2V0-51.23 Online Practice Questions and Answers

Correct Answer: C

Explanation: The VMware Horizon component that needs to be deployed to allow users to log into VMware Workspace ONE Access and connect to remote desktops and applicationswithout having to provide Active Directory credentials is the Enrollment Server. The Enrollment Server is a standalone service that integrates with VMware Workspace ONE Access and enables True Single Sign-On (SSO) for Horizon clients that are using non-AD-based authentication methods such as RSA SecureID, RADIUS, or SAML1. The Enrollment Server requests short-lived certificates on behalf of the users from a certificate authority (CA), and these certificates are used for authentication to the Horizon environment2. The Enrollment Server must be installed and configured in the same domain or forest as the Connection Server, and it must have an enrollment agent certificate that authorizes it to act as an enrollment agent2. The other options are not valid or feasible because: A Replica Server is a Connection Server instance that replicates the Horizon LDAP configuration data from another Connection Server instance, and provides high availability and load balancing for user connections3. A Replica Server does not request or issue certificates for users, and it does not integrate with VMware Workspace ONE Access. A Security Server is a Connection Server instance that resides within a DMZ and acts as a proxy for external user connections to the Horizon environment4. A Security Server does not request or issue certificates for users, and it does not integrate with VMware Workspace ONE Access. Security Servers are deprecated in Horizon 8 and replaced by Unified Access Gateways (UAGs)4. A vCenter Server is a management platform that provides centralized control and visibility of vSphere hosts and virtual machines in the Horizon environment5. A vCenter Server does not request or issue certificates for users, and it does not integrate with VMware Workspace ONE Access. References: VMware Horizon 8.x Professional by Vmware1 Install and Set Up an Enrollment Server2 Install a Replica Connection Server Instance3 Install a Security Server4 vCenter Server Overview5

Correct Answer: B

Explanation: One of the prerequisites for installing the Horizon Connection Server is to use a domain user account with administrator privileges on the system. This is because the installer needs to access and modify certain system files and registry settings, as well as create and configure the VMware Horizon View services. The installer also authorizes an Administrators account that has full administration rights for the Horizon environment, including the right to install replicated Connection Server instances. The other options are not prerequisites for installing the Horizon Connection Server. The host system can be a physical or virtual machine, but it must have an IP address that does not change. An SSL server certificate is not required for the initial installation, but it is recommended to replace the default self-signed certificate with a valid certificate from a trusted CA after the installation. AD DS and AD LDS Tools are not required for installing the Horizon Connection Server, but they can be useful for troubleshooting and managing the ADAMdatabase that stores the Horizon configuration data. References: Installation Prerequisites for Horizon Connection Server and [VMware Horizon

8.x Professional Course]

Correct Answer: D

Explanation: VMware App Volumes is a real-time application delivery system that allows administrators to assign applications to users and groups in Horizon. App Volumes uses virtual disks called packages to store and deliver applications.

When a user logs on to a desktop, the App Volumes agent attaches the assigned packages to the desktop and merges them with the OS disk. The user can then access the applications as if they were natively installed.

App Volumes is a suitable solution for deploying an application to specific users in an instant-clone desktop environment with the following characteristics:

The application needs to be updated very frequently: App Volumes allows administrators to update applications in real time by using the update or push- image operations. These operations replace the existing packages with new ones that

have the latest updates applied, without affecting the user data or settings. The updated packages are delivered to the users at the next login or refresh. The application needs to be installed as soon as possible: App Volumes allows

administrators to install applications quickly and easily by using a clean packaging system and capturing the application installation process. The resulting package can be assigned to users or groups immediately, without requiring any

recomposing or rebooting of the desktops.

The application is not multi-user aware: App Volumes allows administrators to deliver applications that are not multi-user aware by using writable volumes. Writable volumesare user-specific virtual disks that store user-installed applications,

data, and settings. Writable volumes can be attached to desktops along with application packages, and they can isolate the user-installed applications from the system-installed applications. The other options are not suitable for meeting the

requirements:

VMware Horizon Published Application: This option allows administrators to publish applications from RDS hosts to users in Horizon. However, this option requires a separate RDS infrastructure and licensing, and it does not support instant

updates or writable volumes for user-installed applications. VMware Dynamic Environment Manager: This option allows administrators to manage user profiles and policies in Horizon. However, this option does not deliver or update

applications, and it does not support writable volumes for user-installed applications.

VMware ThinApp: This option allows administrators to package applications into portable executables that can run on any Windows system without installation. However, this option requires a separate packaging process and licensing, and it

does not support instant updates or writable volumes for user-installed applications.

References: App Volumes Architecture, Updating Applications in Real Time, Writable Volumes Overview, and [VMware Horizon 8.x Professional Course]

Correct Answer: D

Explanation: VMware Horizon Cloud on Microsoft Azure is the only deployment solution that meets all the requirements. VMware Horizon Cloud on Microsoft Azure supports Windows 10 Enterprise multi-session desktops, which are a new Remote Desktop Session Host exclusive to Azure Virtual Desktop on Azure1. It also supports App Volumes, which is a real-time application delivery system that enables IT to instantly provision applications to users or desktops. VMware Horizon Cloud on Microsoft Azure supports centralized brokering, which means that the Horizon Cloud Service acts as a single point of entry for end users to access their virtual desktops and applications. VMware Horizon Cloud on Microsoft Azure also supports automatic routing of end-users to the most appropriate virtual workspace, using the Universal Broker feature. Universal Broker is a cloud-based brokering service that provides a unified user experience across multiple Horizon pods and clouds. VMware vSphere Desktop Edition does not support Windows 10 Enterprise multi-session desktops, as they are only available on Azure Virtual Desktop1. VMware Workspace ONE Unified Endpoint Management does not support App Volumes, as it is a different solution for managing devices and applications. VMware Horizon On-Premises does not support automatic routing of end-users to the most appropriate virtual workspace, as it requires manual configuration of load balancing and global entitlements. References: Profile production applications in Azure with Application Insights Profiler1 Using Application Profiler - VMware Docs2 First look at profiling tools - Visual Studio (Windows)3 App Volumes Overview Horizon Cloud Service on Microsoft Azure Architecture Universal Broker Overview Workspace ONE UEM Overview Load Balancing Across Pods and Sites in a Cloud Pod Architecture Environment

Correct Answer: A

Explanation: The default URL used to access the Horizon Console is https:///admin, where is the fully qualified domain name of the Connection Server instance. This URL allows you to log in to Horizon Console by using a secure (TLS) connection. You can also use the IP address of the Connection Server instance instead of the FQDN, but this might result in blocked access or reduced security due to certificate mismatch. You cannot use https://localhost to connect fromthe Connection Server host, but you can use https://127.0.0.1 instead. The other options are not valid URLs for Horizon Console. References: Log In to Horizon Console

Correct Answer: AC

Explanation: VMware Horizon Agent for Linux is a software component that enables Linux machines to be used as remote desktops or published applications in a Horizon environment. Horizon Agent for Linux supports several features that enhance the user experience and manageability of Linux desktops and applications, such as USB redirection, display protocol PCoIP, multiple-session mode, single sign-on, smart card authentication, and 3D graphics34. However, Horizon Agent for Linux does not support location based printing or session collaboration features that are available for Windows machines5. Also, Horizon Agent for Linux does not require installation registration as it automatically registers with the Connection Server when the viewagent service is started6. References := 3: VMware Horizon 8 Documentation: Horizon Agent for Linux 4: VMware Horizon 8 Documentation: Features Supported by Horizon Agent for Linux 5: VMware Horizon 8 Documentation: Features Not Supported by Horizon Agent for Linux 6: VMware Horizon 8 Documentation: Install Horizon Agent on a Linux Machine

Correct Answer: D

Explanation: Collaboration is a feature that allows users to invite other users to join an existing Windows or Linux remote desktop session with both screen sharing and audio out features enabled. A remote desktop session that is shared in this way is called a collaborative session. The user that shares a session with another user is called the session owner, and the user that joins a shared session is called a session collaborator. A Horizon administrator must enable the Session Collaboration feature for the desktop pool or farm that contains the remote desktops that support collaboration. One of the requirements to enable Session Collaboration is to use the VMware Blast display protocol for the remote desktops. VMware Blast is a protocol that provides high- performance, high-quality graphics and multimedia delivery over LAN or WAN networks. VMware Blast supports Session Collaboration by allowing multiple users to view and interact with the same remote desktop session simultaneously. Other display protocols, such as PCoIP or RDP, do not support Session Collaboration and will not allow users to share or join collaborative sessions. Therefore, to enable Session Collaboration in the VMware Horizon environment, the administrator needs to use the BLAST protocol as arequirement. References: Configuring Session Collaboration, Sharing Remote Desktop Sessions, and [VMware Horizon 8.x Professional Course]

Correct Answer: A

Explanation: Roles and permissions are a way of controlling the access and actions of administrators and users in Horizon. By default, Horizon provides two predefined roles:

Administrators and Read Only Administrators. However, a high-level administrator can create custom roles with specific privileges to suit different needs and scenarios. To create a custom role, the administrator needs to follow these steps:

In the navigation pane under the Settings section, click on Administrators > Roles and Permissions.

In the Roles and Permissions page, click on Add. In the Add Role pane, enter a name for the role in the Role Name text box. In the Privileges section, select the checkboxes for the privileges that you want to assign to the role. You can

expand or collapse the categories to view or hide the sub-privileges. You can also use the Select All or Deselect All buttons to select or clear all the privileges in a category.

Click on Save to create the custom role.

The custom role will appear in the Roles and Permissions page, where you can edit or delete it as needed. You can also assign the custom role to users or groups in the Users and Groups page. References: [Create Custom Roles] and

[VMware Horizon 8.x Professional Course]

Correct Answer: C

Explanation: One of the possible reasons that the administrator is not seeing the printers within his Horizon Desktop session is that printing is disabled in the Horizon Desktop Pool. Printing is a feature that allows users to print from a remote

desktop to any local or network printer available on their client device. Printing can be enabled or disabled for each desktop pool by using the VMware Integrated Printing feature. VMware Integrated Printing is a feature that supports client

printer redirection, location- based printing, and persistent print settings. Client printer redirection enables users to print from a remote desktop to any local or network printer available on their client device. Location-based printing enables

users to print to network printers that are physically near their client device. Persistent print settings enable users to retain their print settings across sessions.

To enable or disable printing for a desktop pool, the administrator needs to follow these steps:

In Horizon Console, select Inventory > Desktops.

Select the desktop pool and click Edit.

In the Edit Desktop Pool dialog box, select the VMware Integrated Printing tab. Select or clear the Enable VMware Integrated Printing check box.

Click OK.

If printing is disabled for a desktop pool, users will not see any printers within their Horizon Desktop session, even if they have installed the VMware Integrated Printing feature in the Horizon Agent and the Horizon Client. Therefore, to resolve

this issue, the administrator needs to enable printing for the desktop pool by selecting the Enable VMware Integrated Printing check box.

The other options are not likely to be the reason that the administrator is not seeing the printers within his Horizon Desktop session:

Port TCP 9427 is disabled: This port is used by the VMware Integrated Printing feature for communication between the Horizon Agent and the Horizon Client. If this port is disabled, users might experience printing errors or delays, but they

should still see the printers within their Horizon Desktop session. The VMware Integrated Printing feature is not installed in the Horizon Client: This feature is installed by default in the Horizon Client for Windows, Mac, Linux, Chrome, and

HTML Access. If this feature is not installed in the Horizon Client, users might not be able to print from their remote desktops, but they should still see the printers within their Horizon Desktop session. Port TCP 32111 is disabled: This port is

used by ThinPrint for communication between the Horizon Agent and the ThinPrint Client. ThinPrint is a legacy printing feature that has been replaced by VMware Integrated Printing. If this port is disabled, users might experience printing

errors or delays with ThinPrint, but they should still see the printers within their Horizon Desktop session if they use VMware Integrated Printing.

References: Configuring VMware Integrated Printing, Enable or Disable Printing for a Desktop Pool, and [VMware Horizon 8.x Professional Course]

Correct Answer: