Citrix 1Y0-402 問題集

質問 1：
Scenario: While assessing the User Layer, a Citrix Architect finds that most of the internal users connect using corporate-owned laptops, desktop devices, and thin clients. Many of these laptops and desktop devices are running Windows 10, while the remainder of the machines are running Windows 7 and are in the process of being migrated to Windows 10. Some users also connect using personal devices.
Currently, Citrix Receiver is manually installed on any endpoint device added to the company. All these devices use Citrix Receiver version 4.8 and above. Some of the internal users with Windows laptops are experiencing issues in which devices such as a keyboard, mouse, a monitor connected to a docking station or a USB hub are NOT usable in an HDX session.
Which action should the architect recommend to provide a uniform user experience for all users?
A. Recreate user profiles
B. Recreate user accounts in Active Directory
C. Upgrade all clients to the latest version of Citrix Receiver
D. Upgrade drivers of peripheral devices
正解：C

質問 2：
Scenario: A Citrix Architect is designing a XenDesktop environment. The Engineer group uses graphical applications which require the use of Intel Iris Pro GPUs.
Which two hypervisors can the architect select for this environment? (Choose two.)
A. VMware vSphere 5.5
B. XenServer 7.0
C. Microsoft Hyper-V Server 2012 R2
D. XenServer 6.5
E. VMware vSphere 6.0
正解：B,D

質問 3：
Scenario: A Citrix Architect wants to set up double-hop access for an existing XenApp and XenDesktop Site.
All communication across DMZ 1, DMZ 2, and the Internal Network is encrypted over port 443. The architect has proposed the design shown in the Exhibit, where DMZ 1 has NetScaler Gateway 1 and DMZ 2 has NetScaler Gateway 2 and StoreFront.
Click the Exhibit button to view the design.

Which two sets of ports should the architect request to enable on Firewall 2?
A. Port 443 outbound and Port 443 inbound
B. Port 443 outbound and Port 1494/2598 inbound
C. Port 443 outbound and Port 80 inbound
D. Port 443 outbound and Port 389/636 inbound
正解：D

質問 4：
Scenario: A Citrix Architect needs to design a new XenApp and XenDesktop environment.
The architect has identified the User Layer requirements, as shown in the Exhibit.
Click the Exhibit button to view the requirements.

Additionally, management at the organization has identified the following general Access Layer requirements:
* A multi-factor authentication method is required for any connections to the XenApp and XenDesktop environment originating from outside the corporate network.
* External connections must be authenticated by a NetScaler Gateway virtual server located in a DMZ network.
* Internal connection traffic should NOT leave the internal corporate network.
Which Access Layer feature should the architect configure to meet the security requirements of the Accountants group?
A. Endpoint analysis scan
B. SmartAccess
C. Unified Gateway
D. NetScaler Double Hop
E. SmartControl
正解：B

質問 5：
Scenario: A Citrix Architect has designed an active/passive XenApp and XenDesktop environment for a customer, where the passive datacenter serves as the disaster recovery (DR) datacenter for all users.
The following has been configured:
* NetScaler Gateways in both datacenters, each with a unique URL
* NetScaler load balancing of StoreFront and Delivery Controller XML services
* A separate XenApp and XenDesktop Site at each datacenter
* Two StoreFront servers deployed in each datacenter aggregating resources from the Delivery Controllers in the respective datacenter During a disaster recovery strategy review, the IT infrastructure director recommends exploring cloud-based disaster recovery options for the XenApp and XenDesktop environment. The director reminds the team that the new solution would also have to support the following objectives:
* The DR environment needs to be fully functional in the event that the primary datacenter goes completely offline.
* The DR environment should require minimal operating costs until it is needed to host active user sessions.
* In a DR event, active user sessions should connect directly to the resource location without going through additional hops.
The architect develops four different conceptual diagrams to display the current architecture as well as the potential cloud-based DR locations.
Click the Exhibit button to view the conceptual diagrams.

Based on the diagrams and above requirements, which Site architecture should the architect use?
A. Option 1
B. Option 3
C. Option 2
D. Option 4
正解：D

質問 6：
A Citrix Architect needs to conduct a capabilities assessment for an organization that wants to design and build a new XenApp and XenDesktop environment.
Which three capabilities will directly influence whether the existing Citrix administrative team will have the capacity to support the new environment? (Choose three.)
A. Image management processes
B. Certificate Authority configuration
C. DNS infrastructure
D. Image management processes
E. Users and applications
F. Training and certifications of support staff and users
G. Current backup solutions
正解：A,C,E

質問 7：
Scenario: A Citrix Architect is conducting a security assessment. During the assessment, the architect gathers the following Hardware Layer requirements from the customer:
* Reduce the attack surface of the XenServer resource pools.
* Prevent unauthorized access to NFS storage.
* Encrypt Administrative connections to the XenServer resource pools.
Which three practices should the architect recommend so that the organization can meet its objectives?
(Choose three.)
A. Configure LUN zoning and LUN masking.
B. Remove the current management VLAN connection to the Internet.
C. Install certificates from a trusted certificate authority on hypervisor hosts.
D. Configure target and host authentication to limit who can mount the file system.
E. Use XenServer Direct Inspect APIs to implement Hypervisor Introspection.
正解：C,D,E

質問 8：
Scenario: A Citrix Architect needs to design a new XenApp and XenDesktop environment. While deploying Optimal HDX Routing for the customer, the architect makes the following configurations:
* Authentication Gateway - AuthGW - Logon.workspace.com - Authentication only
* New York Gateway - NYCGW - Nycgw.workspace.com - HDX Routing only
* San Francisco Gateway - SFOGW - Sfogw.workspace.com - HDX Routing only Click the Exhibit button to view further details about the configuration.

Upon investigation of the load on the NetScalers, the architect determines that both internal and external HDX traffic flow through the NetScaler Gateways and the NetScalers are running at capacity.
Which PowerShell commandlet and parameter can help the architect address this issue until more NetScaler resources are procured?
A. Set-DSOptimalGatewayForFarms -onDirectAccess=false
B. Set-DSOptimalGatewayForFarms -onDirectAccess=true
C. Set-STFCitrixAGBasicOptions -onDirectAccess=true
D. Set-STFCitrixAGBasicOptions -onDirectAccess=false
正解：A