1Y0-370 - Designing, Deploying and Managing Citrix XenMobile Solutions
Go back to Citrix
Scenario: Users in an organization use WorxMail on their mobile devices for email access. A Citrix Engineer needs to configure NetScaler and App Controller to allow these users to stay connected to email for long durations without prompting re-authentication. What should the engineer configure to meet the requirements of the scenario?
Secure Ticket Authority
Scenario: XenMobile was recently implemented in an environment. The Citrix Engineer is instructed to provide the existing XenApp 6.5 published applications to users through Worx Home. Currently, users are accessing their XenApp 6.5 applications through Receiver, NetScaler Gateway, and StoreFront. Which action could the engineer take on the App Controller to allow users to launch XenApp hosted applications through Worx Home?
Turn on ‘Allow StoreFront to aggregate App Controller apps’ on App Controller
Scenario: A cloud service provider hosts XenMobile solutions for multiple clients and manages the XenMobile solutions through the Multi-Tenant Console. A Citrix Engineer needs to configure the Multi-Tenant Console to allow some clients to report on their tenants. How would the engineer configure the Multi-Tenant Console so that a client only sees the accounts relevant to them?
Edit each tenant and assign the client from the dropdown list.
Which two settings could a Citrix Engineer configure during Express Setup on the App Controller console? (Choose two.)
Scenario: A Citrix Engineer has been asked to configure the XenMobile App Controller (ac1.domain.com) and the NetScaler Gateway to function as a Security Assertion Markup Language (SAML) identity provider for ShareFile. In this configuration, a user logging on to ShareFile using a Web browser or other ShareFile clients should be redirected to the XenMobile environment for user authentication. Which two configuration steps must the engineer take on the NetScaler Gateway to meet the requirements of the scenario? (Choose two.)
Enter ac1.domain.com:443 in the ShareFile URL window on the advanced tab of the NetScaler Gateway virtual server.
Disable the default behavior for requests that come through the /cginfra path in order to serve the original requested internal URL to the user.
Scenario: A Citrix Engineer must provide remote users with access to their corporate e-mail from their mobile devices. The engineer must ensure remote users’ mobile devices meet the following requirements: - Mobile devices require a PIN for corporate email. - Mobile devices cannot be jailbroken. - Mobile devices must be enrolled to XenMobile Device Manager. - Only iOS devices will have access to corporate email. Which component should the engineer include in the solution to enforce the requirements outlined in the scenario?
XenMobile NetScaler Connector
Which two of the listed actions could a Citrix Engineer apply to devices from the Device Manager Dashboard? (Choose two.)
A Citrix Engineer needs to unenroll an iOS mobile device previously assigned to a user and then reassign it to a new user with the least amount of device downtime. Which action should the engineer take to ensure that the previous user's managed applications and data are NOT accessible by the new user?
Scenario: A Citrix Engineer installed a XenMobile Device Manager server with XenMobile NetScaler Connector (XNC) accepting the default settings. The server has two NICs; one is in the DMZ, dedicated to communicate with the NetScaler, and one is dedicated for internal LAN communication. How could the engineer set the XNC web service to securely listen on the NIC in the DMZ only?
Change the value from 0.0.0.0:9443 to the <DMZ IP address>:9443
Scenario: A Citrix Engineer needs to implement a patch file for an App Controller. The engineer has already downloaded the patch from the Citrix website. What should the engineer do to implement the patch?
Install the patch using the Import function in the Release Management section of the App Controller.
Scenario: XenMobile has been selected as the new mobility solution for an organization. The organization currently has a Citrix XenApp environment with remote access provided through NetScaler ICA Proxy. A Citrix Engineer needs to redesign the email access solution for remote users and the organization requires that the new solution integrate with the native iOS Mail. Which component should be implemented to meet the requirements outlined in the scenario?
XenMobile NetScaler Connector
In order to send email enrollment invitations to iOS devices through the XenMobile Device Manager, a Citrix Engineer must configure _________ . (Choose the correct option to complete the sentence.)
an SMTP notification server
The current XenMobile license expired and a Citrix Engineer is unable to log in to the Device Manager console to replace the license file. Which action should the engineer take to regain access to the Device Manager console?
Copy the new license file in the appropriate directory on the server.
Scenario: An organization has decided to implement a bring-your-own-device (or BYOD) policy. To support the BYOD initiative, the organization is in search of a mobile device management solution. The primary business driver for the solution will be to provide IT with control of mobility resource provisioning and de-provisioning for terminated users, as well as the ability to perform a selective wipe on lost devices. Which component should be included in the deployment to meet the needs of the solution?
XenMobile Device Manager
Scenario: A Citrix Engineer needs to restore files to an on-premise StorageZone deployment. The engineer has already initiated the file recovery on the ShareFile account. What is the next step the engineer needs to take on the StorageZone Controller?
Retrieve file GUIDs to be restored with Get-RecoveryPendingFileIDs
Scenario: A Citrix Engineer needs to deploy the WorxWeb mobile application. However, management does NOT want users to use WorxWeb for Internet browsing through the Micro VPN tunnel. Which MDX policy configuration must the engineer implement to meet the requirements outlined in the scenario?
Set Network Access to ‘Unrestricted’
A Citrix Engineer is integrating a Microsoft Certificate Authority server with the XenMobile Device Manager to provide certificate-based authentication for Wi-Fi. Which iOS policy must the engineer configure to deploy the certificate to devices?
Which URL could a Citrix Engineer use to connect to an App Controller appliance while in the process of configuring the appliance for the first time?
Scenario: An organization has decided to implement a `bring-your-own-device' (or `BYOD') policy. To support the BYOD initiative, the organization is in search of a mobile device management solution. The primary business driver for the solution will be to provide IT with control of mobility resource provisioning and de-provisioning for terminated users, as well as the ability to perform a selective wipe on lost devices. Which component should be included in the deployment to meet the needs of the solution?
XenMobile Device Manager
In addition to having NetScaler Gateway in the DMZ, what is the Citrix best practice for providing secure access to hosted virtual desktops and Web/SaaS applications from both inside and outside of an organizations network?
StoreFront on the LAN and App Controller on the LAN
A Citrix Engineer needs to push Exchange ActiveSync credentials to the native iOS email client for mobile devices using one policy for all users in an organization. Which macro expression should the engineer use to automatically populate the users’ email addresses?
A Citrix Engineer is setting up NetScaler for the first time and needs to configure NetScaler Gateway as part of a XenMobile solution. Which two pieces of information will the engineer need in order to allocate the universal license properly? (Choose two.)
The number of mobile users
The Host name of the NetScaler
Scenario: The installation of a XenMobile Device Manager server fails on the last step. The following error message is displayed: "Configuration Failed" What could have led to this error?
The correct Java JCE files have NOT been updated.
Which three prerequisites must be met to deploy XenMobile Device Manager in a high availability configuration? (Choose three.)
VIP or host name configured on a load balancer
SSL Session Persistence on ports 443 and 8443 on the load balancer
SQL Server Database accessible from both nodes of the high availability pair
Scenario: A user has been blocked from receiving email on a mobile device because the device is jailbroken. A Citrix Engineer needs to configure a XenMobile Mail Manager (XMM) rule to allow the device to receive email. Which action could the engineer take to locate the device information?
Use the XMM Monitor function to view the Device ID.
How could a Citrix Engineer ensure that Android devices remain connected to XenMobile Device Manager after successful enrollment?
Deploy an Android ‘Scheduling’ policy.
Scenario: An organization just acquired another organization and must create a new secure LDAP configuration to enable mobile device enrollment for the new domain users. The new domain will be called domain.local and will be hosted in a remote datacenter. Which two tasks must a Citrix Engineer complete in order to successfully complete this configuration? (Choose two.)
Open port 636 on the firewall
Install an Active Directory root certificate on the Device Manager server
Scenario: A Citrix Engineer needs to provide users with remote access to SaaS applications managed by XenMobile. Users will access the applications on their mobile devices through Worx Home. Which two options should the engineer configure in the session profile on the NetScaler? (Choose two.)
Clientless Access ON
Which two policies should a Citrix Engineer add to a deployment package to set the status of a user’s device to Out of Compliance and notify the engineer whenever a user installs a blacklisted application on an enrolled device? (Choose two.)
Which action should a Citrix Engineer take to ensure that iOS devices with a compromised certificate are unable to access Device Manager?
A Citrix Engineer set up XenMobile Device Manager and successfully enrolled Android devices, but is NOT able to enroll an iOS device. What should the engineer do to ensure the iOS device is enrolled?
Check that port 8443 is open to the XenMobile Device Manager.
What is the recommended procedure for reverting an App Controller high availability (HA) pair to a previous snapshot?
Shut down the secondary node, import the snapshot to the primary node, and restart the primary node, start the secondary node.
Scenario: A Citrix Engineer needs to add 10.10.220.10 as a Subnet IP (SNIP) through the NetScaler command-line interface. The SNIP will be used to provide connectivity to devices on another subnet. Management access is required through the SNIP. Which command should the engineer use?
add ns ip 10.10.220.10 255.255.255.0 -type SNIP -mgmtaccess ENABLED
Scenario: A Citrix Engineer needs to prevent restrictions from being applied to members of the Executive Staff regardless of their enrollment status. The engineer must also ensure that existing Device Manager rules still apply to all other users. Which policy modes on the XenMobile NetScaler Connector would the engineer use to meet the requirements of the scenario?
Static + ZDM Rules: Block Mode
Scenario: A Citrix Engineer installed and configured XenMobile Mail Manager to connect to Exchange and XenMobile Device Manager. Devices are being filtered for email access. The engineer needs to apply existing Exchange rules to unmanaged devices for access to email. Which step could the engineer take to meet the requirements outlined in the scenario?
Configure the Default Access Rule as ‘Unchanged’.
A school has a pool of mobile devices that students use on premises for coursework. How could a Citrix Engineer configure XenMobile Device Manager to warn the user when the device is taken off campus?
Set the Geo-fencing options in a Location Services policy.
When joining additional servers to an on-premise StorageZone environment, which URL should a Citrix Engineer use for the Primary Zone Controller field/entry?
http://<primary server IP address>/ConfigService
Scenario: A Citrix Engineer configured XenMobile NetScaler Connector with XenMobile Device Manager to restrict the ability to actively sync email based on mobile device requirements. The engineer must NOT allow devices that are outside a specific geographic location, have the Twitter application installed or have NOT communicated with XenMobile Device Manager in more than seven days. Which three filters should the engineer configure in the XenMobile Device Manager to meet the security requirements? (Choose three.)
Out of compliance devices
Which connection type is used when WorxWeb for iOS is configured to use Secure Browse mode?
Scenario: An Automated Action set to trigger on the event “Device noncompliance of B/W app policy” is configured to notify the user with the following message: “This application is not approved for your mobile device. Please remove it or access to your email will be denied.” Which type of Access policy should a Citrix Engineer create to support implementation of the Automated Action?
Which two steps must a Citrix Engineer complete to push an internally developed Android application to Android devices from XenMobile Device Manager? (Choose two.)
Select New app and choose the .apk file.
Enter the APK parameters and import the application.
Worx Home is installed on organization-wide Android and iOS devices. Which two tasks must a Citrix Engineer perform to ensure organization-wide devices successfully enroll with XenMobile Device Manager? (Choose two.)
Request an APNS certificate for iOS devices
Open outbound connections to APNS through ports 2195 and 2196 for the XenMobile Device Manager.
A Citrix Engineer created an Automated Action to determine when a device has been rooted or jailbroken and needs to customize the text of the email that users receive when NOT in compliance. How could the engineer customize the text of the email that users receive?
Edit the corresponding Notification Template.
Scenario:StoreFront is implemented as part of a XenMobile solution. Users in the environment currently rely on HTML5 Receiver because Citrix Receiver is NOT installed on their workstations. How could a Citrix Engineer present Web/SaaS applications to these users based on the scenario?
Add the App Controller server to StoreFront as a Delivery Controller.
When attempting to launch a ShareFile MDX-wrapped app from an iOS device, users encounter an authentication error. What are two possible causes of this issue? (Choose two.)
The NTP server configured on the App Controller is unreachable.
The email address in Active Directory does NOT match the email address of the ShareFile account.
Scenario: A Citrix Engineer needs to publish a custom mobile application for iOS devices from the XenMobile environment. Security requirements for the application are as follows: - Clipboard must be disabled. - Application cannot be installed on jailbroken devices. Which action must the engineer take to meet the security requirements stated in the scenario?
Wrap the .ipa file using the MDX Toolkit for XenMobile and configure the MDX policies
Scenario: A Citrix Engineer deployed new iOS applications during an IT maintenance window. While existing iOS applications remain unaffected, users are reporting they have NOT received the recently pushed new applications. What is the possible cause of this issue?
APNS ports have been blocked.
Scenario: Support staff need GoToAssist in order to provide clients around the world with support remotely. In order to complete this request, the Citrix Engineer must configure GoToAssist with the XenMobile Device Manager and App Controller. Which two items of GoToAssist information must the engineer enter in both the Device Manager and App Controller consoles to complete the installation of GoToAssist? (Choose two.)
Email Integration Key
A mandatory security patch was recently released to the Web for XenMobile Device Manager. How could a Citrix Engineer verify whether the patch has been installed on the XenMobile Device Manager server already?
Browse to http://FQDN/<instancename>/helper.jsp and look under the 'Patches' link.
Scenario: Users are complaining that they are no longer able to access their corporate email. A Citrix Engineer reviews the Exchange policy and notices the Exchange ActiveSync Host URL has been modified. How could the engineer identify who made this change and when?
Run the Administrator Operations Report.