Certification Provider: Citrix
Exam Name: Citrix Virtual Apps and Desktops 7 Advanced Administration
Exam Code: 1Y0-312
Official Exam Time: 90 minutes
Number of questions in the Official Exam: 71 Q&As
Latest update time in our database: May 30,2023
1Y0-312 Official Exam Topics:
  • Topic1 : Determine whether the number and sizing of the Citrix Gateway components are appropriate for a production environment.
  • Topic2 : Determine how to configure Subscription Store synchronization for a given scenario. / Determine how to perform backups of key components and data in a Citrix Virtual Apps and Desktops environment.
  • Topic3 : Determine how to fail over a Citrix Virtual Apps and Desktops environment to a disaster recovery environment, and later restore the production environment. / Implement Advanced Authentication Methods
  • Topic4 : Determine how one-time passwords can be used with RADIUS authentication in a Citrix Virtual Apps and Desktops environment. / Determine how to implement smart card authentication in a Citrix Virtual Apps and Desktops environment.
  • Topic5 : Determine how to implement ADFS and SAML authentication in a Citrix Virtual Apps and Desktops environment. / Determine how to prevent jailbreak attacks by managing user assignments
  • Topic6 : Secure Machines Running the Virtual Delivery Agent / Advanced Troubleshooting
  • Topic7 : Determine how to use various tools to troubleshoot a Citrix Virtual Apps and Desktops environment. / Determine how to troubleshoot common HDX connection issues for a given scenario.
  • Topic8 : Determine how App layering components communicate. / Determine how to create an Elastic App Layer.
  • Topic9 : Determine how to create an App Layering template. / Workspace Environment Management (WEM) Administration
  • Topic10 : Determine how to perform general administration of WEM in a given scenario. / Use WEM to Centralize Environment Management, Optimize Performance and Secure Environments
  • Topic11 : Determine how to use WEM to increase the security of a Citrix Virtual Apps and Desktops environment. /  NTFS Permissions
  • Topic12 :  Windows Authentication and Authorization / Knowledge of shared storage configuration and management
  • Topic13 : 90 minutes + 30 minutes (time extension) /

How can a Citrix Engineer setup synchronization of subscription data between server groups using a replication schedule?

How can a Citrix Engineer setup synchronization of subscription data between server groups using a replication schedule?
A . Execute a Windows PowerShell command on the StoreFront server
B . Make changes in the subscription file on the StoreFront server
C . Make changes in the web.config file on the StoreFront server
D . Use the StoreFront console

Answer: B

Explanation:

Reference: https://www.citrix.com/blogs/2015/02/19/storefront-synchronization-vip/

What is the first step in the migration process of an on-premises Workspace Environment Management (WEM) environment that is currently in production to a WEM Citrix Cloud service?

What is the first step in the migration process of an on-premises Workspace Environment Management (WEM) environment that is currently in production to a WEM Citrix Cloud service?
A . Reinstall the WEM service agent on managed machines.
B . Export the data within the database to a SQL file.
C . Download the migration tool from the WEM service Downloads tab.
D . Modify permissions on the infrastructure service.

Answer: C

Explanation:

Reference: https://docs.citrix.com/en-us/workspace-environment-management/service/migrate.html

On which two components should the engineer run Citrix Diagnostic Facility (CDF) control to capture the required logs?

Scenario: A Citrix user is accessing a Windows 10 VDI machine using a personal laptop. The VDI is becoming unregistered frequently, which is making it difficult for the user to access it. In order to troubleshoot the issue, a Citrix Engineer is assigned to collect CDF logs.

On which two components should the engineer run Citrix Diagnostic Facility (CDF) control to capture the required logs? (Choose two.)
A . Windows 10 VDI
B . Delivery Controller
C . StoreFront server
D . User’s personal laptop

Answer: A,B

Explanation: https://support.citrix.com/article/CTX224308

Which two steps can the engineer take to minimize attacks without interfering with user productivity?

Scenario: A newly created Citrix Virtual Apps and Desktops site has sensitive information. The users consistently use different browsers for their daily tasks. A Citrix Engineer is looking for ways to minimize attacks like ransomware, phishing, and session hijacking.

Which two steps can the engineer take to minimize attacks without interfering with user productivity? (Choose two.)
A . Disable access to specific browsers.
B . Disable all the user plugins.
C . Implement HTTP Strict Transport Security (HSTS).
D . Use HTTP response headers to send security policies to endpoint browsers.

Answer: B,C

Explanation:

https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Strict_Transport_Security_Cheat_S heet.html

In which local Windows user group of each StoreFront server should the engineer add the Microsoft Active Directory domain machine accounts?

Scenario: A Citrix Engineer is working on a StoreFront subscription synchronization issue in an existing Citrix Virtual Apps and Desktops environment. One StoreFront server is in the New York datacenter and another in the San Francisco datacenter. The servers are NOT in the same group. The engineer has run all the required PowerShell commands on both StoreFront servers.

In which local Windows user group of each StoreFront server should the engineer add the Microsoft Active Directory domain machine accounts?
A . CitrixSuscriptionServerUsers
B . CitrixClusterMembers
C . CitrixSubscriptionsStoreServiceUsers
D . CitrixSubscnptionsSyncUsers

Answer: D

Explanation: https://support.citrix.com/article/CTX236466

Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment with both internal and external users and has deployed Workspace Environment Management (WEM) within the infrastructure to provide resources to users within their sessions.

Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment with both internal and external users and has deployed Workspace Environment Management (WEM) within the infrastructure to provide resources to users within their sessions.

The engineer has recently added a network printer to WEM under the Actions node, using the New Network Printer dialog tab, and wants to limit this printer usage to internal Citrix users, as shown below:

✑ Internal users utilize Windows 10 only

✑ External users Windows 10 and Windows 2016 machines

✑ The server network IP address range is from 192.168.10.1 to 192.168.10.200

✑ Citrix LAN users are all within IP address scope of 192.168.20.50 to 192.168.20.90

✑ The external users are on a public domain

✑ The Everyone group has already been added to the Assignments node within the WEM console

The engineer needs to create a Condition based on from within the Filters node and the Matching Result field within WEM to complete this task.
A . OS Platform type; select Windows 10 from
B . Client IP Address Match; add the IP address range 192.168.20.50 to 192.168.20.90 to
C . IP Address Match; add the IP address range 192.168.10.1 to 192.168.10.200 to
D . Client OS; select Windows 10 from

Answer: B

What does the engineer need to do prior to enabling this feature?

A Citrix Engineer wants to enable the "Log Off Web Portal When Session is Launched" feature within Workspace Environment Management (WEM) transformer settings.

What does the engineer need to do prior to enabling this feature?
A . Set Workspace control to NOT automatically reconnect to the sessions when users log onto StoreFront.
B . Set Workspace control settings to log off from session when users log off from StoreFront.
C . Set Workspace control to automatically reconnect to the sessions when users log onto StoreFront.
D . Set Workspace control settings to NOT log off a session when users log off from StoreFront.

Answer: D

Explanation:

""If you wish to use this setting, ensure you configure workspace control to not log off a session when the Web interface is logged off" (https://wilkyit.com/2017/06/12/citrix-workspaceenvironment-manger-wem-transformer-setting-overview/)

Which two statements are true regarding the creation of OS Layers with Citrix App Layering? (Choose two.)

Which two statements are true regarding the creation of OS Layers with Citrix App Layering? (Choose two.)
A . When there is a need to update the OS of a layered image, it is ideal to create a new OS Layer.
B . Virtual machines built as the OS Layer should be joined to a functional Active Directory domain within the infrastructure that will be utilized.
C . The Windows Updates feature should be left enabled within the OS Layer in case any new updates occur once the OS Layer is deployed.
D . Any Microsoft products that are updated by the Windows Updates feature should be included in the OS Layer.
E . For best performance, complete a clean installation of the Windows operating system when building an OS Layer.

Answer: D,E

Explanation:

Reference: https://docs.citrix.com/en-us/citrix-app-layering/4/layer/prepare-os-for-layering.html

After a Citrix Engineer configured FAS and SAML in a Citrix Virtual Apps and Desktops site, the Virtual Delivery Agent (VDA) machine requests the ________ from ________ in order to complete the VDA Windows logon process.

After a Citrix Engineer configured FAS and SAML in a Citrix Virtual Apps and Desktops site, the Virtual Delivery Agent (VDA) machine requests the ________ from ________ in order to complete the VDA Windows logon process.
A . Server’s Certificate; Active Directory Certification Services
B . User’s Certificate; Federated Authentication Service
C . Server’s Certificate; Delivery Controller
D . User’s Certificate; Active Directory Certification Services

Answer: B

Explanation:

The VDA requests the user’s certificate from FAS so it can complete the VDA Windows logon process.

Reference: https://www.carlstalhood.com/citrix-federated-authentication-service-saml/

Which statement is true regarding Citrix Workspace Environment Management (WEM) Agent?

Which statement is true regarding Citrix Workspace Environment Management (WEM) Agent?
A . WEM Agent synchronizes with the WEM Infrastructure Service on port TCP 8287.
B . WEM Agent can be installed on the Citrix Workspace Environment Management Infrastructure Services server.
C . WEM Agent can be installed on either a Windows Desktop OS or on a Windows Server O
E . Norskale Agent Host Service manages WEM Agent and it runs under Network Service.

Answer: C

Explanation:

https://docs.citrix.com/en-us/workspace-environment-management/current-release/install-and-configure/agent-host.html