1Y0-204 Troubleshooting Practice Question
An administrator observes that users on a specific subnet cannot launch virtual desktops, while users on other subnets have no issues. What is the most likely cause?
⚠ Common exam trap
Candidates waste time troubleshooting VDA software or profile configurations when the problem affects only a single subnet, indicating a networking issue.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Missing subnet routing or firewall rule.
Network segmentation and routing policies often interfere with ICA traffic. If one subnet lacks the necessary routing, firewall rules, or DNS configuration to reach the VDA IP addresses, the session handshake fails. Identifying this as a network-specific issue allows the administrator to focus on local subnet routing and firewall rules rather than VDA-side software configurations, which have already been proven to work for other functional subnets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Incorrect VDA GPO settings.
Why it's wrong here
GPOs apply to the VDA itself, not the client subnet. If the GPO settings were incorrect, the issue would affect all users regardless of their location, not just a specific subnet. Therefore, the scope of the problem suggests a network-layer issue rather than a configuration issue on the VDA.
- ✓
Missing subnet routing or firewall rule.
Why this is correct
When only a specific subnet experiences connection failures, the root cause is almost always network-related, such as a missing route in the core switch or a restrictive firewall policy preventing ICA traffic from that specific IP range to the VDA subnet, effectively blocking the session establishment for those users.
- ✗
VDA resource exhaustion.
Why it's wrong here
Resource exhaustion on the VDA would impact users randomly or based on the load balancing algorithm, not based on the client's source IP address or subnet. The VDA treats all incoming connection requests identically regardless of the client's network location, assuming the packets successfully reach the machine.
- ✗
Corrupt user profile.
Why it's wrong here
A corrupt profile is a per-user issue, not a per-subnet issue. If the profile were the problem, users from the affected subnet would still be unable to launch sessions even if they logged in from a different location, and the issue would not be tied to the network origin.
Visual reference
About these practice questions
This 1Y0-204 question is part of Courseiva's 216-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-204 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-204 exam.