Scenario: Dual-source authentication is configured on the Access Gateway 9.0, Enterprise Edition appliance. The appropriate group extraction configuration is configured on both the primary and secondary authentication servers, and a user named "User1" exists on both authentication servers. How will groups be extracted for "User1"?

• A. Only the groups in the secondary authentication server will be extracted and matched to the group names configured on the primary authentication server.
• B. Only the groups from the primary authentication server will be extracted and matched to the group names configured on the secondary authentication server.
• C. The applicable groups from both the primary and secondary authentication servers will be extracted and matched to the group names configured on the appliance.
• D. The groups from the primary authentication server will be extracted and matched to the group names configured on the secondary authentication server by the administrator.

When configuring a Web Interface XenApp Services site for SmartAccess where the Citrix Access Gateway Plugin for Windows is present and traffic is being tunneled to Web Interface, which access method should an administrator configure in the "Edit DMZ Settings" portion of the Access Management Console?

• A. Gateway Direct
• B. Translated
• C. Gateway Translated
• D. Direct

Scenario: Access Gateway 9.0, Enterprise Edition is deployed in an environment where packet loss is prevalent. The administrator in the environment has been instructed to log all the users' requests to HTTP resources in a reliable manner so that all the audit logs generated will be logged and preserved for a very long period of time.Which logging option will preserve audit logs for a very long period of time?

• A. Use the auditserver running on the Access Gateway for logging
• B. Use a syslog server running on a remote system with at least 100 GB of disk space
• C. Use a syslog server running on the Access Gateway for logging
• D. Use the auditserver running on a remote system with at least 10 GB of disk space

Which session policy option must an administrator select to ensure the use of mapped IP addresses when the appliance runs out of intranet IP addresses to assign to new users?

• A. OFF
• B. SPILLOVER
• C. NOSPILLOVER
• D. ON

Scenario: The following policies are configured in an environment in order to provide remote access through Access Gateway 9.0, Enterprise Edition:

• A. The keylogger.exe process must be killed before a user can log on.
• B. The Employee.cer validator file must be deleted after successful logon.
• C. All the users must have a validator file, Employee.cer, on the C drive NOT older than 7 days before they can attempt to login.
• D. B
• E. An updated Employee.cer validator file must be put on the C drive for next use.
  The administrator in the environment needs to use pre-authentication policies and a logon script for this deployment. Which two policies can the administrator implement using pre-authentication end point analysis alone? (Choose two.)
• F. A
• G. C
• H. D