1Y0-312 Practice Test 5 — 25 Questions

Question 1

A Citrix Administrator must configure a Citrix Gateway so that when users authenticate, they are required to provide their domain credentials plus a one-time passcode generated by a RADIUS server. The administrator has already configured the RADIUS server as an authentication policy and bound it to the Gateway. However, after testing, users are prompted for credentials twice but are never asked for a passcode. What should the administrator do to resolve this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Ensure that only one LDAP authentication policy is bound to the Gateway and that the RADIUS policy is bound after it.. The double credential prompt indicates that more than one LDAP authentication policy is bound to the Gateway. For two-factor authentication with LDAP and RADIUS, only one LDAP policy should be bound for the first factor, followed by the RADIUS policy for the second factor. The binding order ensures the user is prompted for domain credentials first, then the one-time passcode.

Answer

Change the authentication policy binding order so that the RADIUS policy is first and the LDAP policy is second.

Answer

Modify the RADIUS authentication policy to use the 'pap' authentication type and enable 'second factor'.

Answer

Configure the Citrix Gateway to use 'DualAuth' mode in the authentication profile.

Question 2

An administrator is using Citrix Workspace Environment Management (WEM) to optimize performance in a Citrix Virtual Apps and Desktops 7 environment. Users report that applications take a long time to launch. The administrator wants to reduce application launch times by pre-launching commonly used applications. Which WEM feature should the administrator configure?

Accepted Answer

Application Pre-Launch. Application Pre-Launch in WEM pre-launches applications in the background, so they are ready when the user opens them. This reduces launch times and improves user experience. Other WEM features address different aspects of performance but not pre-launching. The administrator should configure Application Pre-Launch for the applications users complain about.

Answer

Process Hierarchy Control

Answer

CPU Spikes Protection

Answer

Application Optimization

Question 3

A Citrix architect is designing a multi-zone Citrix Virtual Apps and Desktops 7 Site that spans two datacenters. The architect needs to ensure that the Site database is highly available and that session brokering continues if the primary database server fails. Which two components should the architect include in the design? (Choose two.)

Accepted Answer

SQL Server Always On availability group. To ensure database high availability and continuous session brokering, the architect should implement SQL Server Always On availability groups for database failover and enable Local Host Cache on Delivery Controllers. LHC allows brokering to continue if the database is unreachable, while Always On provides a resilient database backend. Together, they minimize downtime and maintain user access during failures.

Answer

Citrix ADC high availability pair for XML brokering

Answer

Multiple Active Directory domain controllers in each zone

Answer

Citrix StoreFront server group with multiple servers

Question 4

A Citrix architect is designing a Citrix Virtual Apps and Desktops 7 Site with multiple zones. The architect needs to ensure that the Site database remains available if the primary SQL Server fails. The company has a SQL Server Always On availability group configured with one primary and one secondary replica. Which additional configuration is required on the Delivery Controllers to support automatic database failover?

Accepted Answer

Configure the Delivery Controllers to use the availability group listener name as the database server.. For automatic database failover with SQL Server Always On availability groups, the Delivery Controllers must be configured to connect to the availability group listener. The listener is a virtual network name that always points to the current primary replica. When a failover occurs, the listener is updated, and the Controllers automatically reconnect to the new primary without manual intervention. This provides the required high availability for the Site database.

Answer

Configure the Delivery Controllers to use a DNS alias that points to the primary SQL Server and manually update the alias during failover.

Answer

Install the SQL Server Native Client on each Delivery Controller and configure a connection string with both replica names.

Answer

Configure the Delivery Controllers to connect to the secondary replica and enable read-only routing.

Question 5

An administrator is migrating a Citrix Virtual Apps and Desktops 7 site to Citrix DaaS on Microsoft Azure. The on-premises site uses Provisioning Services (PVS) to stream images to 500 virtual desktops. The administrator wants to use Machine Creation Services (MCS) in Azure for the migrated desktops. Which step must the administrator take to ensure that the existing PVS vDisk images can be used with MCS in Azure?

Accepted Answer

Prepare a master image by installing the Citrix VDA for MCS, generalize it with Sysprep, and then upload it to Azure as a managed disk.. Migrating from PVS to MCS in Azure requires preparing a new master image that is compatible with MCS and Azure. This involves installing the Citrix VDA for MCS, generalizing the image with Sysprep, and uploading it as a managed disk. PVS vDisks cannot be directly used with MCS; they must be converted through a proper image preparation process. The Citrix Cloud Migration Service does not handle image conversion.

Answer

Convert the PVS vDisk to a VHDX file and upload it to an Azure storage account as a managed disk.

Answer

Mount the PVS vDisk on a Citrix Cloud Connector and use the Azure Resource Manager template to create a managed disk.

Answer

Use the Citrix Cloud Migration Service to automatically convert PVS vDisks to MCS-compatible images in Azure.

Question 6

An administrator is troubleshooting an environment where published applications launch successfully but published desktops fail with a 'Cannot start desktop' error. Both resource types are in the same Delivery Group, and the VDA is registered. The administrator wants to confirm which Delivery Group properties differ between the application and desktop launch paths. Which action should the administrator take?

Accepted Answer

Compare the Desktops and Applications nodes in Citrix Studio for the Delivery Group, focusing on the desktop's assigned users and published name. In Citrix Studio, applications and desktops are published through separate nodes even when they share a Delivery Group, and each carries its own user assignments and published name. When applications launch but desktops fail, the most likely cause is a configuration difference on the Desktops node, such as a missing entitlement or an incorrect published name. Comparing the two nodes isolates that difference. Machine registration, profile logs, and HDX policy do not explain a desktop-only launch failure when the same VDA serves working applications.

Answer

Run Get-BrokerMachine on the Delivery Controller and compare the registration state of the VDA hosting the desktop

Answer

Review the Citrix Profile Management log on the VDA for desktop-specific profile load errors

Answer

Check the HDX policy applied to the Delivery Group to confirm desktop sessions are not blocked by a policy filter

Question 7

A Citrix Administrator is optimizing a Virtual Apps and Desktops environment for scalability. Users access published applications hosted on Server OS VDAs. The administrator observes that during peak hours, the CPU utilization on the VDAs spikes, and applications become unresponsive. After analysis, it is determined that many users are running a resource-intensive application simultaneously. Which Citrix feature should the administrator implement to limit the CPU consumption of that specific application per session?

Accepted Answer

CPU limit policy in Citrix Workspace Environment Management (WEM).. The CPU limit policy in WEM is designed to restrict the CPU usage of specified processes, directly solving the issue of a resource-intensive application causing CPU spikes. Other options either do not enforce hard limits or are not available in the specified management console.

Answer

CPU priority levels in Workspace Environment Management (WEM).

Answer

CPU affinity settings in Citrix Studio.

Answer

Process priority in Citrix Studio.

Question 8

A Citrix architect is designing a new Citrix Virtual Apps and Desktops 7 Site. The architect needs to determine the minimum number of Delivery Controllers required to provide high availability for the Site database and brokering services. What is the minimum number of Delivery Controllers that should be deployed?

Accepted Answer

Two. The minimum number of Delivery Controllers for high availability is two. This ensures that if one controller fails, the other can continue to broker sessions and manage the Site. While more controllers can be added for scalability or zone-specific needs, two is the baseline for redundancy in a production environment.

Answer

Four

Answer

Three

Answer

One

Question 9

An administrator is configuring Citrix Gateway to use SAML authentication with Microsoft Azure AD as the identity provider. The requirement is that users must authenticate using Azure AD and then be authorized to access specific published applications based on their group membership in Azure AD. The administrator has configured the SAML action and policy on Citrix ADC and imported the Azure AD certificate. Which Citrix ADC feature should be configured to extract the group membership from the SAML assertion and use it for authorization?

Accepted Answer

Configure a Citrix ADC authorization policy that evaluates the SAML group attribute.. After SAML authentication, Citrix ADC can extract attributes from the assertion using SAML attribute configuration. To authorize users based on group membership, an authorization policy must be created that evaluates the extracted group attribute. This policy can then be bound to the gateway to allow or deny access to specific resources. This approach leverages the SAML assertion to enforce granular access control, meeting the requirement without additional LDAP queries.

Answer

Enable Session Policy evaluation with the SAML attribute.

Answer

Use Citrix ADC's LDAP integration to query Azure AD for group membership.

Answer

Configure a SAML attribute and bind it to the authentication policy.

Question 10

An administrator is troubleshooting performance issues in a Citrix Virtual Apps and Desktops 7 environment. Users report that applications are slow to launch, and the administrator notices high CPU utilization on the VDA machines. After analysis, the administrator determines that the Citrix Workspace Environment Management (WEM) agent is consuming excessive CPU. Which WEM feature should the administrator adjust to reduce CPU usage while maintaining application optimization?

Accepted Answer

CPU Spikes Protection. CPU Spikes Protection in WEM allows administrators to set thresholds and actions to limit CPU usage of processes, including the WEM agent. Adjusting this feature can reduce CPU consumption while preserving application optimization. Other features address memory or process priorities but not CPU limiting for the agent.

Answer

Memory Optimization

Answer

Application Optimization

Answer

Process Hierarchy Control

Question 11

A Citrix Administrator is configuring smart card authentication for internal users accessing published applications through Citrix Workspace app. The administrator wants to enforce the use of a specific cryptographic service provider (CSP) on the VDA for all smart card operations. Which Citrix policy setting should the administrator configure?

Accepted Answer

Smart card cryptographic service provider. The Smart card cryptographic service provider policy setting is designed to specify which CSP the VDA uses for smart card operations. By setting this policy, the administrator can enforce a particular CSP, ensuring compatibility and security. Other settings like certificate selection or logon enablement do not control the CSP. Thus, this setting is the correct choice to meet the requirement.

Answer

Smart card reader removal policy

Answer

Smart card authentication certificate

Answer

Smart card logon

Question 12

An administrator is planning to migrate an on-premises Citrix Virtual Apps and Desktops 7 site to Citrix DaaS. The administrator wants to use the Citrix Cloud Migration Service to migrate the configuration. What is the first step the administrator must perform before initiating the migration?

Accepted Answer

Install the Citrix Cloud Connector in the on-premises resource location and connect it to Citrix Cloud.. Before using the Citrix Cloud Migration Service, the administrator must install and register a Citrix Cloud Connector in the on-premises resource location. The Cloud Connector provides the communication path between Citrix Cloud and the on-premises Delivery Controller, allowing the Migration Service to read the existing configuration. Without it, the migration cannot be initiated.

Answer

Export the on-premises Site database to a BAK file and upload it to Azure Blob Storage.

Answer

Create a new Citrix DaaS site and configure all the machine catalogs and delivery groups manually.

Answer

Upgrade all on-premises Delivery Controllers to the latest version of Citrix Virtual Apps and Desktops.

Question 13

An administrator is troubleshooting a Citrix Virtual Apps and Desktops 7 environment where users complain that their sessions take a long time to log on. The administrator suspects that a logon script is causing delays. Which Citrix feature can be used to analyze the logon duration and identify the specific phase causing the delay?

Accepted Answer

Citrix Director logon duration breakdown. Citrix Director's logon duration breakdown is the correct feature for analyzing logon performance. It provides a visual representation of each logon phase, enabling the administrator to identify delays caused by scripts, profiles, or other factors, and to take corrective action.

Answer

Windows Performance Monitor with Citrix Logon Provider counters

Answer

Citrix Studio logon performance monitor

Answer

Citrix Workspace app logon timer

Question 14

An administrator is using Provisioning Services (PVS) to stream a vDisk to 100 target devices. The administrator notices that the write cache is filling up quickly on the target devices, causing performance degradation. The current write cache is configured to be stored in RAM with a maximum size of 2 GB. The administrator wants to change the write cache to be stored on a local disk to improve performance. Which action should the administrator take?

Accepted Answer

Edit the target device properties and set the write cache to 'Cache on device hard drive' with a desired size.. Write cache settings in PVS are configured on target devices or device collections. To change the write cache from RAM to local disk, the administrator must modify the target device properties and select 'Cache on device hard drive'. This offloads writes to the local disk, reducing RAM usage and improving performance.

Answer

Recreate the vDisk in Private Image mode and enable local write cache.

Answer

Use the PVS Console to change the server-side write cache to disk.

Answer

Modify the vDisk properties and change the write cache type to 'Cache on device hard drive'.

Question 15

An administrator is migrating an on-premises Citrix Virtual Apps and Desktops 7 site to Citrix DaaS. The on-premises site uses a Citrix License Server to license the VDAs. After migration, the administrator wants to ensure that licensing continues to work. What must the administrator do?

Accepted Answer

Ensure that the Citrix Cloud account has the appropriate user/device licenses assigned.. After migrating to Citrix DaaS, licensing transitions from on-premises to cloud-based subscription licensing. The administrator must ensure that the Citrix Cloud account has the appropriate user/device licenses assigned to cover the migrated environment. On-premises License Servers are not used, and Cloud Connectors do not handle licensing. This ensures compliance and continued operation.

Answer

Deploy a new Citrix License Server in the resource location and point the VDAs to it.

Answer

Install Citrix Licensing Manager on the Cloud Connectors to manage licenses.

Answer

Continue using the existing on-premises License Server by configuring the Cloud Connectors to forward license requests.

Question 16

A Citrix Virtual Apps and Desktops 7 administrator is troubleshooting a VDA that fails to register with the Delivery Controller. The 'Citrix Desktop Service' is running, and the event log shows 'Registration failed: The broker service is unavailable.' Which two actions should the administrator take to resolve this issue? (Choose two.)

Accepted Answer

Verify that the Delivery Controller's Broker Service is running and listening on the correct port.. The error 'Registration failed: The broker service is unavailable' indicates that the VDA cannot communicate with the Broker Service on the Delivery Controller. The two most direct actions are to ensure the Broker Service is running and listening on the correct port, and to verify that firewall settings on the Controller allow inbound traffic on that port. These steps address the root cause of the unavailability and are essential for restoring registration.

Answer

Restart the Citrix Desktop Service on the VDA.

Answer

Reinstall the VDA software on the affected machine.

Answer

Verify that the VDA's machine account is not locked out in Active Directory.

Question 17

An administrator is migrating an on-premises Citrix Virtual Apps and Desktops 7 site to Citrix DaaS. The on-premises site uses Citrix Profile Management with a file share hosted on a Windows Server 2016 file server. After migration, the administrator wants to continue using Citrix Profile Management but needs to ensure that user profiles remain accessible to the VDAs in the resource location. Which action must the administrator take?

Accepted Answer

Ensure that the VDAs in the resource location can access the existing profile share over the network.. The key requirement for continuing to use Citrix Profile Management after migration is that the VDAs in the resource location must have network access to the profile share. The share can remain on-premises or be moved to a cloud-based file service, but connectivity is essential. Recreating profiles or using a database are not valid approaches. Maintaining access to the existing share ensures a seamless user experience.

Answer

Configure Citrix Profile Management to use a database instead of a file share for profile storage.

Answer

Migrate the profile share to Azure Files and configure Citrix Profile Management to use the Azure Files path.

Answer

Recreate all user profiles in the new environment because profiles cannot be migrated.

Question 18

A Citrix administrator is setting up a new StoreFront store for external users. The security team requires that users authenticate using their Active Directory credentials, and that the authentication process is protected with multi-factor authentication (MFA). The company uses Citrix Gateway with RADIUS for MFA. Which authentication method should the administrator configure on Citrix Gateway to meet these requirements?

Accepted Answer

LDAP authentication with a RADIUS policy as a secondary authentication.. The correct configuration is to set up LDAP authentication for Active Directory and then a RADIUS policy as a secondary authentication factor. This provides the required multi-factor authentication: the user's AD password (first factor) and a RADIUS token (second factor). This is a common and supported configuration on Citrix Gateway. Other methods either do not provide MFA or do not use AD credentials directly.

Answer

Certificate authentication only, with the certificate mapped to the AD user account.

Answer

RADIUS authentication only, with the RADIUS server configured to proxy AD credentials.

Answer

SAML authentication with Citrix Gateway acting as the Service Provider.

Question 19

A Citrix Virtual Apps and Desktops 7 administrator is troubleshooting an issue where users cannot launch any published applications from a specific StoreFront store, but other stores on the same server work correctly. The administrator wants to verify whether the store's Delivery Controller list is reachable and correctly configured. Which action should the administrator take?

Accepted Answer

Use the StoreFront console to check the store's Delivery Controller addresses and test connectivity to each.. When a single StoreFront store fails while others succeed, the issue is likely in that store's configuration, most commonly its Delivery Controller list. The StoreFront console shows the configured controllers for each store and provides a connectivity test, which directly verifies reachability and authentication. This targeted check is the correct way to confirm whether a misconfigured or unreachable controller is causing the store-specific failure.

Answer

Restart the Citrix StoreFront service on the server and clear the browser cache on client devices.

Answer

Review the VDA's event log for registration errors during the failed launch attempts.

Answer

Run 'Get-BrokerSite' on the Delivery Controller to verify the site is active.

Question 20

An administrator is implementing SmartAccess policies in a Citrix Virtual Apps and Desktops 7 environment with Citrix Gateway. The requirement is to allow users to access a published application only if they connect through Citrix Gateway and their endpoint has a specific registry key set. The administrator has configured the Gateway and StoreFront. Which Delivery Controller policy filter should be used to enforce this condition?

Accepted Answer

Endpoint Analysis. SmartAccess policies in Citrix Virtual Apps and Desktops can be filtered based on the results of endpoint analysis performed by Citrix Gateway. The Endpoint Analysis filter allows the Delivery Controller to apply policies conditionally when the endpoint meets specific criteria, such as a registry key being present. This enables granular control over access to published applications based on endpoint posture. The administrator must configure the endpoint analysis scan on the Gateway to include the registry check, and then use the Endpoint Analysis filter in the Delivery Controller policy.

Answer

Access Control

Answer

Citrix Gateway protocol

Answer

User or Group