1Y0-204 Troubleshooting Practice Question
An administrator needs to troubleshoot a session launch issue where the user receives a 'Cannot start app' error. Which TWO logs should be reviewed on the VDA? (Choose two.)
⚠ Common exam trap
Candidates often look only at Citrix-specific logs, forgetting that session launch failures frequently stem from underlying Windows OS service or component issues.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Application log
When a session fails to launch, the VDA-side event logs capture the interaction between the Citrix process and the local Windows subsystem. Checking both the Application and System logs is vital because the failure might originate from a core Windows component (like a service) or the Citrix agent itself (like VDA software errors). This dual-log review covers both the infrastructure dependencies and the specific application-layer errors required for troubleshooting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Application log
Why this is correct
The Application log contains events from the Citrix Desktop Service and other installed applications. If the session launch fails due to a software crash, user profile error, or policy enforcement issue within the Citrix agent, the error details and exception codes will be logged here for analysis.
- ✓
System log
Why this is correct
The System log records events from the Windows OS, including driver failures, group policy service start-up issues, and network connectivity events. These are often the root cause of session launch failures, as the VDA relies on a stable OS environment to successfully spawn the user session process.
- ✗
Security log
Why it's wrong here
The Security log tracks authentication and authorization events, such as login attempts and object access. While useful for auditing, it rarely contains the technical root cause for a 'Cannot start app' error, which is typically a functional failure of the application environment rather than a security event.
- ✗
Setup log
Why it's wrong here
The Setup log records events related to Windows role and feature installations, including software updates. It does not track ongoing runtime errors, session launches, or user-space application failures, making it irrelevant for troubleshooting day-to-day session launch issues faced by users after the initial software deployment.
- ✗
ForwardedEvents log
Why it's wrong here
The ForwardedEvents log is used to collect events from remote machines to a central location. It is not a source of local error information on the VDA itself and does not provide the specific, immediate diagnostic data needed to investigate a failed session launch on that machine.
About these practice questions
Courseiva writes every 1Y0-204 question from scratch — 216 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-204 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-204 exam.