VMware 2V0-51.23 VMware Horizon 8.x Professional Online Training

VMware 2V0-51.23 Online Training

The questions for 2V0-51.23 were last updated at Apr 25,2024.

Exam Code: 2V0-51.23
Exam Name: VMware Horizon 8.x Professional
Certification Provider: VMware
Latest update: Apr 25,2024

Question #1

To reduce the risk of users downloading malware to the corporate network, an administrator wants to

allow end-users to open only intranet websites inside their virtual desktop. Additionally, the administrator wants to configure all other URLs to automatically open in a browser on the end-user’s client machine.

Which steps should the administrator take to meet the requirements? (Choose two.)

A . Enable the URL Content Redirection feature in Horizon Agent.
B . Disable the Allow External Website feature in Horizon Agent.
C . Enable secure website settings in the Global Settings Security menu.
D . Configure group policy settings to indicate how Horizon Agent redirects the URL
E . Enable the URL Content Redirection feature on the desktop pool settings.

Reveal Solution Hide Solution

Correct Answer: AD
AD

Explanation:

The URL Content Redirection feature allows administrators to configure specific URLs to open on the client machine or in a remote desktop or published application. This can help reduce the risk of users downloading malware to the corporate network, as well as improve the user experience and performance of certain web applications.

To meet the requirements of the scenario, the administrator needs to enable the URL Content Redirection feature in Horizon Agent when installing or upgrading it on the instant-clone desktops. This will allow Horizon Agent to send or receive URLs from Horizon Client, depending on the redirection direction. The administrator also needs to configure group policy settings to indicate how Horizon Agent redirects the URL. Specifically, the administrator needs to enable agent-to-client redirection, which means that Horizon Agent sends the URL to Horizon Client, which opens the default application for the protocol in the URL on the client machine. The administrator also needs to specify which URLs are redirected from a remote desktop to a client, and which URLs are not redirected. In this case, the administrator needs to configure a whitelist of intranet websites that are allowed to open inside the virtual desktop, and a blacklist of all other websites that are automatically redirected to a browser on the client machine.

The other options are not relevant or sufficient for meeting the requirements. Disabling the Allow External Website feature in Horizon Agent will prevent users from accessing any external websites from their virtual desktops, which might not be desirable or practical. Enabling secure website settings in the Global Settings

Security menu will not affect how URLs are redirected, but only how secure connections are established between Horizon components. Enabling the URL Content Redirection feature on the desktop pool settings will not work unless it is also enabled in Horizon Agent and configured with group policy settings.

References: Configuring URL Content Redirection and [VMware Horizon 8.x Professional Course]

Question #2

Drag and drop each Desktop Persistence type on the left to its matching description on the right.

Reveal Solution Hide Solution

Question #3

What are two best practices for Windows Golden Image Optimization? (Choose two.)

A . Activate Windows OS paging.
B . Turn on automatic Windows maintenance (scheduled tasks).
C . Turn on automatic Windows Updates.
D . Disable unnecessary services.
E . Disable power options.

Reveal Solution Hide Solution

Correct Answer: D E
D E

Explanation:

Windows golden image optimization is the process of reducing the size and improving the performance of the Windows OS image that is used as the base for the desktop pools.

Some of the best practices for Windows golden image optimization are:

– Disable unnecessary services: Services that are not required for the desktop functionality or user experience should be disabled to reduce the resource consumption and potential security risks.

For example, services such as Windows Search, Windows Defender, Windows Update, and Superfetch can be disabled for better performance and stability.

– Disable power options: Power options such as hibernation and sleep mode should be disabled to free up disk space and avoid potential issues with the desktop state. Hibernation can consume a large amount of disk space by creating a hiberfil.sys file that stores the system memory contents when the desktop is powered off. Sleep mode can cause problems with network connectivity and user sessions when the desktop is resumed from a low-power state.

Other best practices for Windows golden image optimization include:

– Activate Windows OS paging: Paging is a mechanism that allows the OS to use a portion of the disk as virtual memory when the physical memory is insufficient. Paging can improve the performance and stability of the desktops by preventing out-of-memory errors and reducing memory contention. However, paging can also increase disk I/O and wear, so it should be configured with caution and monitored regularly.

– Turn off automatic Windows maintenance (scheduled tasks): Automatic Windows maintenance is a feature that runs various tasks such as disk defragmentation, disk cleanup, security scanning, and system diagnostics in the background. These tasks can consume a lot of CPU, memory, and disk resources and interfere with the user experience and desktop performance. Therefore, it is recommended to turn off automatic Windows maintenance and run these tasks manually or on a scheduled basis when the desktops are not in use.

– Turn off automatic Windows Updates: Automatic Windows Updates is a feature that downloads and installs updates for the OS and other Microsoft products in the background. These updates can consume bandwidth, disk space, and CPUresources and cause compatibility issues with some applications or drivers. Therefore, it is recommended to turn off automatic Windows Updates and manage the updates manually or through a centralized tool such as VMware Update Manager or Microsoft WSUS. References: [Optimizing Your VMware Horizon View 7.x Golden Image] and [VMware Horizon 8.x Professional Course]

Question #4

What is the effect of changing any VMware Blast policy that cannot be changed in real time?

A . Horizon Client detects the change and prompts the user to reboot once every 480 seconds.
B . VMware Tools services is restarted by Microsoft GPO Update service.
C . VMware Tools detects the change and immediately applies the new setting within 480 seconds.
D . Microsoft GPO update rules apply and GPOs are updated manually or by restarting the Horizon Agent.

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

VMware Blast policy settings are stored in the registry key HKLMSoftwarePoliciesVMware, Inc.VMware BlastConfig on the remote desktops or RDS hosts that use the VMware Blast display protocol. These settings can be configured by using the VMware Blast ADMX template file (vdm_blast.admx) and applying it through Microsoft Group Policy Object (GPO). Some of these settings can be changed in real time, which means that they take effect immediately after the policy is applied, without requiring a reboot or a reconnection of the Horizon Client. However, some of these settings cannot be changed in real time, which means that they require a reboot or a reconnection of the Horizon Client to take effect.

The effect of changing any VMware Blast policy that cannot be changed in real time is that the Microsoft GPO update rules apply and GPOs are updated manually or by restarting the Horizon Agent.

This means that the new policy settings will not be applied until one of the following events occurs:

– The Horizon Agent service is restarted on the remote desktop or RDS host. This can be done manually by using the Services console or the command-line tool sc.exe, or automatically by using a scheduled task or a script.

– The remote desktop or RDS host is rebooted. This can be done manually by using the Restart option in Windows, or automatically by using a scheduled task or a script.

– The Group Policy refresh interval is reached. This is a configurable time interval that determines how often the system checks for and applies new or changed GPOs. By default, this interval is 90 minutes for domain members and 5 minutes for domain controllers, with a random offset of 0 to 30 minutes. This interval can be modified by using the Group Policy refresh interval for computers setting in the ComputerConfigurationAdministrative TemplatesSystemGroup Policy folder of the Group Policy Management Console.

Therefore, to ensure that the VMware Blast policy settings that cannot be changed in real time are applied as soon as possible, it is recommended to restart the Horizon Agent service or reboot the remote desktop or RDS host after applying the policy.

References: VMware Blast Policy Settings, Group Policy refresh intervals, and [VMware Horizon 8.x Professional Course]

Question #5

Refer to the exhibit.

Drag and drop the labels on the left into their correct location in the diagram of VMware Horizon Architecture on the right.

Reveal Solution Hide Solution

Question #6

Refer to the exhibit.

Drag and drop the components on the left that are part of the logical architecture for a single-site deployment of VMware Horizon into their correct position in the diagram on the right.

Reveal Solution Hide Solution

Question #7

The administrator of Windows 10 desktops in a VMware Horizon environment needs to build a new Windows 10 desktop pool. This new pool will be dedicated to training and onboarding new employees. The administrator has created a shortcut on a test machine, which has successfully opened the web browser to the on-boarding applications. After deploying the new desktop pool across the company, the administrator notices that the shortcut placed on desktops is not available to any other user connecting to the desktop pool.

Which two options are available for the administrator to make this shortcut available to all desktop pool users, while minimizing ongoing administrative effort, before updating the desktop pool golden image? (Choose two.)

A . Copy the shortcut during user provisioning to a non-writeable App Volume.
B . Copy the shortcut to the Windows Default Domain Controller Policy.
C . Copy the shortcut to c:usersPublicDesktop.
D . Configure a Shortcut with Horizon View Client.
E . Configure a Shortcut with DEM (Dynamic Environment Manager).

Reveal Solution Hide Solution

Correct Answer: C E
C E

Explanation:

The two options that are available for the administrator to make the shortcut available to all desktop pool users, while minimizing ongoing administrative effort, before updating the desktop pool golden image are:

– Copy the shortcut to c:usersPublicDesktop. This option will place the shortcut in the public desktop folder, which is shared by all users who log on to the same computer. The public desktop folder is normally a hidden folder, so the administrator needs to enable the option to show hidden files and folders in File Explorer1. This option does not require any additional software or configuration, but it will only work for the existing desktops in the pool. If new desktops are added or refreshed, the shortcut will not be copied automatically.

– Configure a Shortcut with DEM (Dynamic Environment Manager). This option will use the DEM console to create a shortcut configuration that will apply the shortcut to the user’s desktop during logon2. The administrator needs to install and configure DEM on the Horizon environment, and create a configuration share and a profile archive share for storing the DEM settings3. This option requires more initial setup, but it will work for any desktop in the pool, regardless of whether it is new or refreshed. It also allows more flexibility and control over the shortcut properties and conditions.

The other options are not valid or feasible because:

– Copying the shortcut during user provisioning to a non-writeable App Volume will not work because App Volumes are used to deliver applications, not shortcuts. App Volumes are virtual disks that are attached to the virtual machines at runtime, and they contain application files, registry entries, and settings4. Copying a shortcut to an App Volume will not make it appear on the user’s desktop.

– Copying the shortcut to the Windows Default Domain Controller Policy will not work because this policy is used to configure settings for domain controllers, not desktops. The Default Domain Controller Policy is a Group Policy Object (GPO) that is linked to the Domain Controllers organizational unit (OU) in Active Directory, and it contains security settings that are applied to all domain controllers in the domain5. Copying a shortcut to this policy will not affect any desktops in the Horizon environment.

– Configuring a Shortcut with Horizon View Client will not work because Horizon View Client is used to connect to remote desktops and applications, not to create shortcuts. Horizon View Client is a software application that runs on various devices and platforms, and it allows users to access their virtual desktops and applications through a secure connection6. Configuring a shortcut with Horizon View Client will not make it appear on the user’s desktop.

References:

– How to make a desktop shortcut available for all users in Windows 101

– VMware Dynamic Environment Manager (DEM) 2306 C Carl Stalhood2

– VMware Tech Zone Antivirus Considerations in a VMware Horizon Environment: exclusions for Horizon View, App Volumes, User Environment Manager, ThinApp3

– App Volumes Overview

– Default Domain Controller Policy5

– VMware Horizon Clients Documentation6

Question #8

What are two Cloud Pod Architecture feature limitations? (Choose two.)

A . Cloud Pod Architecture does not support Active Directory two-way trusts between domains.
B . Cloud Pod Architecture is not supported with Unified Access Gateway appliances.
C . Kiosk mode clients are not supported unless a workaround has been implemented.
D . Cloud Pod Architecture cannot span multiple sites and data centers simultaneously.
E . The Cloud Pod Architecture feature is not supported in an IPv6 environment.

Reveal Solution Hide Solution

Correct Answer: A C
A C

Explanation:

Cloud Pod Architecture is a feature that allows administrators to link multiple Horizon pods across sites and data centers to form a single logical entity called a pod federation. Cloud Pod Architecture enables global entitlements, which allow users to access desktops and applications from any pod in the pod federation. Cloud Pod Architecture also provides load balancing, high availability, and disaster recovery capabilities for Horizon deployments.

However, Cloud Pod Architecture has some feature limitations that administrators should be aware of. Two of these limitations are:

– Cloud Pod Architecture does not support Active Directory two-way trusts between domains: This means that the domains that contain the Horizon pods in the pod federation must have a one-way trust relationship, where the domain that contains the Cloud Pod Architecture home site trusts all the other domains, but not vice versa. A two-way trust relationship, where each domain trusts and is trusted by all the other domains, is not supported by Cloud Pod Architecture and can cause authentication and entitlement issues.

– Kiosk mode clients are not supported unless a workaround has been implemented: This means that users who log in to Horizon Client in kiosk mode, which is a mode that allows users to access a single desktop or application without entering credentials, cannot access desktops or applications from a Cloud Pod Architecture implementation. Kiosk mode clients are not compatible with global entitlements and load balancing features of Cloud Pod Architecture. However, there is a workaround that involves creating a dedicated user account and a dedicated desktop pool for each kiosk mode client and using a script to launch Horizon Client with the appropriate parameters. For instructions, see VMware Knowledge Base (KB) article 21488881.

The other options are not limitations of Cloud Pod Architecture:

– Cloud Pod Architecture is supported with Unified Access Gateway appliances: Unified Access Gateway is a platform that provides secure edge services for Horizon deployments, such as secure remote access, load balancing, and authentication. Unified Access Gateway is compatible with Cloud Pod Architecture and can be configured to route user requests to the appropriate pod in the pod federation based on global entitlements and load balancing policies.

– Cloud Pod Architecture can span multiple sites and data centers simultaneously: This is one of the main benefits of Cloud Pod Architecture, as it allows administrators to scale up and out their Horizon deployments across different geographic locations and network boundaries. Cloud Pod Architecture can support up to 15 pods per pod federation andup to 5 sites per pod federation, with a maximum of 200,000 sessions per pod federation.

– The Cloud Pod Architecture feature is supported in an IPv6 environment: IPv6 is the latest version of the Internet Protocol that provides a larger address space and enhanced security features for network communication. Cloud Pod Architecture supports IPv6 environments and can operate in mixed IPv4 and IPv6 environments as well.

References: Cloud Pod Architecture Limitations in Horizon 8 and [VMware Horizon 8.x Professional Course]

Question #9

Refer to the exhibit.

Drag and drop the appropriate firewall ports in support of the Blast Extreme protocol into the correct locations in the diagram on the right.

Two options will not be used.

Reveal Solution Hide Solution

Question #10

Which two scenarios are appropriate for a cloud implementation of a VDI solution over an on-premises solution? (Choose two.)

A . The organization already has infrastructure to support a VDI.
B . The organization needs to setup high availability and disaster recovery.
C . The organization needs to quickly scale-up in disparate geographical locations.
D . The organization has limited CapEx budget.
E . The organization controls highly confidential data.

Reveal Solution Hide Solution

Correct Answer: C D
C D

Explanation:

A cloud implementation of a VDI solution over an on-premises solution is appropriate for the following scenarios:

– The organization needs to quickly scale-up in disparate geographical locations. A cloud VDI solution can provide faster provisioning, deployment, and management of virtual desktops and applications across multiple regions and data centers. A cloud VDI solution can also offer better performance, availability, and user experience for remote and mobile workers who need to access their desktops and applications from anywhere and any device12.

– The organization has limited CapEx budget. A cloud VDI solution can reduce the upfront capital expenditure (CapEx) required to purchase, install, and maintain the hardware and software infrastructure for a VDI solution. A cloud VDI solution can also lower the operational expenditure (OpEx) by shifting the responsibility of managing, updating, and securing the VDI infrastructure to the cloud provider. A cloud VDI solution can offer flexible and predictable pricing models based on usage, subscription, or consumption13.

The other scenarios are not appropriate for a cloud implementation of a VDI solution over an on-premises solution because:

– The organization already has infrastructure to support a VDI. If the organization has already invested in the hardware and software resources to support a VDI solution, it may not be cost-effective or feasible to migrate to a cloud VDI solution. The organization may also have existing policies, processes, and workflows that are tailored to the on-premises VDI solution and may not be compatible with the cloud VDI solution4.

– The organization needs to setup high availability and disaster recovery. While a cloud VDI solution can provide high availability and disaster recovery capabilities, it may not be sufficient or reliable for some organizations that have strict requirements for data protection, compliance, and business continuity. An on-premises VDI solution can offermore control, customization, and security over the backup, replication, and restoration of the VDI data and applications in the event of a disaster5.

– The organization controls highly confidential data. A cloud VDI solution may pose some risks or challenges for organizations that handle sensitive or regulated data, such as financial, healthcare, or government data. A cloud VDI solution may not meet the compliance standards or regulations that apply to the organization’s data. A cloud VDI solution may also expose the organization’s data to potential breaches, leaks, or unauthorized access by third parties. An on-premises VDI solution can provide more visibility, governance, and encryption over the organization’s data6.

References: =

1: VMware: What is Desktop as a Service (DaaS)?

2: Parallels: VDI in the Cloud: Which Cloud VDI Product Is Right for You?

3: Microsoft Azure: What Is Virtual Desktop Infrastructure (VDI)?

4: VMware: On-Premise vs Cloud: Which is Better for Your Business?

5: VMware: Disaster Recovery Solutions for Virtual Desktop Infrastructure (VDI)

6: Microsoft Azure: Virtual desktop infrastructure security best practices

Next Questions

VMware 2V0-51.23 VMware Horizon 8.x Professional Online Training

VMware 2V0-51.23 VMware Horizon 8.x Professional Online Training

VMware 2V0-51.23 Online Training

The questions for 2V0-51.23 were last updated at Apr 25,2024.

Latest 2V0-51.23 Dumps Valid Version with 94 Q&As

Related Posts