Question 1

In which way does implementing Worx PIN improve the user experience while maintaining Enterprise security?

Accepted Answer

A)  It streamlines the user experience when the Active Directory password is changed. 
B)  It allows the user to use a unique, synchronized PIN for device and application access without modifying corporate password policy. 
C)  It reduces the number of times the user has to authenticate to launch managed applications. 
D)  It reduces the complexity of daily password entry without modifying corporate password policy.

Question 2

Scenario: A Citrix Engineer needs to deploy a XenMobile solution for a large organization. The organization will use XenMobile to manage Android and iOS devices. To provide resilience, NetScaler appliances will communicate with XenMobile Servers. The engineer has deployed all necessary infrastructure and opened the required firewall ports. To load balance mobile device management traffic, the engineer has configured NetScaler to use SSL_Bridge to communicate with a XenMobile Server cluster. Which persistence method should the engineer configure to facilitate consistent communication between the NetScaler and the XenMobile Servers?

Accepted Answer

A)  SSLSESSION 
B)  CUSTOMSERVERID 
C)  DESTIP 
D)  COOKIEINSERT

Question 3

Which XenMobile deployment option would pose the greatest security risk?

Accepted Answer

A)  SSL Bridge at the NetScaler load balancing tier with the XenMobile Server in the Demilitarized Zone (DMZ). 
B)  SSL Bridge at the NetScaler load balancing tier with the XenMobile Server on the internal network segment. 
C)  SSL Offload at the NetScaler load balancing tier with the XenMobile Server in the Demilitarized Zone (DMZ). 
D)  SSL Offload at the NetScaler load balancing tier with the XenMobile Server on the internal network segment.

Question 4

A Citrix Engineer is preparing to publish a corporate-purchased application to all managed iOS devices. How could the engineer accomplish this task?

Accepted Answer

A)  By using iOS VPP 
B)  By using Apple Distribution Program 
C)  By using Apple Developer Program 
D)  By using Apple XCode

Question 5

Scenario: A Citrix Engineer is deploying a XenMobile Proof of Concept (POC) environment. The engineer imports the XenMobile Management Server onto the hypervisor and performs the initial configuration using the console. The engineer also enables FIPS mode during the initial configuration. Which URL should the engineer use to continue the configuration in the XenMobile Console if the engineer assigns an IP address of format x.x.x.y to the XenMobile Server?

Accepted Answer

A)  https://x.x.x.y:443 
B)  https://x.x.x.y:8443 
C)  https://x.x.x.y:4443 
D)  https://x.x.x.y:9443

Question 6

A Citrix Engineer is currently in the process of a first-time installation of a XenMobile Server using the command-line interface. Which two settings are required when configuring the remote database using SQL authentication? (Choose two.)

Accepted Answer

A)  Database version 
B)  Port number 
C)  Domain name 
D)  Database name

Question 7

Scenario: A Citrix Engineer wants to configure a NetScaler Gateway with two-factor authentication within a new XenMobile deployment while providing users with the benefits of single sign-on to the existing XenApp and XenDesktop resources. The engineer configured a Public Key Infrastructure (PKI) for other components in the environment already and would like to use the same PKI. Which two types of authentication policies will the engineer need to add to the NetScaler Gateway virtual server? (Choose two.)

Accepted Answer

A)  LDAP 
B)  Certificate 
C)  Radius 
D)  TACACS

Question 8

How could a Citrix Engineer deploy a common application set to all corporate-managed iOS and Android devices?

Accepted Answer

A)  Assign users to a custom role. 
B)  Assign required applications to the AllUsers Delivery Group. 
C)  Assign a deployment rule to users. 
D)  Assign an App Access policy to the AllUsers Delivery Group.

Question 9

Scenario: A Citrix Engineer wants to provide access from WorxWeb to internal corporate websites that require client certificate authentication. The engineer has configured the NetScaler with Clientless Access to "On", and Plug-in type to Windows / Mac OSX. Which two settings should the engineer configure within the WorxWeb MDX policies to ensure that users could access these sites successfully without errors? (Choose two.)

Accepted Answer

A)  Set Network access to "Tunneled to internal network". 
B)  Set VPN to "Full VPN tunnel". 
C)  Set VPN to "Secure browse". 
D)  Set an Allowed or blocked websites policy.

Question 10

Scenario: User password caching must be disabled in an environment due to an information technology security policy. The security policy also mandates the following: - Devices should NOT be allowed to be offline for more than 3 days. - Devices should recognize updates to applications in under 24 hours in the event of critical security updates. - Users should conduct application upgrades within 3 days of a device recognizing the availability of an update. Which combination of settings should a Citrix Engineer recommend to meet the requirements of the security policy?

Accepted Answer

A)  AD password for authentication; maximum offline period of 24 hours; and app update grace period of 72 hours (3 days) 
B)  AD password for authentication; maximum offline period of 72 hours (3 days); and app update grace period of 72 hours (3 days) 
C)  Worx PIN for authentication; maximum offline period of 72 hours (3 days); and app update grace period of 24 hours 
D)  Worx PIN for authentication; maximum offline period of 24 hours; and app update grace period of 72 hours (3 days) 
E)  Worx PIN for authentication; maximum offline period of 72 hours (3 days); and app update grace period of 72 hours (3 days)

Question 11

A Citrix Engineer is configuring access to an existing XenDesktop environment. Which three settings should the engineer configure in the XenApp/XenDesktop section of the XenMobile Server? (Choose three.)

Accepted Answer

A)  The legacy PNAgent site path 
B)  The IP address of the XenDesktop Delivery Controller 
C)  The XenDesktop site name 
D)  The path to Receiver for Web site 
E)  The FQDN of the StoreFront Server
F) The port used to connect to StoreFront

Question 12

Scenario: A Citrix Engineer is configuring the NetScaler appliance for SSL offloading. The XenMobile Server is named xms.domain.com. The following is a list of the certificates installed on the NetScaler: - *.domain.com - wildcard server certificate - cacerts.pem - devices certificate - xms.domain.com - server certificate for the XenMobile Server - dc-1-CA.cer - Root certificate for *.domain.com The engineer needs to configure an SSL Load Balancing virtual server for HTTPS 443 bound with __________ and the XenMobile Server service to use __________. (Choose the correct set of options to complete the sentence.)

Accepted Answer

A)  *.domain.com and dc-1-CA.cer; HTTP 80 
B)  *.domain.com and cacerts.pem; HTTPS 443 bound with xms.domain.com 
C)  *.domain.com and cacerts.pem; HTTP 80 
D)  *.domain.com and dc-1-CA.cer; HTTPS 443 bound with xms.domain.com

Question 13

After enrollment, Android devices are NOT connecting to the XenMobile Server. What should a Citrix Engineer do to resolve this issue?

Accepted Answer

A)  Configure firewall rules to allow the XenMobile Server to communicate outbound on ports 2195 and 2196. 
B)  Modify MDX authentication timers. 
C)  Configure a scheduling policy. 
D)  Modify the authentication policy on the NetScaler Gateway.

Question 14

Which two options must a Citrix Engineer enable in order to configure XenMobile auto-discovery for iOS and Android devices in a XenMobile Enterprise deployment? (Choose two.)

Accepted Answer

A)  Domain suffix 
B)  FQDN for the enrollment load-balancing vServer 
C)  Public SRV record 
D)  XenMobile cluster node IDs

Question 15

Which XenMobile Windows Phone 8.1 policy should a Citrix Engineer configure in order to deploy Worx MDX apps to a Windows Phone 8.1 device?

Accepted Answer

A)  Enterprise Hub policy 
B)  Exchange policy 
C)  App Inventory policy 
D)  Sideloading Key policy

Question 16

Which task should a Citrix Engineer perform before installing the StorageZone Controller?

Accepted Answer

A)  Configure the NetScaler Gateway for StorageZone Controller. 
B)  Configure a server with IIS requirements. 
C)  Configure the XenMobile Server for SAML authentication. 
D)  Configure the FTP client to access StorageZone.

Question 17

Scenario: A Citrix Engineer needs to provide access from WorxWeb to internal corporate HTTP websites through an internal proxy server. The engineer has configured Single Sign-On to web applications on the NetScaler. What are two ways that the engineer could ensure that users are able to access the websites without being prompted to authenticate more than once? (Choose two.)

Accepted Answer

A)  Disable Secure browse mode in the NetScaler session policy. 
B)  Set WorxWeb Network access to "Tunneled to internal network". 
C)  Set WorxWeb VPN mode to "Secure browse". 
D)  Add the website to the allowed website list for WorxWeb.

Question 18

Which database type is recommended for the database connection when configuring a XenMobile Server for the first time in a production deployment using the command-line interface?

Accepted Answer

A)  MySQL 
B)  Microsoft SQL Server Express 
C)  PostgreSQL 
D)  Microsoft SQL Server

Question 19

Which certificate is required to configure ShareFile User Provisioning?

Accepted Answer

A)  xms.domain.com- server certificate 
B)  Apple Push Notification service (APNs) certificate 
C)  Third-party SSL Listener certificate 
D)  xms.domain.com - SAML certificate

Question 20

Scenario: A customer plans to use XenMobile Server as the SAML Identity Provider for ShareFile authentication. SAML authentication should be available for MDX users as well as through the desktop sync client for Windows and Mac. The customer plans to use StorageZone Connectors. What is the minimum configuration that a Citrix Engineer must perform in order to meet the needs of the customer?

Accepted Answer

A)  Populate the XenMobile Server Settings > ShareFile tab 
B)  Create the appropriate NetScaler Gateway Session profile and policy 
C)  Adjust the 'login URL' settings on the ShareFile Control Plane 
D)  Create a AAA vServer on NetScaler

Exam 6: Designing, Deploying and Managing Citrix XenMobile 10 Enterprise Solutions