
environment? (Choose two.)
Options:
o A: Ensure that a valid database backup is created before launching the upgrade process
o C: Run the database upgrade utility under an identity that has sysadmin permissions
o E: Run the WEM database management utility on all the WEM brokers
Correct Answer: A. Ensure that a valid database backup is created before launching the upgrade process, C.
Run the database upgrade utility under an identity that has sysadmin permissions
Explanation: When upgrading WEM, it’s important to create a database backup before proceeding with the upgrade, and
the database upgrade utility must be run under an account with sysadmin permissions.
Question 87 (Topic 1)
How can a Citrix Engineer restrict end user access to an ICA file?
Options:
Explanation: Using the HTML5 Receiver prevents the download of ICA files, ensuring that users can access Citrix sessions
directly through the browser without needing to manage ICA files locally.
Question 88 (Topic 1)
Which delegated administrator permission does a Citrix Engineer need to select to allow an administrator the
ability to allocate resources to users and groups?
Options:
o A: Transformer Manager
o B: Action Manager
o D: Assignment Manager
Explanation: The Assignment Manager role allows administrators to allocate resources to users or groups within the Citrix
environment.
Question 89 (Topic 1)
Scenario: A Citrix Engineer manages a Citrix Virtual Apps and Desktops on-premises environment and needs to move the
Control Layer to Citrix Cloud. Which statement is true regarding Citrix Gateway for this environment?
Options:
o A: The Citrix Cloud Connector acts as a Secure Ticket Authority (STA) server on the Citrix Gateway
o D: The Delivery Controllers act as Secure Ticket Authority (STA) servers on the Citrix Gateway
Correct Answer: A. The Citrix Cloud Connector acts as a Secure Ticket Authority (STA) server on the Citrix
Gateway
Explanation: When using Citrix Cloud, the Citrix Cloud Connector serves as the STA server, which is essential for
validating and securing communication between Citrix Gateway and Citrix Cloud.
Question 90 (Topic 1)
Which two statements are true for this environment using non-persistent machines with Workspace
Environment Management (WEM) Agent? (Choose two.)
Options:
o A: The Agent would need to contact the Infrastructure Service after restart to gather cache data again
o C: The environment is NOT supported because the usage of a persistent disk is mandatory when using WEM
o D: The WEM Agent applies real-time updates only when the persistent disk is used
Correct Answer: A. The Agent would need to contact the Infrastructure Service after restart to gather cache
data again, B. The cache is lost at each restart without a persistent disk
Explanation: In a non-persistent environment, the cache is lost after each restart, and the WEM Agent must contact the
Infrastructure Service to gather cache data again.
Question 91 (Topic 1)
Which three steps should a Citrix Engineer follow to secure the Virtual Delivery Agent (VDA) in the Citrix Virtual
Apps and Desktops environment? (Choose three.)
Options:
Correct Answer: B. Enable TLS on the Delivery Controllers, C. Add the certificate to the VDA, D. Enable TLS on
the VDA
Explanation: To secure the VDA, the engineer should enable TLS on both the VDA and the Delivery Controllers, and add the
appropriate certificate to the VDA.
Question 92 (Topic 1)
Which Active Directory console should the engineer review while configuring Workspace Environment
Management (WEM) settings to ensure no conflicts are encountered?
Options:
Explanation: Reviewing the Group Policy Management console ensures that no conflicts arise between WEM settings and
Group Policies that are applied within the Active Directory.
Question 93 (Topic 1)
Which two considerations are accurate regarding the Process Management feature of Workspace Environment
Management (WEM)? (Choose two.)
Options:
o A: When WhiteList is enabled, any process NOT added to the BlackList will be automatically whitelisted
o B: When using exclusions for either Local Administrators or Specified Groups, it is available for Process
Blacklist, but NOT for Process WhiteList
o C: When WhiteList is enabled, any process NOT added to the WhiteList will be automatically blacklisted
o D: When adding application processes to either the BlackList or the WhiteList, they need to be designated by
the full executable name
Correct Answer: C. When WhiteList is enabled, any process NOT added to the WhiteList will be automatically
blacklisted, D. When adding application processes to either the BlackList or the WhiteList, they need to be
designated by the full executable name
Explanation: In WEM’s Process Management, when WhiteList is enabled, any process not in the whitelist is automatically
blacklisted, and processes must be added with their full executable names to either the blacklist or whitelist.
Question 94 (Topic 1)
Scenario: A Citrix Engineer recently took over a multi-zone environment with one Primary zone in New York and two
Secondary zones in San Francisco and Orlando. The New York zone has two Delivery Controllers, San Francisco has one, and
Orlando has two Delivery Controllers. The engineer received alerts that the Orlando zone Delivery Controllers were down.
Where will the Orlando zone Virtual Delivery Agent (VDA) machines register?
Options:
Explanation: In a multi-zone Citrix deployment, when the local (Orlando) Delivery Controllers are unavailable, the VDAs will
attempt to register with Delivery Controllers in the Primary zone, which in this case is in New York. VDAs in a Secondary
zone never register with Delivery Controllers in another Secondary zone.
Question 95 (Topic 1)
Which three components will be available during a SQL Server outage? (Choose three.)
Options:
o B: Personal Desktops
Correct Answer: A. Hosted Windows and Browser Applications, B. Personal Desktops, C. Hosted Shared
Desktops
Explanation: During a SQL Server outage, the VDAs (Virtual Delivery Agents) and running sessions such as Hosted
Applications, Shared Desktops, and Personal Desktops remain available. However, services that require direct
interaction with the site database, like Citrix Studio, may become unavailable.
Question 96 (Topic 1)
What is the first step that the Enterprise Layer Manager (ELM) server takes when creating application layers?
Options:
o A: Once the engineer manually creates the packaging machine, the ELM server initiates a connection to the
packaging machine
o B: Once a packaging machine is created, the next step is to finalize the targeted installation, using the
application layering finalization software
o C: Once the process to create a layer is initiated from the Layering Management Console, the ELM server then
uses a connector to build a packaging machine
o D: Once the packaging machine is finalized, any application installation or configuration should be performed
and completed
Correct Answer: C. Once the process to create a layer is initiated from the Layering Management Console, the
ELM server then uses a connector to build a packaging machine
Explanation: When creating a new application layer, the Enterprise Layer Manager (ELM) server first uses a connector
to create a packaging machine where the application will be installed.
Question 97 (Topic 1)
How can the engineer ensure that all layers are available in Site A and Site B?
Options:
o A: Reconfigure ELM Site A and ELM Site B to use DFSR for all layers
o B: Configure layer synchronization directly between ELM Site A and ELM Site B using the Citrix App Layering
console
o C: Export all the Standard Layers directly from ELM Site A to ELM Site B and export all other layers to a
Windows Share, then import them to Site B
o D: Export all layers from ELM Site A to a Windows Share, then import them to Site B
Correct Answer: D. Export all layers from ELM Site A to a Windows Share, then import them to Site B
Explanation: The best method to ensure all layers are available across multiple sites is to export layers from ELM Site A to
a Windows Share and then import those layers into ELM Site B.
Question 98 (Topic 1)
How can a Citrix Engineer setup synchronization of subscription data between server groups using a replication
schedule?
Options:
Question 99 (Topic 1)
Scenario: A Citrix Engineer configured two Sites: Production and Disaster Recovery. During an outage in the Production Site,
the Virtual Delivery Agent (VDA) registration in the Disaster Recovery Site has failed.
What are two possible causes for this issue? (Choose two.)
Options:
o A: TCP port 443 is NOT open between the VDA and Delivery Controllers on the Disaster Recovery Site
o B: The VDA is configured with a GPO to register with the Delivery Controllers from the Production Site
o C: The Delivery Controllers were set manually during VDA configuration and point to the Production Site
o D: The Delivery Controllers in the Disaster Recovery Site were NOT able to contact the Delivery Controllers in
the Production Site to complete the registration process
Correct Answer: B. The VDA is configured with a GPO to register with the Delivery Controllers from the
Production Site, C. The Delivery Controllers were set manually during VDA configuration and point to the
Production Site
Explanation: The Virtual Delivery Agent (VDA) may fail to register with the Disaster Recovery (DR) site for the
following reasons:
B: If a Group Policy Object (GPO) is configured for the VDA to register with the Delivery Controllers in the Production
Site, it will fail to register with DR site Delivery Controllers during a production outage.
C: If Delivery Controllers are manually set on the VDA and point to the Production Site, the VDA will not attempt to
register with the DR site controllers.
Scenario: A Citrix Engineer is configuring a User Layer for Windows 10 VDI users. The engineer needs to store only users'
Microsoft Outlook data and settings in the User Layer.
Which User Layer requires the least amount of administrative effort to meet this requirement?
Options:
o B: Office 365
o D: Full
Explanation: The Session Office 365 User Layer requires the least administrative effort for storing only Microsoft Outlook
data and settings. It is optimized for environments where users' Office 365 data, particularly for Outlook, needs to be
stored without creating a full user profile. This method is specifically designed to manage Office 365 data with minimal
overhead.
In which location is the resulting .VHD file stored by the Enterprise Layer Manager (ELM), when creating layers
or layered images with Citrix App Layering?
Options:
A. On a Common Internet File System (CIFS) share location on the local domain file share server
B. On the Repository located on the local storage of the Enterprise Layer Manager (ELM)
C. On the Server Message Block (SMB) file share configured from the Citrix App Layering management console
D. On local storage attached to the hypervisor platform being used to create the images
Correct Answer: B. On the Repository located on the local storage of the Enterprise Layer Manager (ELM)
A. Citrix Diagnostic
B. Citrix Optimizer
C. Citrix Analytics
B. Configuration on a StoreFront server will NOT be overwritten completely by the imported settings.
D. StoreFront configuration exports can include only single server deployments and NOT server group configurations.
Correct Answer: C. Configuration exports can be imported on other machines with StoreFront installed.
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment. The engineer has deployed
Workspace Environment Management (WEM) within the infrastructure. The engineer has recently noticed that the two most
commonly used applications are consuming excessive disk contention and causing bottlenecks on the servers.
Which WEM System Optimization does the engineer need to use to address this issue?
Options:
B. Memory Management
C. Process Management
D. I/O Management
What are two valid options to manage antivirus definition updates in a Citrix App Layering deployment?
(Choose two.)
Options:
A. Enable auto-updates and store updates in the Elastic Layer assigned to each user.
B. Disable auto-updates and redeploy the layer for each update on a schedule approved by the security team.
D. Disable auto-updates and clear the checkbox for "Reinstall the layer" when redeploying the layers.
Correct Answers: B. Disable auto-updates and redeploy the layer for each update, C. Enable auto-updates and
store updates in the user's User Layer
Scenario: A Citrix Engineer has been hired to work on daily troubleshooting issues like session hang, Virtual Delivery Agent
(VDA) registration issues, and non-responsive application issues. The engineer will also need recent trends to prepare health
check reports.
Which component/console should the engineer consider using?
Options:
B. Citrix Insights
C. Citrix Director
D. Citrix Studio
Scenario: A Citrix Engineer needs to configure passthrough for user authentication on the Workspace front. The engineer
confirmed that the Single Sign-on process is running on the user machine and all the other settings are in place on the
machine.
Which two steps should the engineer follow to make passthrough authentication work for the users? (Choose
two.)
Options:
Correct Answers: A. Configure Any Domain setting under Trusted domains in StoreFront, B. Set the
TrustManagedAnonymousXmlServiceRequests to true on the Delivery Controllers
Scenario: A Citrix Engineer has implemented a multi-zone Citrix Virtual Apps and Desktops site. The setup is as follows:
The application Sys-QA is hosted on Virtual Delivery Agent (VDA) machines available in all Satellite zones only.
The application home zone for Sys-QA has been configured as Finland.
A. Denmark
B. Finland
C. Norway
D. Sweden
Which two statements are true regarding Publishing Platform Layer? (Choose two.)
Options:
A. It can be updated directly using the Citrix App Layering Management console.
B. Its purpose is to create a template that outputs to a virtual machine (VM) or a virtual disk.
C. It has limited use-case scenarios, such as making minor updates to an App Layer.
D. It is used every time changes are made, and a Platform Layer is being published.
Correct Answers: A. It can be updated directly using the Citrix App Layering Management console, B. Its
purpose is to create a template that outputs to a virtual machine (VM) or a virtual disk.
Which statement is correct regarding Citrix App Layering templates and layered images?
Options:
A. Templates are NOT required when creating a VHD file for a Citrix Provisioning deployment.
B. To minimize management effort, use the same template to generate layered images for each hypervisor platform
used.
C. Templates are NOT supported for use with physical machine imaging platforms.
D. After machines are provisioned from a layered image, delete that layered image to reduce storage consumption.
Correct Answer: C. Templates are NOT supported for use with physical machine imaging platforms.
Which two statements are valid for Enterprise Layer Manager (ELM) storage? (Choose two.)
Options:
B. When installing the appliance, it comes equipped with an additional 300GB data disk.
C. This storage also stores Elastic Layers and their .JSON files.
D. This storage is used to store all OS, Platform, and App Layers, and versions.
Correct Answers: B. When installing the appliance, it comes equipped with an additional 300GB data disk, D.
This storage is used to store all OS, Platform, and App Layers, and versions.
Which tool allows a Citrix Engineer to monitor and identify inconsistent or suspicious activities on the network?
Options:
A. Citrix Monitor
B. Citrix ADC
C. Citrix Director
D. Citrix Analytics
Which three statements are true about building multiple Elastic Layers? (Choose three.)
Options:
A. There is no limit on how many Elastic Layers can be built as long as there is adequate SMB storage space and
network bandwidth.
B. They are usually built to perform the majority of the application layer workload for users.
D. They greatly reduce the number of golden images required to be managed by Citrix App Layering.
E. They are primarily for applications with compatibility issues for specific users or groups.
Correct Answers: B. They are usually built to perform the majority of the application layer workload for users,
D. They greatly reduce the number of golden images required to be managed by Citrix App Layering, E. They
are primarily for applications with compatibility issues for specific users or groups.
A Citrix Engineer configured two Workspace Environment Management (WEM) brokers that are load-balanced
by Citrix ADC. How do the WEM brokers synchronize their information?
Options:
A. The secondary WEM broker periodically checks in with the primary WEM broker to get the latest settings.
B. The WEM brokers alternatively synchronize with each other on a set schedule.
C. The WEM brokers individually connect to the WEM database to keep their settings updated.
Correct Answer: C. The WEM brokers individually connect to the WEM database to keep their settings updated.
The main transformer setting within Workspace Environment Management (WEM) changes the WEM Agent
machine so that it __________.
Options:
Scenario: A Citrix Engineer is managing a Citrix Virtual Apps and Desktops environment. The engineer has initiated a failover
in the environment and wants to redirect the users to a different StoreFront server.
How can the engineer accomplish this task?
Options:
After a Citrix Engineer configured FAS and SAML in a Citrix Virtual Apps and Desktops site, the Virtual Delivery
Agent (VDA) machine requests the ________ from ________ in order to complete the VDA Windows logon process.
Options:
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment. The engineer recently received
reports from users that logons have been slow, and their desktops take a long time to load. The engineer has decided to
implement Workspace Environment Management (WEM) within the infrastructure and utilize its Profile Management
capabilities to address the user issue.
Which option should the engineer configure to improve the users' desktop load time?
Options:
A. Cross-Platform Settings
B. Synchronization
C. Profile Handling
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment. The engineer recently deployed
Citrix App Layering for improved image management with Machine Creation Services (MCS). The infrastructure requires
various 32-bit and 64-bit operating system platforms.
Which three considerations does the engineer need to be aware of when creating various OS Layers for the
company infrastructure? (Choose three.)
Options:
A. Application and Platform Layers are directly tied to the operating system layer on which they were created.
B. The ELM Repository storage maintains a maximum limit of 10 OS Layers that can be built and maintained on it at
any given time.
C. Before an OS version or layer can be deleted from the Citrix App Layering Management console, it must first NOT
be in use by an existing template.
F. When preparing the OS Layer, the engineer should NOT include any hypervisor tools or utilities within the OS Layer.
Correct Answers: A. Application and Platform Layers are directly tied to the operating system layer on which
they were created, C. Before an OS version or layer can be deleted from the Citrix App Layering Management
console, it must first NOT be in use by an existing template, D. The engineer needs a unique layer for each OS
build created.