Citrix.Selftestengine.1Y0-456.v by.JUSTA.28q

Transcription

1 Citrix.Selftestengine.1Y0-456.v by.JUSTA.28q Number: 1Y0-456 Passing Score: 800 Time Limit: 120 min File Version: 20.5 CITRIX 1Y0-456 EXAM QUESTIONS & ANSWERS Exam Name: Citrix Access Suite 4.0: Build/Test

2 Selftestengine QUESTION 1 SIMULATION Simulation Exhibit:

3

4 Certkiller.com users access resources using a variety of client devices, some clinic-owned and some personal. A number of applications in the current environment are not running correctly on certain types of client devices, causing a steady increase in support calls to the Help Desk. The Clinic CIO wants to limit the client devices that can be used to access resources. Because only client devices that can support all of the currently installed applications are members of the Certkiller AC domain, limiting access to only domain-member devices should solve the problem. You are requested to create a scan named " Certkiller AC Domain" that does the following: * Ensures only client devices which are members of the Certkiller AC domain can be used to access resources. * Runs for the AllUsers logon point. * Runs against all client devices regardless of the operating system being used on the client device. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Create Endpoint Analysis / Machine Identification Scans / Citrix Scans fordomain Membership 2. Apply to Logon Point

5 QUESTION 2 SIMULATION Simulation Exhibit:

6

7 Certkiller Gmbh. Currently uses LDAP for both authentication and authorization through their Citrix Access Gateway Advanced Edition 4.2 deployment. They have just purchased RSA Tokens for external users in order to improve access security. As part of this upgrade in security, the IT team has decided to use Active Directory for primary authentication and authorization. You are required to perform the following tasks: 1. Enable all users to use Active Directory for authentication and authorization. 2. External users will be required to use RSA Tokens for secondary authentication A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Edit Logon Point QUESTION 3 SIMULATION Simulation Exhibit:

8

9

10 Certkiller.com is using Access Gateway Advanced Edition to control access to the file shares, network resources and in the Certkiller.com corporate office Certkiller.com wants to be able to improve communication among managers and clerks by providing them access to important corporate information using an internal web site. Because managers and clerks will be using computers which are unsecured to access the information, an additional layer of authentication is required. The users of the site should be able to browse to the URL for the site from external locations whenever needed. You are required to perform the following tasks: 1. The name of the web site must be Certkiller News 2. The web site must be listed on the navigation page of the managers and clerks 3. The web site uses cookies and requires NTLM authentication 4. The actual URL of the site should b visible to the users 5. The default policy created during the creating of this resource must be edited to allow only managers and clerks to access the web site. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Create Web Resources / Select Bypass Web Proxy URL rewriting

11 QUESTION 4 SIMULATION Simulation Exhibit:

12

13 Certkiller.ocmis using Access Gateway Advanced Edition 4.2 to control access to the resources stored on servers at the office. Attorneys and their associates want to be able to securely access their legal briefs and the Legal Reference Library on the servers at the office so they can make updates to the briefs as necessary from both inside and outside the office. You are required to perform the following tasks: * A single file share resource named "PM Legal Resources" must be used to make both file shares available through Access Gateway Advanced Edition. * Both the \\PM\LegalBriefs and \\PM\LegalRefLibrary file shares must be accessible. * The file shares must be listed on the navigation page for the Attorneys and the Associates user groups, but not on the navigation page for the Clerks user group. * The file shares must be available only when accessed through the existing Legal logon point. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Use Access Suite / Resources / Create File Shares and create default Policy Edit the Policy / Apply to Legal Logon Point / Select Users (Associates usergroups and Attorneys)

14 QUESTION 5 You work as a network Administrator at Certkiller.com. You have recently installed Access Gateway Advanced Edition. You have configured several login points in the Access Suite Console for internal and external access into the environment. Now you want to use the logon points to access specific Presentation Server farms. What can you edit to specify the Presentation Server farms? A. The farm properties. B. The Gateway Appliance node C. The logon points D. The Access Gateway node E. The server properties Correct Answer: C Section: (none) Explanation Explanation/Reference: Explanation:

15 QUESTION 6 Simulation Exhibit:

16 You work as a network Administrator at Certkiller.com. You have completed the implementation of the Access Gateway Advanced Edition 4.2 in a test

17 environment. Use the simulation exhibit (Note: further simulation information is not available within this questions) to decide if the following statement is true or not. Statement: Secure Access Client launches on client device when a member of the External User group is granted access. A. True B. False Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Check the logon Point QUESTION 7 SIMULATION Simulation exhibit:

18

19 Modification exhibit: Certkiller.com, a fast growing firm, deploys Citrix Password Manager in a pilot environment. The pilot is deemed successful and the IT team will roll the environment into full production. Enough licenses were purchased to use named-user licensing for everyone in the Marketing Department. However, prior to deployment, several changes must be made to the Marketing Group configuration in order to address minor issues encountered during the pilot. CPM01. Certkiller.com is the name of the server hosting the Password Manager Service. Certkiller.com's security guidelines have changed since the pilot began. Because of these changes, the administrator needs to make the modifications that are displayed in the modification exhibit. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. User Password Manage Access Suite console / User Configurations / Edit user configurations / Application Support

20 2. Basic Agent Interaction

21 3. Licensing 4. Key Management

22 QUESTION 8 SIMULATION Simulation exhibit:

23

24 Requirement exhibit: Certkiller.com is using Access Gateway Advanced Edition 4.2 to provide users access to the resources in the Certkiller.com corporate office. Using existing endpoint the administrators at Certkiller.com want to protect the network from viruses penetrating the network through client devices. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Verify which is the internal logon Point / Select Logon Points / Edit Logon points

25 2. User Access Console for Advanced Access / Endpoint Analysis / Antivirus Scans / Citrix Scans for McAfee VirusScan Enterprise and apply tologon point QUESTION 9 SIMULATION Simulation exhibit:

26 Administrators from CertK in are installing Citrix Password Manager 4.1 into a multi-domain forest based on Windows Server As a large, multi-national company, Certkiller has a parent domain Certkiller.com, and has two child-domains: USA (USA. Certkiller.com) and Europe (Europe. Certkiller.com). The managers of the USA. Certkiller.com domain have decided to install Citrix Password Manager 4.1 for their users in a pilot environment. The following design decisions have been made: * Active Directory will be used as the Central Store

27 * USA. Certkiller.com will be the only ones using Password Manager at this time. Use the following assumptions: * Installation is completed, using the installation menu, not a command prompt. * Three computers are available to you: ** ADRoot. Certkiller.com - A domain Controller for the parent domain Certkiller.com ** DJC_DC1.USA. Certkiller.com - A domain controller in the USA child domain, USA. Certkiller.com. ** DJC_DC2.Europe. Certkiller.com - A domain controller in the Europe child domain, Europe. Certkiller.com. * The Citrix Password Manager 4.1 CD is available at \\APPS\ Certkiller.com\CPN. Task: Prepare the USA. Certkiller.com domain for Password Manager Installation. First select a computer from the following three: ADRoot. Certkiller.com DJC_DC1.USA. Certkiller.com DJC_DC2.Europe. Certkiller.com Note: You can configure one or several computers. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Use the CD on the root Domain ADRoot. Certkiller.com / Prerequisite: Create your Central Sote / Active Director / Extend youractive Director Schema for the new directory objects.

28 2. Logon to DJC_DC1.USA. Certkiller.com and Create your central store inthe extended schema. (Use Schema Manager and check Classes Node / citrix- SSOConfig and citrix-sssosecrect) QUESTION 10 Simulation exhibit:

29

30 You work as a network administrator for CertKiller.com. You have completed the implementation of Access Gateway Advanced Edition 4.2 in a test Environment. You are required to use the Access Suite Console to verify that the environment is setup to meet the requirement in the statement below. Specification statement: The documents in the \\ Certkiller 1\TECHDOCS file share available to the Internal Users group in the Certkiller.com domain only. A. The specification statement is met. B. The specification statement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Verify the Files Share Resources 2. Select Policies / Edit the Files hare Policy / Select User

31 QUESTION 11 Simulation exhibit:

32

33 You work as a network administrator for Certkiller.com. You have completed the implementation of Access Gateway Advanced Edition 4.2 in a test Environment. You are required to use the Access Suite Console to verify that the environment is setup to meet the requirement in the statement below. Specification statement: The Order Forms web resource is available and points to A. The specification statement is met. B. The specification statement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Select Resources / Web Resources QUESTION 12 Simulation exhibit:

34

35 You work as a network administrator for Certkiller.com. You have completed the implementation of Access Gateway Advanced Edition 4.2 in a test Environment. You are required to use the Access Suite Console to verify that the environment is setup to meet the requirement in the statement below. Specification statement: The Order Forms web resource can be viewed by members of the External Users group in HTML. A. The specification statement is met. B. The specification statement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Check the Policy Filter and insure HTML Preview is allowed for the Order Forms web resources and External Users Group has access. QUESTION 13 Simulation exhibit:

36

37 Your work as a network administrator at Certkiller.com.A pilot setup includes a new implementation of Presentation Server 4.0 is nearly ready for production environment. Before being deployed, the IT Manager has requested a final verification that the implementation meets the agreed-upon specifications and guidelines. Among the full set of specifications that the environment has been built to meet are following requirement: * Microsoft Excel 2003 is installed and published for use by employees only. You are required to use the simulation environment (note: not fully available here) to verify that the environment is setup to meet the requirement- A. The requirement is met. B. The requirement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. User Presentation Server Management console / Click Properties ofthe Excel 2003 and ensure Users

38 QUESTION 14 Simulation exhibit:

39

40 Your work as a network administrator at Certkiller.com.A pilot setup includes a new implementation of Password Manager is nearly ready for a production environment. Before deployment, the Security Office has requested a final verification that the Password Manager implementation meets the agreed upon specification and guidelines of the environment's design. Among the full set of specifications that the environment has been built to meet are following requirement: * Only three applications are configured for use with Password Manager. You are required to use the MetaFrame Access Suite Console environment (note: not fully available here) to verify that the environment is setup to meet the requirement- A. The requirement is met. B. The requirement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Check for three Application Definitions QUESTION 15 Simulation exhibit:

41

42

43 Your work as a network administrator at Certkiller.com.A pilot setup includes a new implementation of Password Manager is nearly ready for a production environment. Before deployment, the Security Office has requested a final verification that the Password Manager implementation meets the agreed upon specification and guidelines of the environment's design. Among the full set of specifications that the environment has been built to meet are following requirement: * Users must answer three (3) security questions correctly. You are required to use the MetaFrame Access Suite Console environment (note: not fully available here) to verify that the environment is setup to meet the requirement. A. The requirement is met. B. The requirement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Identity Verification / Question-Based Authentication / Manage questions / Select Security Questions

44 QUESTION 16 Simulation exhibit:

45

46 Your work as a network administrator at Certkiller.com.A pilot setup includes a new implementation of Password Manager is nearly ready for a production environment. Before deployment, the Security Office has requested a final verification that the Password Manager implementation meets the agreed upon specification and guidelines of the environment's design. Among the full set of specifications that the environment has been built to meet are following requirement: * Users must be connected to the central store for Password Manager to function as their agent. You are required to use the MetaFrame Access Suite Console environment (note: not fully available here) to verify that the environment is setup to meet the requirement. A. The requirement is met. B. The requirement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Check the Agent is logged on 2. Check User Configuration

47 3. Check Password Manager Service Configuration QUESTION 17 Simulation exhibit:

48

49 Your work as a network administrator at Certkiller.com.A pilot setup includes a new implementation of Password Manager is nearly ready for a production environment. Before deployment, the Security Office has requested a final verification that the Password Manager implementation meets the agreed upon specification and guidelines of the environment's design. Among the full set of specifications that the environment has been built to meet are following requirement: * Passwords for applications must be at least 8 and no more than 20 characters with no specific restrictions based on using either numbers or letters. In addition, when changing passwords, users cannot use their previous password. You are required to use the MetaFrame Access Suite Console environment (note: not fully available here) to verify that the environment is setup to meet the requirement- A. The requirement is met. B. The requirement is not met. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Password Policies / Edit Password Policy / Basic Password Rules

50 QUESTION 18 SIMULATION Exhibit:

51 Certkiller.com needs to provide access to MyCitrix for all of its reseller consultants so that they have easy access to the latest Citrix downloads for their customers. To ensure ease of access, Password Manager needs to be configured to authenticate to automatically. Task: Configure as a Password Manager-enabled application using the Access Suite Console, accepting the default settings, where applicable. The user configuration and assignment will be done at a later time. A. B. C. D. Correct Answer: Section: (none) Explanation

52 Explanation/Reference: Explanation: 1. User Password Manager Access Suite Console / Password Manager /Application Definitions / Create Application definition (Web Application type) 2. Click Edit forms / Create submit Credentials / Select / in the Define fields section and locate Username field Password field and submit and assign

53 QUESTION 19 SIMULATION

54

55 Task exhibit: Certkiller.com is implementing Citrix Password Manager 4.1. The security team requires the use of question-based authentication for users. The pilot is complete and the IT team is preparing to deploy the implementation into production. The design for the implementation specifies that all security questions must be associated with the user's personal life, preferably regarding their youth (age 25 or younger) or education. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Check User Configurations / Edit User Configurations / Check Key management & Self- Service Features & Key Management & Provisioning Module Self- Service Features - all users to reset their Windows password or unlock their DOMAIN account without administrator intervention.

56 2. Insure the selected correct AD user group is in the User Configuration Description 3. Configure Identity Verification / Manage Questions

57 QUESTION 20 SIMULATION Exhibit:

58

59 An IT team is conducting a pilot to test a redesign of a multi-zone implementation of Presentation Server 4.0 that spans geographic regions and incorporates disaster recovery plans. The pilot includes three zones which represents the three currently configured zones in the actual environment: * APAC_ZONE is configured for two servers located in the Asia Pacific region. Client IP ranges to * EMEA-ZONE is configured for two servers located in Europe. Client IP ranges to * NA-ZONE is configured for two servers located in America. Client IP ranges to Another function of the pilot is for the team to test a new zone for disaster recovery, DR_ZONE: * DR_ZONE is configured for 1 server (Disaster Recovery) The design requires that zone preference and failover be implemented in the pilot. Task: Configure zone preference and failover so that: * For APAC_ZONE and EMEA_ZONE; ** Define NA_ZONE is primary backup **Define DR_ZONE is secondary backup * For NA_ZONE ** Define DR_ZONE is primary backup only ** Do not configure a secondary backup A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Create a Policy for APAC_ZONE and EMEA_ZONE and Define NA_ZONE is primary backup and Define DR_ZONE is secondary backup and apply the Policy based on Client IP address.

60 QUESTION 21 SIMULATION Exhibit:

61

62 Certkiller.com installed Citrix Access Gateway Edition a number of months ago and recognized a significant improvement in a number of areas, particularly in the decrease of virus infections. The dramatic decline in virus reports is directly related to the creation of specific scans enforced on all client devices; these scans prevent the device from joining the network if an antivirus scan is not installed and running. Unfortunately, in the last two weeks, the number of virus reports has suddenly spiked, despite no similar trend in the industry. Some careful research has uncovered the most probably cause: some users have learned to disable their antivirus programs after logging on to the network and thus have negated the purpose of the scan. As more users share this "trick", the chance of a significant virus outbreak increases. Task: Close this vulnerability by requiring that either McAfee Antivirus or Trend Office is running on all client devices at all times using existing scans. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Check the Policies / Continuous Process Scans for McAffee and Trend 2. Create a Continuous Scan Filter

63 3. Create Connection Policies and select the Filter QUESTION 22 SIMULATION Exhibit:

64

65 Task exhibit: Certkiller.com is an ASP based in Chicago that hosts an EURP application on Citrix Presentation Server 4.0 for customers. The presentation Server environment for Certkiller.com consists of a single farm with two zones, one for US-based customers and the other for Canadian-based customers. Each zone consists of two servers and a dedicated license server. Recently, Certkiller.com acquired an ASP in Barcelona with five customers who access published applications from a single Presentation Server farm. Before the acquisition, their environment consisted of a single zone that included two servers running Presentation Server 4.0 for all of its customers and a dedicated license server. A consultant completed a redesign of the Citrix environment that combines the domains and the farms of both organizations. The new domain name is Certkiller.ctxs and the new farm name is Certkiller Farm. The IT staff also performed a "Change Farm" on the Presentation Servers located in Barcelona and placed into the Chicago-based server farm. The new design requires a collapse of the original NY_ZONE and ZONE1 into a single zone, CHG_ZONE. The Barcelona servers should remain in their own zone to allows for two zones based on the location of the data centers. The design also requires that all licenses be reallocated into two servers: CTX_LIC_1 and CTX_LIC_2. CT_LIC_1 will be designated for sale use by the newly created CHG_ZONE and CTX_LIC_2 will be designated for sole use by the Barcelona-based zone. All users have been added into the Certkiller.ctxs domain. Currently, all licenses have been reallocated to two servers: CTX_LIC_1 and CTX_LIC_2: All users have been combined into the Certkiller.ctxs domain. A new zone, CHG_ZONE, has already been created, based on a new server. Please refer to the tasks exhibit. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Configure License server CTX_LIC_1 Sales / CHG_ZONE 2. Configure License server CTX_LIC_2 Barcelona-based ZONE

66 QUESTION 23 You work as a network administrator for Certkiller.com. You have configured a logon point for use by offsite users. However, the offsite users are unable to access the logon point. How can the administrator provide the offsite users access to the logon point? A. Configure an access policy to grant the offsite users logon access through the logon point. B. Redeploy the login point and select "allow external users access" C. Configure a connection policy to allow the offsite users to connect using the logon point. D. Edit the login point and select the "allow external users access" check box. Correct Answer: D Section: (none) Explanation Explanation/Reference: Explanation:

67 QUESTION 24 SIMULATION Exhibit:

68

69 Certkiller.com has a building with multiple floors and at least two network printers for each fllor. Each floor also has as many as 10 shared workstations with access to Presentation Server published applications; the workstations are used by medical personnel who have roaming profiles. Many of these applications require easy printer access because users need to print from the frequently. Certkiller.com has an established network scheme: * Servers: to * Fixed Workstations: x0.1 to x4.254 where x is the floor (example, the IP Address would be a workstation on the 5th floor) * Network Printers are all hosted by the server \\TechAC_Prt1 with a naming convention based on their location. Fixed workstations have a nearby network printer assigned as their Default printer. Tasks: Based on the information provided and the current state of the simulation (Note: not available here), modify the environment to meet these requirements: * Enable users on the 3rd floor using fixed workstations to print to the default printer for the 3rd floor automatically. * Enable users on the 4th floor using fixed workstations to print to the default printer for the 4th floor automatically. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Create Sessions Police for each Subnet / Floor and set as Default Printer Apply the Policy to Client IP Address

70 QUESTION 25 You work as a network administrator for Certkiller.com. You have installed Password Manager onto a Presentation Server. You only want a Password Manager to start some of the applications published on the Presentation Server server. Which two steps must be completed to allow Password Manager to start up for only some of the applications published on Citrix Presentation Server? Select two, A. Create a Presentation Server policy that only allows Password Manager to launch for specific applications. B. Remove the Reference to SSOLauncher from the "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WindowsNT\\CurrentVersion\\Winlogon\\AppSetup" registry key. C. Remove the SSOSHELL.EXE from the Startup directory of the Presentation Server. D. Manually add a command-line parameter to each published application in Presentation Server to launch the agent background process. E. Use the Password Manager Console "User Configuration Setting" to force the agent to launch only for specific applications. Correct Answer: BD Section: (none) Explanation Explanation/Reference: Explanation: Undocumented Registry Features in MetaFrame Password Manager - QUESTION 26 In which location in the Access Suite Console for Presentation Server can a Web Interface site be configured in order for the site to be accessed through Advanced Access Control Servers. A. Under Manager client connection settings.

71 B. Under Manager secure client access C. Under Manager workspace control D. Under Manager access method Correct Answer: D Section: (none) Explanation Explanation/Reference: Explanation: Access Suite / Configurations Tools / Web Interface / Select Site / Manage access method QUESTION 27 SIMULATION Exhibit:

72

73 Administrative rights exhibit: Certkiller.com is organizing their Help Desk functionality into tiers. Tier 1 will provide basic help, including disconnecting and/or logging users off, resetting user sessions, and sending messages to server sessions. The domain group "Tier1Help" has already been created. Delegate the administrators rights displayed in the exhibit for the Tier1Help group. A. B. C. D. Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: 1. Presentation Management Console / Right-Click Properties Farm Node Permissions / Add Tier1Help Group 2. Right-Click Servers / Permissions / Sessions

74

75 QUESTION 28 Exhibit:

76

77 You work as a network administrator for Certkiller.com. As part of a pilot, administrators have installed Acrobat Reader into an application isolation environment on Presentation Server 4.0 and published it as a resource. Prior to rolling out the implementation into the production environment, the application isolation environment needs to be customized so that user sessions are redirected to a specific folder when launching the isolated version of Acrobat Reader. You have created a new user, Certkiller, for testing application configurations during the pilot. Username: Certkiller Password: Certkiller 4 Use the simulation environment to determine where Acrobat Reader currently creates its isolation working folder for pilot users, based on a standard Windows environment. A. N:\AIEPilot\Certkiller\Citrix\AIE\ACROREAD B. %APPDATA%\Citrix\AIE\ACROREAD C. N:\AIEPilot\%USERNAME%\Citrix\AIE\ACROREAD D. C:\Documents and Settings\%USERNAME%\Application Name\Citrix\AIE\ACROBAT Correct Answer: Section: (none) Explanation Explanation/Reference: Explanation: Environment Variable for Isolation Environments File system User root AIE_FSUSERROOT C:\Documents and Settings\Administrator\ Application Data\Citrix\AIE\MyAIE Presentation Server Management Console / Isolation Environments / Right-Click Properties of Isolation Environment / Roots

78