Citrix Certified Professional - Virtualization (CCP-V): Citrix Virtual Apps and Desktops 7 Advanced Administration

Last checked November 10, 2026 against the official Citrix exam page.

1. Question 1Advanced Administration

   A Delivery Controller in a Citrix Virtual Apps and Desktops site loses its connection to the site database during a short outage. The administrator wants that controller to keep brokering connections from its cached configuration until the database returns. Which feature provides this behavior?

   1. AProfile streaming
   2. BPass-through authentication
   3. CSession Recording Agent
   4. DLocal Host Cache
   Show answer and explanationHide answer

   Correct answer: D

   The Local Host Cache on a Delivery Controller keeps a cached copy of site configuration so brokering can continue during a database outage, although some operations are limited. Profile streaming handles user profile files, the Session Recording Agent captures sessions, and pass-through authentication handles sign-on, so none of them keeps brokering running.

2. Question 2Advanced User Access

   A company lets staff reach Citrix applications from personal laptops through Citrix Gateway. Security wants unmanaged devices to see only a basic app set, while managed corporate devices see the full catalog. Which approach meets this requirement?

   1. AUse SmartAccess with session policy access tags and delivery group access policy rules
   2. BCreate a second StoreFront store that shows a separate catalog without any device checks
   3. CAssign unmanaged devices to a shared delivery group protected by one common password
   4. DEnable multimedia redirection on every published application for all devices
   Show answer and explanationHide answer

   Correct answer: A

   SmartAccess lets Citrix Gateway pass access tags, based on endpoint analysis, to the Delivery Controller, which then filters what each session can launch. A second store or a shared password does not evaluate device trust, and multimedia redirection concerns media playback rather than access control.

3. Question 3Advanced Policies and Profiles

   Two Citrix policies apply to the same delivery group. Policy A has priority 1 and allows client clipboard redirection. Policy B has priority 3 and prohibits it. Both policies are enabled and their filters match. What is the result?

   1. ABoth settings are averaged, so clipboard redirection is partly allowed for each session
   2. BThe conflict blocks sessions until the administrator assigns a single priority to the policies
   3. CClipboard redirection is prohibited, because the policy with the higher priority number is processed last and overrides
   4. DClipboard redirection is allowed, because priority 1 is the highest priority and its setting wins
   Show answer and explanationHide answer

   Correct answer: D

   In Citrix policies, priority 1 is the highest, so the allow setting from Policy A takes effect over the lower-priority prohibition. Citrix does not average conflicting values, does not treat a higher number as overriding, and does not block sessions because of policy conflicts.

4. Question 4Advanced Workspace Environment Management (WEM)

   A WEM Infrastructure server is offline for planned maintenance, and users continue to sign in to published desktops during that window. What happens on the VDAs?

   1. AThe WEM agents apply the last known settings from their local cache
   2. BThe VDAs refuse logons until the infrastructure server returns to service
   3. CThe agents download settings from the Director server instead
   4. DThe agents switch to settings published by the Delivery Controller
   Show answer and explanationHide answer

   Correct answer: A

   WEM agents keep a local cache of the last configuration they received, so they can still apply settings when the Infrastructure service is unavailable. Blocking logons and fetching settings from Director or the Delivery Controller do not match how WEM delivers its configuration.

5. Question 5Advanced Security

   An auditor asks an administrator to harden the Citrix Gateway that fronts Citrix Virtual Apps and Desktops. Which two actions align with current security guidance? (Choose two.)

   1. ADisable SSL 3.0 and TLS 1.0 on the Gateway virtual server
   2. BEnable TLS 1.2 or later and turn off legacy protocol versions
   3. CAllow SSL 2.0 so that older endpoints can still connect
   4. DUse a self-signed certificate whose name does not match the gateway host
   Show answer and explanationHide answer

   Correct answer: A, B

   Disabling SSL 3.0 and TLS 1.0 and requiring TLS 1.2 or later are standard hardening steps. SSL 2.0 is a broken protocol, and a certificate whose name does not match the host breaks identity checks, so neither belongs in a hardened gateway.