citrix MetaFrame Password Manager2.0:Adminsitration

Transcription

1 citrix MetaFrame Password Manager2.0:Adminsitration Number: 1Y0-972 Passing Score: 800 Time Limit: 120 min File Version: CITRIX 1Y0-972 EXAM QUESTIONS & ANSWERS Exam Name: CCEA XP MetaFrame? Password Manager Administration

2 Examsoon QUESTION 1 What is the syntax to publish an application called c:\gundy\test.exe when the agent on a MetaFrame XP Presentation Server is not enabled for all applications? (Assume that the agent is installed in the default location.) A. c:\gundy\test.exe /nossoshutdown B. c:\gundy\test.exe c:\program files\citrix\metaframe password manager\wts\ssolauncher.exe C. c:\program files\citrix\metaframe password manager\wts\ssolauncher.exe?/publish c:\gundy\test.exe D. c:\program files\citrix\metaframe password manager\wts\ssolauncher.exe?/application c:\gundy\test.exe /Reference: QUESTION 2 Environment: MetaFrame XP Presentation Server deploys all applications including a web browser. MetaFrame Secure Access Manager is used to access all applications including web applications and those published on the MetaFrame XP Presentation Server. User devices are WinTerms. All devices and computers are in an Active Directory domain. Requirements: Design a solution that allows users to logon one time to their WinTerm and have single sign on access to all applications. Users gain access to MetaFrame Secure Access Manager through a published browser. Which of the following solutions will ensure that all the requirements are met? A. Install MetaFrame Password Manager Agent on the MetaFrame XP Presentation Servers. B. Install MetaFrame Password Manager Agent on the MetaFrame Secure Access Manager Servers. C. Install MetaFrame Password Manager Agent on the MetaFrame XP Presentation Servers and WinTerm devices. D. Install MetaFrame Password Manager Agent on the MetaFrame Secure Access Manager Servers and the MetaFrame XP Presentation Servers. /Reference: QUESTION 3 A network consists of:

3 MetaFrame XP Presentation Server is used to deploy all applications. MetaFrame Secure Access Manager is used to access web applications and MetaFrame XP Presentation Server published applications. All user workstations are Windows 2000 Professional and Windows XP Professional. All workstations are in the same Active Directory domain. Required Results: The administrator must design a solution that allows users to logon one time to their workstation and have single sign on to all MetaFrame Secure Access Manager web applications. Desired Results: SSO capability should be enabled for MetaFrame XP Presentation deployed applications as well. Proposed Solution: The administrator installs the MetaFrame Password Manager Agent on to the MetaFrame XP Presentation Servers and the workstations. Which results does the proposed solution produce? A. The proposed solution produces both the required and desired results. B. The proposed solution produces the require but not the desired results. C. The proposed solution does not produce any of the required or desired results. D. The proposed solution produces the desired results but not the required results. /Reference: QUESTION 4 An administrator creates an application definition on a Windows 2000 Server and sends it to the synchronization point. Users who use the agent on Windows XP Professional systems are complaining that the agent is not working for that application. What went wrong? A. Users do not have administrator privileges. B. The agents are not synchronizing correctly. C. The latest service pack is not installed on the agent systems. D. The application definition was not created for the correct operating system. /Reference: QUESTION 5 In a pure MetaFrame XP Presentation Server deployment, which three components must be present? (Choose three.)

4 A. Central credential storage B. Client workstation with an ICA client installed C. A MetaFrame XP Presentation Server with the agent installed D. A MetaFrame XP Presentation Server with the console installed BC /Reference: QUESTION 6 An administrator will implement MetaFrame Password Manager to provide SSO for users who access published applications using web interface for MetaFrame XP Presentation Server. Users currently access applications through a browser using an ICA client. Remote connections are secured through the use of secure gateway for MetaFrame XP Presentation Server. In which location should the agent be installed for this deployment scenario? A. On the server running the Secure Gateway service B. On the web interface for MetaFrame XP web server C. On each MetaFrame XP Presentation Server in the farm D. On the system with the Secure Ticketing Authority installed Correct Answer: C /Reference: QUESTION 7 Which statement is true? A. Credentials are validated by the Authentication service. B. The Authentication service unlocks user encryption keys. C. Users provide their credentials directly to the Authentication service. D. The Authentication service fails if the system Authentication service is not available. /Reference:

5 QUESTION 8 Which configuration file is modified when users bulk-add applications? A. AELIST.INI B. FTULIST.INI C. APPLIST.INI D. ENTLIST.INI Correct Answer: B /Reference: QUESTION 9 What are the three layers of authentication? (Choose three.) A. Authenticator B. Authenticator API C. Authentication Event D. Authentication Storage E. Authentication Services BE /Reference: QUESTION 10 What does the Mainframe Helper Object use to identify a host-based application? A. SendKeys B. Control IDs C. window title D. text and coordinates /Reference: QUESTION 11 What are the three parts of the Intelligent Agent Response? (Choose three.) A. detecting the event B. determining the appropriate action C. decrypting the local credential store D. encrypting the local credential store E. responding with the correct credentials

6 BE /Reference: QUESTION 12 Which algorithm is used by MetaFrame Password Manager to encrypt and decrypt user credentials? A. AES B. RC-4 C. RC-5 D. Triple-DES /Reference: QUESTION 13 When the Intelligent Agent Response component detects a Windows application logon event, which configuration file is referenced to detect the Windows attributes needed to authenticate users successfully? A. AELIST.INI B. FTULIST.INI C. APPLIST.INI D. ENTLIST.INI /Reference: QUESTION 14 If multiple administrators are making changes to the synchronization point, how can administrators make sure that no changes to the console settings are lost? A. They can create a customized.msi file. B. Only one administrator can connect to the synchronization point at a time. C. They can save the console XML file in a location accessible to all administrators. D. They can export the agent settings as a.reg file and then import it into another console. Correct Answer: C /Reference: QUESTION 15

7 What type of information should be provided when configuring a shared folder as the license repository? A. the type of license B. the administrator password C. the shared folder permissions D. the UNC path of the shared folder /Reference: QUESTION 16 What is a true statement regarding MetaFrame Password Manager licensing? A. Only one license type is available. B. Concurrent-connected user licenses are permanently assigned to users. C. Named-user licenses cannot be shared by multiple users. D. Named-user licensing can only be used when an Active Directory container is used as the license repository. Correct Answer: C /Reference: QUESTION 17 During startup, what happens if a change is detected in the local credential store but not in the central credential store? A. The agent will merge the local credential store with the central credential store. B. Logon will fail and synchronization must be manually forced by the administrator. C. The central credential store will override the changed file in the local credential store. D. The user will be asked to confirm their identity by answering a pre-defined question. /Reference: QUESTION 18 What are three requirements for using a shared folder as the central credential store? (Choose three.) A. Administrators must have full control permissions to the share. B. All users must have full control permissions to the share. C. The shared folder needs to be a UNC path with Windows NT file support. D. The CTXFILESYNCPREP.EXE utility should be run on the system hosting the share. E. The system hosting the shared folder should be in the same domain as the agents that it will synchronize.

8 Correct Answer: CDE /Reference: QUESTION 19 Active Directory can be used as the central credential store. Before administering the directory service through the console, administrators must perform which two tasks? (Choose two.) A. extend the schema B. prepare the domain for credential synchronization C. created a GPO for MetaFrame Password Manager D. setup a new OU for MetaFrame Password Manager E. synchronize with local credential stores in the domain B /Reference: QUESTION 20 Which Windows security group must a user be a member of in order to run the schema extension utility found in the Tools directory of the MetaFrame Password Manager CD? A. Administrators B. Domain Admins C. Schema Admins D. Server Operators Correct Answer: C /Reference: QUESTION 21 To ensure that synchronization occurs correctly, when using a shared folder as the central credential store, what is required? A. SyncManager settings need to be configured and deployed. B. The account used to connect to the share requires full control to the shared drive. C. The CTXDOMAINPREP.VBS script should be run to prepare the domain for credential synchronization. D. The administrative account for the system that hosts the console should be used to authenticate to the share. /Reference:

9 QUESTION 22 Which two tasks must be completed to extend the schema of a directory service? (Choose two.) A. a shared folder must be set up B. SSO support must be configured C. the CTXDOMAINPREP.EXE must be run D. the CTXSCHEMAPREP.VBS must be run E. the schema must be configured to allow updates E /Reference: QUESTION 23 How can an administrator check that credential synchronization is working when a shared folder is used as the central credential store? A. Check the registry file with the same name as the console system. B. Import agent setting into the console and compare to settings in the ENTLIST.INI file. C. Export the console settings and launch them from another system with a console installed. D. Send an ADMINOVERRIDE to the synchronization point and verify that the change has occurred at the agent. /Reference: QUESTION 24 What is a justification for using Active Directory as the central credential store? A. There are multiple domains. B. Users require different agent settings. C. Mandatory profiles are used in the environment. D. There are a large number of users in the environment. Correct Answer: B /Reference: QUESTION 25 Which Windows 2000 registry key needs to have its DWORD value set to 1 in order to allow the administrator to extend the schema? A. Update Schema B. Allow Update Schema

10 C. Schema Update Allowed D. Allow Schema Extension Update Correct Answer: C /Reference: QUESTION 26 Which utility would the domain administrator use to provide all users in the domain with the permissions needed to create, modify, and delete their SSO objects? A. CTXUSERPREP.EXE B. CTXDOMAINPREP.EXE C. CTXFILESYNCPREP.EXE D. cscript CTXSCHEMAPREP.VBS Correct Answer: B /Reference: QUESTION 27 Which statement is true for MetaFrame Password Manager password policies? A. MetaFrame Password Manager Password policies are merged into the registry. B. MetaFrame Password Manager Password policies enforce password expiration requirements. C. MetaFrame Password Manager Password policies use the Active Directory Group Policy engine. D. MetaFrame Password Manager Password policies manage character generation for passwords. /Reference: QUESTION 28 What are two reasons for using password sharing groups? (Choose two.) A. to simplify password policy delivery B. to avoid the need for using complex policies C. to group applications that share backend authentication D. to group applications regardless of backend authentication C /Reference:

11 QUESTION 29 What is the domain password sharing group used for? A. applications that share the same users B. applications that share the same configurations C. applications that share the same load-managed group D. applications that share the same password as the Windows password /Reference: QUESTION 30 Which value must be configured when using a web application template? A. URL B. Realm C. Form name D. Frame name /Reference: QUESTION 31 Which three attributes of Windows applications are detected by the Intelligent Agent Response in MetaFrame Password Manager? (Choose three.) A. Control ID B. Window title C. Application name D. Frame and form name E. User name and password field BC /Reference: QUESTION 32 An administrator has just added a new application to the Bulk-Add list for users of enterprise resources. How is this revision to the application list recorded? A. It is recorded in the directory. B. It is recorded by the version stamp.

12 C. The revision is recorded on the local credential store. D. The new application is recorded to the ENTLIST.INI file. Correct Answer: B /Reference: QUESTION 33 When configuring a web application that has more than two logon fields, where in the console can administrators specify criteria to distinguish between forms? A. General tab B. Matching tab C. Web Form Wizard D. Add Application Wizard Correct Answer: B /Reference: QUESTION 34 Why should the console be installed in the same location as that of the applications? A. To ensure that the AELIST.INI file is created B. To ensure that the APPLIST.INI file is created C. To eliminate the need to configure application definitions D. To eliminate inconsistencies that occur with application definitions due to operating system differences /Reference: QUESTION 35 Which two are needed to create host-based application definitions? (Choose two.) A. SSOBHO.EXE B. A terminal emulator that supports HLLAPI C. MetaFrame Presentation Server for UNIX D. The MetaFrame Password Manager Console E. The MetaFrame Password Manager Logon Manager Correct Answer: BD /Reference:

13 QUESTION 36 Which two tasks must be completed by the user before they can begin using the agent? (Choose two.) A. Configure applications B. Install the console onto their local system C. Provide Windows logon credentials to the agent D. Answer a pre-defined question for secondary verification Correct Answer: CD /Reference: QUESTION 37 Which statement is true? A. The Auto-Prompt feature must be installed on an individual basis by users. B. The Auto-Prompt feature can be enabled or disabled by users and administrators. C. The Auto-Prompt feature must be enabled after MetaFrame Password Manager is installed. D. The Auto-Prompt feature provides logon information to an application when the logon information is added to Logon Manager by the user. Correct Answer: B /Reference: QUESTION 38 Before Logon Manager can be used, which task must be completed? A. An authentication service must be specified. B. Primary credentials must be supplied during setup. C. Applications that will be used with MetaFrame Password Manager must be specified during setup. D. Applications that will be used with MetaFrame Password Manager must be opened on the desktop. Correct Answer: B /Reference: QUESTION 39 Which Agent Setting in the console can be used to disable the automatic submission of credentials during initial application configuration? A. AutoLogon B. AutoLogonDelay C. LogonAfterConfig

14 D. AutoLoginAfterConfig Correct Answer: C /Reference: QUESTION 40 Company policy requires that no credentials remain stored locally on a workstation after a user logs off. Which agent setting must be enabled to conform to the company policy? A. DeleteOnShutdown B. CleanUpOnShutdown C. DeleteOnLogoff D. DeleteProfile /Reference: