EMT Practice Test

1. Question Content...

---

Question1: Scenario: A Citrix Engineer needs to publish an application only to employee-owned devices. Some employees may have employee-owned and corporate-owned devices.
What could the engineer create on the XenMobile Server to meet the needs of this scenario?

Question2: What would cause a subset of iOS users in the same security group to NOT be provisioned to ShareFile?

Question3: Which task should a Citrix Engineer perform before installing the StorageZone Controller?

Question4: Scenario: For testing purposes, an Android application developer needs to allow an unwrapped application to receive data from a wrapped version of WorxMail. WorxMail must remain in a restricted state.
Which action could a Citrix Engineer take to allow the wrapped application to interact with an unmanaged application while maintaining the prerequisite security standards?

Question5: A Citrix Engineer, in the process of configuring XenMobile, launches the XenMobile Console for the first time and is presented with the wizard to continue the configuration.
Which two options could the engineer configure at this stage of the installation? (Choose two.)

Question6: Scenario: A Citrix Engineer is configuring a load-balanced virtual server on the NetScaler that will handle the Mobile Application Management (MAM) traffic from Netscaler Gateway. The engineer binds multiple XenMobile Servers to the service group.
Which persistence method should the engineer use to determine to which XenMobile Server to send the MAM traffic?

Question7: What would cause a subset of Android users in the same security group to NOT be provisioned to ShareFile?

Question8: Which configurations must a Citrix Engineer make to integrate XenMobile with XenApp/XenDesktop for a customer whose users access their environment from internal and external network locations?

Question9: Scenario: A Citrix Engineer has configured the XenMobile Public Key Infrastructure (PKI) integration with the domain-hosted Certificate Authority (CA). During enrollment the client certificate fails to be delivered to a device. The engineer reviews the logs and finds a "401 Unauthorized" error.
Which two steps should the engineer take to correct this issue? (Choose two.)

Question10: What are two valid reasons for deploying a XenMobile Server in the Demilitarized Zone (DMZ)? (Choose two.)

Question11: Which two options must a Citrix Engineer enable in order to configure XenMobile auto-discovery for iOS and Android devices in a XenMobile Enterprise deployment? (Choose two.)

Question12: Which three NetScaler features must a Citrix Engineer configure in order for XenMobile NetScaler Connector to properly function? (Choose three.)

Question13: Which two steps could a Citrix Engineer take to tag both corporate-owned and employee-owned devices?
(Choose two.)

Question14: A Citrix Engineer must provide a group of non-administrator help-desk personnel with access to a set of features in the XenMobile Console.
What should the engineer do to accomplish this task?

Question15: Scenario: A Citrix Engineer is getting ready to deploy a XenMobile pilot environment to several users in the Sales department. The engineer assigned to the project has provided some users with logon instructions and a URL for the NetScaler Gateway. The engineer has configured LDAP for SSO with SAMAccountName. Several users are reporting that they are unable to log on.
Which file could the engineer check on the NetScaler to help troubleshoot the issue?

Question16: A Citrix Engineer is preparing to publish a corporate-purchased application to all managed iOS devices.
How could the engineer accomplish this task?

Question17: In which way does implementing Worx PIN improve the user experience while maintaining Enterprise security?

Question18: How could a Citrix Engineer ensure that user devices reflect a change to the Worx PIN security policy?

Question19: Which two XenMobile policies could a Citrix Engineer use to block the camera on an iOS device? (Choose two.)

Question20: Scenario: After being online for a few weeks, users can no longer access the Worx Store. After investigation, a Citrix Engineer believes there is a problem with authentication at the NetScaler Gateway.
Which command could the engineer run on the NetScaler to validate if LDAP authentication is failing?

Question21: A Citrix Engineer needs to push native email profiles and configurations to user devices.
Which XenMobile macros could the engineer use to automate email provisioning of native email clients on user devices?

Question22: A Citrix Engineer must deploy a scheduling policy to __________ and __________ devices in order to allow these devices to check in automatically without further intervention by the engineer. (Choose the two correct options to complete the sentence.)

Question23: Scenario: A Citrix Engineer plans to implement XenMobile and integrate it with an existing XenDesktop 7.6 environment. The engineer also plans to use WorxMail in Secure Ticket Authority (STA) mode.
Which statement is true regarding the NetScaler configuration?

Question24: A Citrix Engineer installed XenMobile Mail Manager and needs to ensure that ActiveSync clients are quarantined if they are NOT enrolled in the XenMobile Server.
Which Default Rule should the engineer choose in this scenario?

Question25: Scenario: A Citrix Engineer needs to configure WorxMail MDX policies based on the information below.
Environment Information
- On-premise Exchange Server: mail.company.local
- XenMobile Server FQDN: xms.company.com
- NetScaler Gateway FQDN: nsg.company.com
How could the engineer configure WorxMail MDX policies to conserve battery life and minimize re- authentication?

Question26: A Citrix Engineer has configured WorxMail for iOS to use PUSH notifications but does NOT see mail refreshing at the proper interval.
Which two steps should the engineer take in order to ensure the desired PUSH experience? (Choose two.)

Question27: Which XenMobile Windows Phone 8.1 policy should a Citrix Engineer configure in order to deploy Worx MDX apps to a Windows Phone 8.1 device?

Question28: Which two options are advantages of configuring a scheduling policy to Always? (Choose two.)

Question29: After a successful iOS device enrollment through a NetScaler SSL Offload load balancer, the device was immediately selectively wiped.
Which two scenarios could have caused this selective wipe? (Choose two.)

Question30: What is the correct format for defining the XenMobile web enrollment service root URL?

Question31: Scenario: A Citrix Engineer needs to implement SSL Offload in which traffic is encrypted all the way from the client device to the XenMobile Server. The vServer and service configurations are listed below.
Load balancing vServers:
- Protocol: SSL, Port: 443
- Protocol: SSL, Port: 8443
Services:
- Protocol: SSL, Port: 443 (Bound to 443 vServer)
- Protocol: SSL, Port: 8443 (Bound to 8443 vServer)
The current configuration is NOT working properly.
What should the engineer adjust to implement SSL Offload successfully?

Question32: Scenario: A Citrix Engineer is designing a XenMobile Enterprise solution to support approximately 30,000 device connections. The environment must be able to sustain the failure of one node in a cluster at any given time for redundancy and maintenance purposes. Each server's specifications include four vCPUs and 16 GB of RAM.
What is the minimum number of XenMobile Servers that the engineer should recommend as part of this cluster?

Question33: A Citrix Engineer recently enabled Worx PIN authentication on a XenMobile Server.
What should the engineer instruct users to do in order to enable Worx PIN on their devices?

Question34: What happens if a Citrix Engineer allows an Apple Developer certificate to expire?

Question35: Scenario: A customer would like to configure a single NetScaler Gateway that facilitates access to XenMobile and XenApp/XenDesktop resources from iOS and Android mobile devices. The customer also plans for users to access XenApp and XenDesktop resources by using a web browser from other endpoints.
The following Session Policies and expressions have been configured on NetScaler:
- Policy 1: REQ.HTTP.HEADER User-Agent NOTCONTAINS CitrixReceiver && REQ.HTTP.HEADER Referer EXISTS
- Policy 2: REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER X-Citrix- Gateway EXISTS
A Citrix Engineer is asked to create a new Session Profile for users accessing resources through web browsers on their endpoint devices.
The profile should be bound to __________ and direct users to __________. (Choose the correct set of options to complete the sentence.)

Question36: Scenario: A user has lost permission to WorxMail and the application has been uninstalled. However, the user can still access the Worx Store.
Which two sets of logs should a Citrix Engineer gather in order to help diagnose this issue? (Choose two.)

Question37: A Citrix Engineer needs to allow junior administrators to perform selective wipe requests from a single console for users who are members of the IT and HR departments.
What should the engineer do to accomplish this objective?

Question38: Which two triggers could a Citrix Engineer use to create an automated action to selectively wipe devices when a user account is disabled? (Choose two.)

Question39: A Citrix Engineer is configuring access to a XenApp/XenDesktop environment.
Which file must the engineer define a relative path to within the XenMobile Server Console?

Question40: Scenario: A Citrix Engineer needs to provide access from WorxWeb to internal corporate HTTP websites through an internal proxy server. The engineer has configured Single Sign-On to web applications on the NetScaler.
What are two ways that the engineer could ensure that users are able to access the websites without being prompted to authenticate more than once? (Choose two.)

Question41: Scenario: Microsoft CA certificate-based authentication is the sole authentication method being used for Mobile Application Management (MAM). A certificate administrator revokes a user's client certificate. After doing so, the user can still access applications in the Worx Store.
What could a Citrix Engineer do to make sure that the user will no longer be able to access the Worx Store when their certificate is revoked?

Question42: A Citrix Engineer is currently in the process of a first-time installation of a XenMobile Server using the command-line interface.
Which two settings are required when configuring the remote database using SQL authentication?
(Choose two.)

Question43: Scenario: A Citrix Engineer wants to configure a NetScaler Gateway with two-factor authentication within a new XenMobile deployment while providing users with the benefits of single sign-on to the existing XenApp and XenDesktop resources. The engineer configured a Public Key Infrastructure (PKI) for other components in the environment already and would like to use the same PKI.
Which two types of authentication policies will the engineer need to add to the NetScaler Gateway virtual server? (Choose two.)

Question44: What should a Citrix Engineer do to remove and prevent subsequent access to an unwrapped application that is already installed by a group of users on their iOS devices?

Question45: What are three reasons why a Citrix Engineer would tag a device? (Choose three.)

Question46: Scenario: A Citrix Engineer is experiencing issues with client certificate authentication to their Microsoft Exchange Server after configuring their Public Key Infrastructure (PKI) settings within the XenMobile Server. The Exchange configuration and certificate are being configured and delivered to the device within an Exchange policy. The engineer is able to see the certificate and Exchange policy being delivered within the XenMobile Console as well as the certificate on the iOS device.
Which two sets of logs could the engineer review to determine why authentication is failing? (Choose two.)

Question47: Scenario: A Citrix Engineer is configuring the NetScaler appliance for SSL offloading. The XenMobile Server is named xms.domain.com.
The following is a list of the certificates installed on the NetScaler:
- *.domain.com - wildcard server certificate
- cacerts.pem - devices certificate
- xms.domain.com - server certificate for the XenMobile Server
- dc-1-CA.cer - Root certificate for *.domain.com
The engineer needs to configure an SSL Load Balancing virtual server for HTTPS 443 bound with
__________ and the XenMobile Server service to use __________. (Choose the correct set of options to complete the sentence.)

Question48: Scenario: A Citrix Engineer added a new XenMobile Server to a cluster. After making this change, users report sporadic connectivity issues to the Worx Store.
Which step should the engineer take to address this issue?

Question49: After enrollment, Android devices are NOT connecting to the XenMobile Server.
What should a Citrix Engineer do to resolve this issue?

Question50: Scenario: A Citrix Engineer is enrolling iOS devices. After the certificate and profile installation, users are unable to access the Worx Store.
What are two possible causes of this behavior? (Choose two.)

Question51: Scenario: A company with 20,000 enrolled users recently acquired another company with 7,000 users. All new users also will need access to mobile MDX apps. Each server's specifications include four vCPUs and
16 GB of RAM.
What is the minimum amount of XenMobile cluster nodes required to support this environment?

Question52: Scenario: A Citrix Engineer plans to use XenMobile NetScaler Connector to add ActiveSync filtering to an existing Exchange load-balancing virtual server.
The engineer must ensure:
- Enrolled devices that are out of compliance with the configured rule-sets are blocked from accessing resources.
- Devices that have NOT yet been enrolled should remain unimpacted.
Which policy settings should the engineer implement to achieve these requirements?

Question53: What are two scenarios in which a Citrix Engineer must configure Mobile Service Provider (MSP) for XenMobile Mail Manager? (Choose two.)

Question54: Scenario: A Citrix Engineer is designing a XenMobile Enterprise solution to support approximately 40,000 device connections. The environment must be able to sustain the failure of one node in a cluster at any given time for redundancy and maintenance purposes. Each server's specifications include four vCPUs and 16 GB of RAM.
What is the minimum number of XenMobile Servers that the engineer should recommend as part of this cluster?

Question55: Which two components are required in order for a Citrix Engineer to use the MDX Toolkit to wrap Windows Phone applications for production use? (Choose two.)

Question56: Scenario: According to corporate policy, corporate data should be removed if a device is jailbroken or rooted and the device should NOT be allowed to re-enroll. A Citrix Engineer is asked to implement the action based on mobile device status to facilitate the company's security compliance.
Which action should the engineer take to meet the requirements of the scenario?

Question57: Which two steps must a Citrix Engineer take to configure client certificate authentication on a NetScaler Gateway virtual server? (Choose two.)

Question58: Which XenMobile option is available for Windows 8.1 Enterprise tablet devices?

Question59: Which database type is recommended for the database connection when configuring a XenMobile Server for the first time in a production deployment using the command-line interface?

Question60: Scenario: A company with 29,000 enrolled users recently acquired another company with 8,000 users. All new users also will need access to Enterprise applications. Each server's specifications include four vCPUs and 16 GB of RAM.
What is the minimum amount of XenMobile cluster nodes required to support this environment?

Question61: What must a Citrix Engineer do to prevent XenMobile Mail Manager from blocking WorxMail traffic?

Question62: Which certificate is required to configure ShareFile User Provisioning?

Question63: A Citrix Engineer needs to design a multi-node, scalable XenMobile solution.
Which database type should the engineer choose to meet the needs of this deployment?

Question64: A Citrix Engineer could configure User Provisioning to ShareFile for use with XenMobile by configuring the
__________ or the __________. (Choose the two correct options to complete the sentence.)

Question65: Which two XenMobile applications could be upgraded by a Citrix Engineer? (Choose two.)

Question66: A Citrix Engineer notices that several devices in the XenMobile Console show up as Mobile Application Managed (MAM) only.
What is a possible cause of this issue?

Question67: Scenario: A customer plans to use the XenMobile Server as the SAML Identity Provider for ShareFile authentication. SAML authentication should be available for MDX users as well as through the desktop sync client for Windows and Mac. The customer does NOT plan to use StorageZone Connectors.
What is the minimum configuration that a Citrix Engineer must perform in order to meet the needs of the customer?

Question68: Which two components are required in order for a Citrix Engineer to use the MDX Toolkit to wrap Android applications for production use? (Choose two.)

Question69: Which two statements are true when the database becomes unavailable in a XenMobile deployment?
(Choose two.)

Question70: In which two ways could a Citrix Engineer confirm an Apple Push Notification service (APNs) certificate expiration? (Choose two.)

Question71: Scenario: A Citrix Engineer uses the Netscaler XenMobile wizard to configure SSL Offload for a single XenMobile Server and selects the http communication to XenMobile Server under Mobile Application Management (MAM) load balancing settings. After completing the wizard, the engineer runs the Load Balancer for MAM connectivity check, which shows a failure.
Which corrective step will the engineer need to take to ensure successful communications between the XenMobile Server and NetScaler?

Question72: Which PowerShell command does a Citrix Engineer need to run in order to recover a StorageZone Controller configuration backup?

Question73: A Citrix Engineer integrated a XenMobile Server with StoreFront and now users are unable to enumerate any of their XenApp applications.
Which step must the engineer take to resolve this issue?

Question74: Which PowerShell command does a Citrix Engineer need to run in order to back up a StorageZone Controller configuration?

Question75: A Citrix Engineer needs to allow any iOS device to run a published MDX application.
Which type of provisioning file should the engineer use to wrap the application?

Question76: Scenario: A customer plans to use XenMobile Server as the SAML Identity Provider for ShareFile authentication. SAML authentication should be available for MDX users as well as through the desktop sync client for Windows and Mac. The customer plans to use StorageZone Connectors.
What is the minimum configuration that a Citrix Engineer must perform in order to meet the needs of the customer?

Question77: A Citrix Engineer is testing enrollment and notices that while Mobile Device Management (MDM) enrollment succeeds, Mobile Application Management (MAM) enrollment fails.
A possible cause of this issue is that ports __________ from the __________ are NOT open. (Choose the correct set of options to complete the sentence.)

Question78: A Citrix Engineer is adding a second node to an existing standalone XenMobile deployment.
Which three steps must the engineer take when deploying additional nodes? (Choose three.)

Question79: Scenario: An employee has reported a corporate-owned mobile device as lost. A Citrix Engineer needs to delete all data from the device for security compliance in order to prevent any misuse.
Which action should the engineer take to meet the requirement of the scenario?

Question80: What are two situations in which XenMobile notification templates are used? (Choose two.)

Question81: Scenario: A customer has attempted to integrate XenMobile with XenApp and XenDesktop. Users connect to the Worx Store and can see MDX applications but CANNOT see published applications or desktops.
A Citrix Engineer determines a possible cause of this issue is that either port __________ or __________ between the XenMobile Server and StoreFront is NOT open. (Choose the two correct options to complete the sentence.)

Question82: In which two ways could a Citrix Engineer configure User Provisioning to ShareFile within the XenMobile Console? (Choose two.)

Question83: Scenario: Management has asked for all LDAP communication to be secured. A Citrix Engineer has modified the LDAP server address to use the Fully Qualified Domain Name (FQDN) and has changed to the default secure port. After doing so, the XenMobile Server cannot save the new settings and prompts with the error "Cannot connect. Try again."
Which two things should the engineer verify to resolve this issue? (Choose two.)

Question84: Which two actions should a Citrix Engineer take to allow XenMobile to query for unmanaged devices in an Exchange deployment? (Choose two.)

Question85: Which two additional steps must a Citrix Engineer take to complete a XenMobile cluster configuration after adding a secondary node to an existing production cluster? (Choose two.)

Question86: After publishing an Android MDX application, a Citrix Engineer finds that the application only installs on devices running Android OS 4.3 and above, instead of all Android devices.
What is the likely cause of this issue?

Question87: Scenario: A Citrix Engineer would like to test an updated application before publishing it for production use.
After wrapping the application with the latest MDX toolkit and uploading the application to the XenMobile Server with a different name, the engineer observes that the application is displayed as an update to the existing application.
What could cause this behavior?

Question88: Which XenMobile deployment option would pose the greatest security risk?

Question89: Scenario: A Citrix Engineer wants to provide access from WorxWeb to internal corporate websites that require client certificate authentication. The engineer has configured the NetScaler with Clientless Access to "On", and Plug-in type to Windows / Mac OSX.
Which two settings should the engineer configure within the WorxWeb MDX policies to ensure that users could access these sites successfully without errors? (Choose two.)

Question90: Users are unable to complete device enrollment and the Mobile Application Management (MAM) portion of enrollment is failing.
Which two steps could a Citrix Engineer take to troubleshoot this issue? (Choose two.)

Question91: Scenario: A Citrix Engineer needs to deploy a XenMobile solution for a large organization. The organization will use XenMobile to manage Android and iOS devices.
To provide resilience, NetScaler appliances will communicate with XenMobile Servers. The engineer has deployed all necessary infrastructure and opened the required firewall ports. To load balance mobile device management traffic, the engineer has configured NetScaler to use SSL_Bridge to communicate with a XenMobile Server cluster.
Which persistence method should the engineer configure to facilitate consistent communication between the NetScaler and the XenMobile Servers?

Question92: Scenario: A XenMobile Server has been implemented with Public Key Infrastructure (PKI) for security.
Management has asked for the XenMobile Server to enumerate XenApp and XenDesktop resources. After the Citrix Engineer has configured the XenMobile Server to communicate with StoreFront, the users still CANNOT see Windows applications and desktops.
Which two additional steps must the engineer take to resolve the enumeration failure? (Choose two.)

Question93: Scenario: A Citrix Engineer has configured a Netscaler Gateway virtual server that will be accessed externally by users through the Worx Home client. Root certificates are installed on the NetScaler. Users are having issues accessing the Netscaler Gateway remotely.
Which two reasons could be causing this issue? (Choose two.)

Question94: A Citrix Engineer must delegate enrollment invitation management to Level 1 administrators.
What should the engineer do to accomplish this objective?

Question95: A Citrix Engineer downloaded the incorrect version of Worx Home on an Android device and is attempting to uninstall Worx Home, but attempts to uninstall have NOT been successful.
What should the engineer do to successfully uninstall Worx Home?

Question96: Scenario: An organization hires a Citrix Engineer to provide guidance on options that would allow WorxWeb users to access external and internal URLs. The internal IT team plans to keep WorxWeb in Secure browse mode.
Which two strategies could the engineer recommend to meet the needs of the customer? (Choose two.)

Question97: A Citrix Engineer deployed XenMobile Mail Manager in a Proof of Concept (POC) environment; however, the connection test fails.
What are two possible causes for this connection test failure? (Choose two.)

Question98: Scenario: User password caching must be disabled in an environment due to an information technology security policy. The security policy also mandates the following:
- Devices should NOT be allowed to be offline for more than 3 days.
- Devices should recognize updates to applications in under 24 hours in the event of critical security updates.
- Users should conduct application upgrades within 3 days of a device recognizing the availability of an update.
Which combination of settings should a Citrix Engineer recommend to meet the requirements of the security policy?

Question99: Scenario: A Citrix Engineer created an automated action to notify users when the Pandora application is installed on their mobile devices. For testing purposes, the engineer installed the application on a mobile device but noticed that a notification was NOT received.
Which two XenMobile Server settings should the engineer check to resolve this issue? (Choose two.)

Question100: Scenario: A Citrix Engineer is experiencing issues deploying client certificates for NetScaler Gateway authentication to devices after configuring their Public Key Infrastructure (PKI) settings within the XenMobile Server.
Which two sets of logs could the engineer review to determine why the certificate is NOT being issued?
(Choose two.)

Question101: How could a Citrix Engineer deploy a common application set to all corporate-managed iOS and Android devices?

Question102: Scenario: A Citrix Engineer is deploying XenMobile for an organization. The organization will deploy iOS and Android devices, and users will be allowed to enroll and use the solution remotely, or from an internal employee WIFI network. The NetScaler and XenMobile Server are both deployed in the Demilitarized Zone (DMZ) with no firewall between them.
The engineer has opened the following ports:
- Internet (ANY) -> NetScaler (DMZ) (Inbound) (443)
- XenMobile Server -> Internet (TCP 2195 / 2196) (Outbound)
Which two ports should the engineer ask the Security team to open? (Choose two.)