Deck 6: Designing, Deploying and Managing Citrix XenMobile 10 Enterprise Solutions

Question 1

What are two valid reasons for deploying a XenMobile Server in the Demilitarized Zone (DMZ)? (Choose two.)

A) A XenMobile Server is a hardened, FIPS-capable Linux appliance.
B) A XenMobile Server deployed in the DMZ reduces the number of external firewall rules that need to be implemented.
C) A XenMobile Server deployed in the DMZ reduces the risk of connectivity issues between the NetScaler and the XenMobile Server.
D) A XenMobile Server deployed in the DMZ can serve as a Secure Ticket Authority (STA) for WorxMail.

Answer 1

A XenMobile Server is a hardened, FIPS-capable Linux appliance.
A XenMobile Server deployed in the DMZ reduces the risk of connectivity issues between the NetScaler and the XenMobile Server.

Question 2

A Citrix Engineer must deploy a scheduling policy to __________ and __________ devices in order to allow these devices to check in automatically without further intervention by the engineer. (Choose the two correct options to complete the sentence.)

A) iOS
B) Android
C) Windows Phone 8.1
D) Symbian

Answer 2

Android
Symbian

Question 3

Scenario: A Citrix Engineer is designing a XenMobile Enterprise solution to support approximately 30,000 device connections. The environment must be able to sustain the failure of one node in a cluster at any given time for redundancy and maintenance purposes. Each server's specifications include four vCPUs and 16 GB of RAM. What is the minimum number of XenMobile Servers that the engineer should recommend as part of this cluster?

A) Two
B) Three
C) Four
D) Five

Answer 3

Four

Question 4

A Citrix Engineer needs to allow junior administrators to perform selective wipe requests from a single console for users who are members of the IT and HR departments. What should the engineer do to accomplish this objective?

A) Use two XenMobile instances, one for IT and HR users, and another instance for all other users.
B) Use XenMobile Role-based Access Control (RBAC) to delegate the selective wipe permission to the junior administrative team, only targeting users in the IT and HR departments.
C) Use XenMobile deployment rules to assign the selective wipe task to the junior administrative team and only target the IT and HR users.
D) Create XenMobile Delivery Groups to assign the selective wipe option to the junior administrative team for the IT and HR users.

Question 5

What are two server requirements for StorageZone Controllers? (Choose two.)

A) Application Server role
B) Web Server IIS role
C) ASP.NET
D) Windows PowerShell

Question 6

A Citrix Engineer is testing enrollment and notices that while Mobile Device Management (MDM) enrollment succeeds, Mobile Application Management (MAM) enrollment fails. A possible cause of this issue is that ports __________ from the __________ are NOT open. (Choose the correct set of options to complete the sentence.)

A) 636 or 389; NetScaler
B) 443 or 4443; NetScaler
C) 636 or 389; XenMobile Server
D) 443 or 4443; XenMobile Server

Question 7

Which two types of certificates will require a restart when uploaded to a XenMobile Server using the XenMobile Console? (Choose two.)

A) SSL Listener
B) Root
C) Apple Push Notification service (APNs)
D) Intermediate
E) Device Certificate Authority (CA)

Question 8

Scenario: A Citrix Engineer is configuring the NetScaler appliance for SSL offloading. The XenMobile Server is named xms.domain.com. The following is a list of the certificates installed on the NetScaler: - *.domain.com - wildcard server certificate - cacerts.pem - devices certificate - xms.domain.com - server certificate for the XenMobile Server - dc-1-CA.cer - Root certificate for *.domain.com The engineer needs to configure an SSL Load Balancing virtual server for HTTPS 443 bound with __________ and the XenMobile Server service to use __________. (Choose the correct set of options to complete the sentence.)

A) *.domain.com and dc-1-CA.cer; HTTP 80
B) *.domain.com and cacerts.pem; HTTPS 443 bound with xms.domain.com
C) *.domain.com and cacerts.pem; HTTP 80
D) *.domain.com and dc-1-CA.cer; HTTPS 443 bound with xms.domain.com

Question 9

A Citrix Engineer is currently in the process of a first-time installation of a XenMobile Server using the command-line interface. Which two settings are required when configuring the remote database using SQL authentication? (Choose two.)

A) Database version
B) Port number
C) Domain name
D) Database name

Question 10

In which way does implementing Worx PIN improve the user experience while maintaining Enterprise security?

A) It streamlines the user experience when the Active Directory password is changed.
B) It allows the user to use a unique, synchronized PIN for device and application access without modifying corporate password policy.
C) It reduces the number of times the user has to authenticate to launch managed applications.
D) It reduces the complexity of daily password entry without modifying corporate password policy.

Question 11

A Citrix Engineer installed XenMobile Mail Manager and needs to ensure that ActiveSync clients are quarantined if they are NOT enrolled in the XenMobile Server. Which Default Rule should the engineer choose in this scenario?

A) Allow
B) Block
C) Unchanged
D) Quarantine

Question 12

Scenario: A Citrix Engineer wants to provide access from WorxWeb to internal corporate websites that require client certificate authentication. The engineer has configured the NetScaler with Clientless Access to "On", and Plug-in type to Windows / Mac OSX. Which two settings should the engineer configure within the WorxWeb MDX policies to ensure that users could access these sites successfully without errors? (Choose two.)

A) Set Network access to "Tunneled to internal network".
B) Set VPN to "Full VPN tunnel".
C) Set VPN to "Secure browse".
D) Set an Allowed or blocked websites policy.

Question 13

Scenario: A customer would like to configure a single NetScaler Gateway that facilitates access to XenMobile and XenApp/XenDesktop resources from iOS and Android mobile devices. The customer also plans for users to access XenApp and XenDesktop resources by using a web browser from other endpoints. The following Session Policies and expressions have been configured on NetScaler: - Policy 1: REQ.HTTP.HEADER User-Agent NOTCONTAINS CitrixReceiver && REQ.HTTP.HEADER Referer EXISTS - Policy 2: REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER X-Citrix-Gateway EXISTS A Citrix Engineer is asked to create a new Session Profile for users accessing resources through web browsers on their endpoint devices. The profile should be bound to __________ and direct users to __________. (Choose the correct set of options to complete the sentence.)

A) Policy 1; the XenMobile Server
B) Policy 1; StoreFront
C) Policy 2; the XenMobile Server
D) Policy 2; StoreFront

Question 14

A Citrix Engineer needs to design a multi-node, scalable XenMobile solution. Which database type should the engineer choose to meet the needs of this deployment?

A) Microsoft SQL
B) PostgreSQL
C) Oracle
D) MySQL

Question 15

Which XenMobile deployment option would pose the greatest security risk?

A) SSL Bridge at the NetScaler load balancing tier with the XenMobile Server in the Demilitarized Zone (DMZ).
B) SSL Bridge at the NetScaler load balancing tier with the XenMobile Server on the internal network segment.
C) SSL Offload at the NetScaler load balancing tier with the XenMobile Server in the Demilitarized Zone (DMZ).
D) SSL Offload at the NetScaler load balancing tier with the XenMobile Server on the internal network segment.

Question 16

Scenario: A Citrix Engineer needs to implement SSL Offload in which traffic is encrypted all the way from the client device to the XenMobile Server. The vServer and service configurations are listed below. Load balancing vServers: - Protocol: SSL, Port: 443 - Protocol: SSL, Port: 8443 Services: - Protocol: SSL, Port: 443 (Bound to 443 vServer) - Protocol: SSL, Port: 8443 (Bound to 8443 vServer) The current configuration is NOT working properly. What should the engineer adjust to implement SSL Offload successfully?

A) Bind Port 80 services to both the 443 and 8443 load-balancing vServers but make no other changes.
B) Bind the port 8443 service to the port 443 vServer; the port 443 service is NOT needed.
C) Bind the port 443 service to the port 8443 vServer; the port 8443 service is NOT needed.
D) Bind Port 80 services to both the 443 and 8443 load-balancing vServers and open port 80 on the XenMobile Server IP Tables firewall.

Question 17

Which database type is recommended for the database connection when configuring a XenMobile Server for the first time in a production deployment using the command-line interface?

A) MySQL
B) Microsoft SQL Server Express
C) PostgreSQL
D) Microsoft SQL Server

Question 18

A Citrix Engineer must delegate enrollment invitation management to Level 1 administrators. What should the engineer do to accomplish this objective?

A) Configure AAA groups on the NetScaler Gateway; allow only this group to access the console over port 4443.
B) Create a local group on the XenMobile Server; allow only Level 1 administrators access to it.
C) Configure a Delivery Group within the XenMobile Server; deploy the security policies only to the dedicated group of Level 1 administrators.
D) Configure Role-based Access Control (RBAC); assign only the desired permissions to the Active Directory group where the Level 1 administrators reside.

Question 19

Scenario: A Citrix Engineer needs to deploy a XenMobile solution for a large organization. The organization will use XenMobile to manage Android and iOS devices. To provide resilience, NetScaler appliances will communicate with XenMobile Servers. The engineer has deployed all necessary infrastructure and opened the required firewall ports. To load balance mobile device management traffic, the engineer has configured NetScaler to use SSL_Bridge to communicate with a XenMobile Server cluster. Which persistence method should the engineer configure to facilitate consistent communication between the NetScaler and the XenMobile Servers?

A) SSLSESSION
B) CUSTOMSERVERID
C) DESTIP
D) COOKIEINSERT

Question 20

Which two components are required in order for a Citrix Engineer to use the MDX Toolkit to wrap Android applications for production use? (Choose two.)

A) Command-line tools
B) Enterprise certificate from Symantec
C) Android Developer Tools and Android SDK
D) Android Just-in-Time Compiler
E) A keystore certificate

Question 21

Scenario: A customer has attempted to integrate XenMobile with XenApp and XenDesktop. Users connect to the Worx Store and can see MDX applications but CANNOT see published applications or desktops. A Citrix Engineer determines a possible cause of this issue is that either port __________ or __________ between the XenMobile Server and StoreFront is NOT open. (Choose the two correct options to complete the sentence.)

A) 80
B) 443
C) 8443
D) 1494
E) 2598

Question 22

Which certificate is required to configure ShareFile User Provisioning?

A) xms.domain.com- server certificate
B) Apple Push Notification service (APNs) certificate
C) Third-party SSL Listener certificate
D) xms.domain.com - SAML certificate

Question 23

A Citrix Engineer needs to push native email profiles and configurations to user devices. Which XenMobile macros could the engineer use to automate email provisioning of native email clients on user devices?

A) {user.username} {user.mail}
B) (User.username) (User.mail)
C) %user.username %user.mail
D) #user.username #user.mail

Question 24

Which XenMobile option is available for Windows 8.1 Enterprise tablet devices?

A) XenMobile MDM policy
B) XenMobile Worx Apps
C) Remote support
D) Kiosk mode

Question 25

Which three permissions may a Citrix Engineer control with a Role-based Access Control (RBAC) policy? (Choose three.)

A) Shared devices
B) ActiveSync account information
C) WorxStore access
D) Selective wipe
E) Notifications
F) Camera access

Question 26

Which three options must occur on the virtual server during the initial configuration of the Mobile Application Management (MAM) load-balancing virtual server? (Choose three.)

A) The virtual server listens over port 8443.
B) The virtual server listens over port 443.
C) The virtual server requires SSL Session persistence.
D) The virtual server requires CUSTOMSERVERID persistence.
E) The "Load Balancing FQDN for MAM" must correspond to the FQDN specified during initial XenMobile Server installation.
F) The "Load Balancing FQDN for MAM" must correspond to the internal FQDN for the IP address being used.

Question 27

Scenario: A Citrix Engineer needs to provide access from WorxWeb to internal corporate HTTP websites through an internal proxy server. The engineer has configured Single Sign-On to web applications on the NetScaler. What are two ways that the engineer could ensure that users are able to access the websites without being prompted to authenticate more than once? (Choose two.)

A) Disable Secure browse mode in the NetScaler session policy.
B) Set WorxWeb Network access to "Tunneled to internal network".
C) Set WorxWeb VPN mode to "Secure browse".
D) Add the website to the allowed website list for WorxWeb.

Question 28

Scenario: A Citrix Engineer prepares to deploy XenMobile Server, ShareFile StorageZone Controllers, and StoreFront as part of a XenMobile implementation. The engineer needs to ensure that the number of communication ports opened between the Demilitarized Zone (DMZ) and the internal network is kept to a minimum, and that unauthenticated traffic is NOT allowed through to the internal network. The engineer intends to achieve these objectives by channeling all traffic into the environment through NetScaler, which is placed in the DMZ. Where should the engineer place the components listed below in order to meet the objectives stated in the scenario? ShareFile StorageZone Controller XenMobile Server StoreFront

A) Place all components on the internal network segment.
B) Place the StorageZone Controllers in the DMZ and all other components on the internal network segment.
C) Place the XenMobile Server in the DMZ and all other components on the internal network segment.
D) Place StoreFront in the DMZ and all other components on the internal network segment.

Question 29

Which two configurations could be changed only by reinstalling the XenMobile Server using the command-line interface? (Choose two.)

A) Default Gateway
B) XenMobile hostname
C) Primary DNS server
D) IP address
E) Upgrade option

Question 30

Scenario: An organization hires a Citrix Engineer to provide guidance on options that would allow WorxWeb users to access external and internal URLs. The internal IT team plans to keep WorxWeb in Secure browse mode. Which two strategies could the engineer recommend to meet the needs of the customer? (Choose two.)

A) Configure traffic policies and profiles and bind them to the NetScaler Gateway.
B) Enable Split Tunneling through the NetScaler Gateway Session Profile.
C) Configure the 'Proxy' tab within the NetScaler Gateway Session Profile.
D) Configure a responder policy and profile, and bind them to the NetScaler Gateway.

Question 31

Which two components are required in order for a Citrix Engineer to use the MDX Toolkit to wrap Windows Phone applications for production use? (Choose two.)

A) Command-line tools
B) Enterprise certificate from Symantec
C) Android Developer Tools and Android SDK
D) Application enrollment token
E) A keystore certificate

Question 32

Scenario: A Citrix Engineer is deploying XenMobile for an organization. The organization will deploy iOS and Android devices, and users will be allowed to enroll and use the solution remotely, or from an internal employee WIFI network. The NetScaler and XenMobile Server are both deployed in the Demilitarized Zone (DMZ) with no firewall between them. The engineer has opened the following ports: - Internet (ANY) -> NetScaler (DMZ) (Inbound) (443) - XenMobile Server -> Internet (TCP 2195 / 2196) (Outbound) Which two ports should the engineer ask the Security team to open? (Choose two.)

A) Internet (ANY) -> NetScaler (DMZ) (Inbound) (TCP 8443)
B) Internal WIFI Network -> Internet (TCP 5223) (Outbound)
C) NetScaler -> XenMobile Server (TCP 80)
D) NetScaler -> XenMobile Server (TCP 8443)
E) NetScaler -> License Server (TCP 27000)

Question 33

A Citrix Engineer must provide a group of non-administrator help-desk personnel with access to a set of features in the XenMobile Console. What should the engineer do to accomplish this task?

A) Configure AAA groups on the NetScaler Gateway. Allow only these groups to access the console over port 4443.
B) Create a local group on the XenMobile Server. Allow only access for help-desk personnel.
C) Configure a Delivery Group within the XenMobile Server and deploy the security policies only to the dedicated group of help-desk personnel.
D) Configure Role-based Access Control (RBAC) and assign only the desired permissions to the Active Directory group in which the help-desk personnel reside.

Question 34

Scenario: A Citrix Engineer is deploying a XenMobile Proof of Concept (POC) environment. The engineer imports the XenMobile Management Server onto the hypervisor and performs the initial configuration using the console. The engineer also enables FIPS mode during the initial configuration. Which URL should the engineer use to continue the configuration in the XenMobile Console if the engineer assigns an IP address of format x.x.x.y to the XenMobile Server?

A) https://x.x.x.y:443
B) https://x.x.x.y:8443
C) https://x.x.x.y:4443
D) https://x.x.x.y:9443

Question 35

Which two statements are true when the database becomes unavailable in a XenMobile deployment? (Choose two.)

A) New devices will NOT be able to enroll.
B) The XenMobile Server will go offline.
C) Enrolled devices are selectively wiped.
D) Worx Store access will continue to function without interruption.

Question 36

A Citrix Engineer, in the process of configuring XenMobile, launches the XenMobile Console for the first time and is presented with the wizard to continue the configuration. Which two options could the engineer configure at this stage of the installation? (Choose two.)

A) LDAP service account
B) Database type
C) Apple Push Notification service (APNs) certificate upload
D) XenMobile Cluster configuration
E) Primary DNS server

Question 37

Scenario: User password caching must be disabled in an environment due to an information technology security policy. The security policy also mandates the following: - Devices should NOT be allowed to be offline for more than 3 days. - Devices should recognize updates to applications in under 24 hours in the event of critical security updates. - Users should conduct application upgrades within 3 days of a device recognizing the availability of an update. Which combination of settings should a Citrix Engineer recommend to meet the requirements of the security policy?

A) AD password for authentication; maximum offline period of 24 hours; and app update grace period of 72 hours (3 days)
B) AD password for authentication; maximum offline period of 72 hours (3 days); and app update grace period of 72 hours (3 days)
C) Worx PIN for authentication; maximum offline period of 72 hours (3 days); and app update grace period of 24 hours
D) Worx PIN for authentication; maximum offline period of 24 hours; and app update grace period of 72 hours (3 days)
E) Worx PIN for authentication; maximum offline period of 72 hours (3 days); and app update grace period of 72 hours (3 days)

Question 38

Scenario: A Citrix Engineer is designing a XenMobile Enterprise solution to support approximately 40,000 device connections. The environment must be able to sustain the failure of one node in a cluster at any given time for redundancy and maintenance purposes. Each server's specifications include four vCPUs and 16 GB of RAM. What is the minimum number of XenMobile Servers that the engineer should recommend as part of this cluster?

A) Three
B) Four
C) Five
D) Six
E) Two

Question 39

Which two actions should a Citrix Engineer take to allow XenMobile to query for unmanaged devices in an Exchange deployment? (Choose two.)

A) Enable the Mobile Service Provider for ActiveSync.
B) Install XenMobile NetScaler Connector on the Exchange servers.
C) Install XenMobile Mail Manager on all Exchange servers that handle all of the ActiveSync device commands.
D) Configure the ActiveSync Gateway rules.
E) Perform a deep snapshot.

Question 40

Which task should a Citrix Engineer perform before installing the StorageZone Controller?

A) Configure the NetScaler Gateway for StorageZone Controller.
B) Configure a server with IIS requirements.
C) Configure the XenMobile Server for SAML authentication.
D) Configure the FTP client to access StorageZone.

Question 41

A Citrix Engineer is configuring access to an existing XenDesktop environment. Which three settings should the engineer configure in the XenApp/XenDesktop section of the XenMobile Server? (Choose three.)

A) The legacy PNAgent site path
B) The IP address of the XenDesktop Delivery Controller
C) The XenDesktop site name
D) The path to Receiver for Web site
E) The FQDN of the StoreFront Server
F) The port used to connect to StoreFront

Question 42

What is the correct format for defining the XenMobile web enrollment service root URL?

A) https:///Certsrv
B) https://:4443/Certsrv
C) https:///Certnew.cer
D) https:///Certfnsh.asp

Question 43

After enrollment, Android devices are NOT connecting to the XenMobile Server. What should a Citrix Engineer do to resolve this issue?

A) Configure firewall rules to allow the XenMobile Server to communicate outbound on ports 2195 and 2196.
B) Modify MDX authentication timers.
C) Configure a scheduling policy.
D) Modify the authentication policy on the NetScaler Gateway.

Question 44

How could a Citrix Engineer deploy a common application set to all corporate-managed iOS and Android devices?

A) Assign users to a custom role.
B) Assign required applications to the AllUsers Delivery Group.
C) Assign a deployment rule to users.
D) Assign an App Access policy to the AllUsers Delivery Group.

Question 45

A Citrix Engineer recently enabled Worx PIN authentication on a XenMobile Server. What should the engineer instruct users to do in order to enable Worx PIN on their devices?

A) Log off from Worx Home and log on again.
B) Update to the latest version of Worx Home.
C) Refresh the policy in Worx Home.
D) Launch a Worx Home resource.

Question 46

Which three NetScaler features must a Citrix Engineer configure in order for XenMobile NetScaler Connector to properly function? (Choose three.)

A) Content Switching
B) Integrated Caching
C) HTTP Callout
D) Responder
E) App Flow

Question 47

Scenario: A Citrix Engineer plans to implement XenMobile and integrate it with an existing XenDesktop 7.6 environment. The engineer also plans to use WorxMail in Secure Ticket Authority (STA) mode. Which statement is true regarding the NetScaler configuration?

A) The XenMobile Server could function as the STA for both WorxMail and XenDesktop, but the XenDesktop Delivery Controllers CANNOT perform this function.
B) The XenDesktop Delivery Controller could function as the STA for both WorxMail and XenDesktop, but the XenMobile Server CANNOT perform this function.
C) Either the XenMobile Server or the XenDesktop Delivery Controller could be used as the STA in this setup.
D) Both the XenMobile Server and the XenDesktop Delivery Controller must be specified as STAs.

Question 48

Which two XenMobile policies could a Citrix Engineer use to block the camera on an iOS device? (Choose two.)

A) MDM Restriction policy
B) MDX policy
C) App Lock policy
D) App Configuration policy

Question 49

In which two ways could a Citrix Engineer configure User Provisioning to ShareFile within the XenMobile Console? (Choose two.)

A) Configure the SSO section in the ShareFile website.
B) Configure the ShareFile section in the XenMobile Console.
C) Configure the ShareFile_SAML Web/SaaS application.
D) Configure the location of the ShareFile public application store link.

Question 50

A Citrix Engineer needs to allow any iOS device to run a published MDX application. Which type of provisioning file should the engineer use to wrap the application?

A) App Store (Developer Account)
B) Ad-Hoc (Developer Account)
C) iOS App Development
D) In-House Profile (Enterprise Account)

Question 51

Scenario: A Citrix Engineer created an automated action to notify users when the Pandora application is installed on their mobile devices. For testing purposes, the engineer installed the application on a mobile device but noticed that a notification was NOT received. Which two XenMobile Server settings should the engineer check to resolve this issue? (Choose two.)

A) POP3
B) SMTP
C) IMAP
D) SMS

Question 52

Scenario: A Citrix Engineer needs to publish an application only to employee-owned devices. Some employees may have employee-owned and corporate-owned devices. What could the engineer create on the XenMobile Server to meet the needs of this scenario?

A) a deployment rule
B) a device exclusion
C) a workflow
D) an automated action

Question 53

What should a Citrix Engineer configure in order to ensure Apple Push Notification service (APNs) works with outbound proxy communications?

A) Enable outbound proxy communication for APNs communication through the XenMobile Web console.
B) Enable outbound proxy communication for APNs communication through the XenMobile Server command-line interface.
C) Enable then deploy the XenMobile proxy policy to user devices.
D) Enable outbound XenMobile proxy communication on the NetScaler.

Question 54

A Citrix Engineer downloaded the incorrect version of Worx Home on an Android device and is attempting to uninstall Worx Home, but attempts to uninstall have NOT been successful. What should the engineer do to successfully uninstall Worx Home?

A) Restart the device.
B) Deactivate Worx Home as an administrator on the device.
C) Unenroll the device.
D) Remove all MDX applications from the device.

Question 55

Which two options must a Citrix Engineer enable in order to configure XenMobile auto-discovery for iOS and Android devices in a XenMobile Enterprise deployment? (Choose two.)

A) Domain suffix
B) FQDN for the enrollment load-balancing vServer
C) Public SRV record
D) XenMobile cluster node IDs

Question 56

Which XenMobile Windows Phone 8.1 policy should a Citrix Engineer configure in order to deploy Worx MDX apps to a Windows Phone 8.1 device?

A) Enterprise Hub policy
B) Exchange policy
C) App Inventory policy
D) Sideloading Key policy

Question 57

Scenario: A customer plans to use XenMobile Server as the SAML Identity Provider for ShareFile authentication. SAML authentication should be available for MDX users as well as through the desktop sync client for Windows and Mac. The customer plans to use StorageZone Connectors. What is the minimum configuration that a Citrix Engineer must perform in order to meet the needs of the customer?

A) Populate the XenMobile Server Settings > ShareFile tab
B) Create the appropriate NetScaler Gateway Session profile and policy
C) Adjust the 'login URL' settings on the ShareFile Control Plane
D) Create a AAA vServer on NetScaler

Question 58

How can a Citrix Engineer require the installation of WorxMail for all users entitled to the application?

A) Modify the Delivery Group configuration.
B) Modify the application MDX policies.
C) Modify the device exclusions.
D) Modify the roles to which the application is published.

Question 59

What must a Citrix Engineer do to prevent XenMobile Mail Manager from blocking WorxMail traffic?

A) Set the regex expression "WorxMail.*".
B) Update the WorxMail MDX policy.
C) Configure Mobile Service Provider in XenMobile Mail Manager.
D) Define User or Group ID in XenMobile Mail Manager.

Question 60

Scenario: For testing purposes, an Android application developer needs to allow an unwrapped application to receive data from a wrapped version of WorxMail. WorxMail must remain in a restricted state. Which action could a Citrix Engineer take to allow the wrapped application to interact with an unmanaged application while maintaining the prerequisite security standards?

A) Update the Restricted Open-In exception list.
B) Update the document exchange policy to Unrestricted.
C) Update the Public file encryption exclusions list for the application.
D) Update the desired application to the App Interaction Security Group.

Question 61

After publishing an Android MDX application, a Citrix Engineer finds that the application only installs on devices running Android OS 4.3 and above, instead of all Android devices. What is the likely cause of this issue?

A) The key used on the certificate to wrap the application uses a DSA key algorithm.
B) The certificate used to wrap the application has expired.
C) The certificate used to wrap the application uses SHA1 and DSA Signing algorithms.
D) The key size of the certificate used to wrap the application is 2048 bits.

Question 62

Scenario: A Citrix Engineer needs to configure WorxMail MDX policies based on the information below. Environment Information - On-premise Exchange Server: mail.company.local - XenMobile Server FQDN: xms.company.com - NetScaler Gateway FQDN: nsg.company.com How could the engineer configure WorxMail MDX policies to conserve battery life and minimize re-authentication?

A) Background Network Services: xms.company.com:443 Background Network Services Gateway: nsg.company.com:443 Network Access Mode: Tunneled to the Internal Network
B) Background Network Services: mail.company.local:443
C) Network Access Mode: Unrestricted

Question 63

How could a Citrix Engineer ensure that user devices reflect a change to the Worx PIN security policy?

A) Log off from Worx Home and log on again.
B) Update to the latest version of Worx Home.
C) Refresh the policy in Worx Home.
D) Launch a Worx Home resource.

Question 64

A Citrix Engineer could configure User Provisioning to ShareFile for use with XenMobile by configuring the __________ or the __________. (Choose the two correct options to complete the sentence.)

A) SSO section in the ShareFile website
B) ShareFile section in the XenMobile Console
C) ShareFile User Management Tool
D) location of the ShareFile public app store link

Question 65

What should a Citrix Engineer do to remove and prevent subsequent access to an unwrapped application that is already installed by a group of users on their iOS devices?

A) Create an app-uninstall policy and assign it to a Delivery Group.
B) Create an app-uninstall policy and assign it to a deployment package.
C) Create an application blacklist and assign it to a deployment package.
D) Change the application to an optional application and assign it to a Delivery Group.

Question 66

Which two triggers could a Citrix Engineer use to create an automated action to selectively wipe devices when a user account is disabled? (Choose two.)

A) Event
B) User property
C) Device property
D) Installed app name

Question 67

A Citrix Engineer is preparing to publish a corporate-purchased application to all managed iOS devices. How could the engineer accomplish this task?

A) By using iOS VPP
B) By using Apple Distribution Program
C) By using Apple Developer Program
D) By using Apple XCode

Question 68

What are two situations in which XenMobile notification templates are used? (Choose two.)

A) As part of a XenMobile automated action to auto-notify when specified criteria are met.
B) As part of the XenMobile enrollment process to auto-notify user post enrollment.
C) As part of a XenMobile Device policy to auto-notify when a XenMobile policy becomes active.
D) As part of the XenMobile client property policies to auto-notify when client settings are delivered to a device.

Question 69

A Citrix Engineer is configuring access to a XenApp/XenDesktop environment. Which file must the engineer define a relative path to within the XenMobile Server Console?

A) default.htm
B) config.xml
C) web.config
D) index.asp

Question 70

Scenario: A Citrix Engineer wants to configure a NetScaler Gateway with two-factor authentication within a new XenMobile deployment while providing users with the benefits of single sign-on to the existing XenApp and XenDesktop resources. The engineer configured a Public Key Infrastructure (PKI) for other components in the environment already and would like to use the same PKI. Which two types of authentication policies will the engineer need to add to the NetScaler Gateway virtual server? (Choose two.)

A) LDAP
B) Certificate
C) Radius
D) TACACS