Citrix CCA-V: Certified Associate - Virtualization Practice Exam

What the Citrix CCA-V exam covers

• 1 Deploying Citrix Virtual Apps and Desktops137 questions
• 2 Providing Resources to End Users135 questions
• 3 Providing Access to App and Desktop Resources48 questions
• 4 Basic Security Considerations58 questions
• 5 Monitoring52 questions
• 6 Troubleshooting52 questions
• 7 Printing61 questions
• 8 PowerShell66 questions
• 9 Citrix Cloud53 questions

Free Citrix CCA-V practice test questions

A sample of 10 questions with answers and explanations. A free account includes a fixed set of 20 practice questions for this exam, retryable anytime. Paid access unlocks the full 662-question bank.

1. Question 11 Deploying Citrix Virtual Apps and Desktops

   During a session launch in CVAD, after the user selects a resource in Citrix Workspace app, which component is responsible for selecting an appropriate registered VDA and returning the connection details?

   • AThe Citrix Workspace app self-service plug-in
   • BThe StoreFront authentication service
   • CThe Citrix License Server
   • DThe Delivery Controller broker serviceCorrect
   ✓ Correct answer: D

   When the user selects an application or desktop, that information goes back down the pathway to the Controller, and the Controller determines the proper VDA to host it. The Controller's Broker Service tracks which users are logged on and where, what session resources they have, and whether they need to reconnect to existing applications. The Controller then sends the user's credentials and the connection data to the VDA. StoreFront collects the required parameters and sends them to Citrix Workspace app, either in the protocol conversation or as a downloaded ICA file.

   Why the other options are wrong

   • AThe Citrix Workspace app self-service plug-in runs on the user device; the Controller, not the client, determines the proper VDA to host the resource.
   • BThe StoreFront authentication service passes the user's logon credentials through to the Broker Service on the Controller; the Controller, not StoreFront, determines the proper VDA.
   • CThe License Server manages Citrix product licenses; in the technical overview's launch sequence it is the Controller that determines the proper VDA to host the resource.
2. Question 21 Deploying Citrix Virtual Apps and Desktops

   An organization wants to publish shared hosted applications and desktops to 500 users from a pool of Windows Server 2022 RDSH machines, maximizing user density per server. Which machine catalog operating system type meets this requirement?

   • AMulti-session OSCorrect
   • BRemote PC Access
   • CStatic desktop OS catalog
   • DSingle-session OS
   ✓ Correct answer: A

   Citrix uses multi-session OS machines to deliver published apps and published desktops, and a multi-session OS catalog provides hosted shared desktops. Multi-session OS machines run multiple sessions from a single machine to deliver applications and desktops to multiple, simultaneously connected users. The delivery methods article describes this server-based delivery as the most cost effective application delivery solution.

   Why the other options are wrong

   • BRemote PC Access connects users to existing physical PCs and does not host shared server sessions or provision new machines.
   • CStatic desktop OS catalog is a Single-session OS assignment style that still serves one user per machine and cannot host multiple concurrent sessions.
   • DSingle-session OS dedicates an entire desktop OS machine to one user at a time, which cannot achieve high density or session sharing on server hardware.
3. Question 37 Printing

   To reduce the number of printers created in sessions, an administrator wants only one printer auto-created in each session: the printer the user device already uses when no other printer is chosen, rather than every printer installed on the endpoint. Which value of the Auto-create client printers setting should be configured?

   • AAuto-create the client's default printer onlyCorrect
   • BAuto-create local (non-network) client printers only
   • CDo not auto-create client printers
   • DAuto-create all client printers
   ✓ Correct answer: A

   The Auto-create client printers setting decides which client printers are created in the session. Auto-create the client's default printer only creates just the printer that is the default on the client device, while other values create all client printers, only local (non-network) printers, or none.

   Why the other options are wrong

   • BAuto-create local (non-network) client printers only still creates all locally attached printers, not just the default one, so it does not minimize printer creation as required.
   • CDo not auto-create client printers prevents any client printer from being created in the session, including the default, so users would have no client printer available.
   • DAuto-create all client printers maps every printer installed on the endpoint into the session, which is the opposite of reducing printer creation to the minimum.
4. Question 44 Basic Security Considerations

   After the site starts requiring a security key over the STA port, a NetScaler load balancing virtual server is placed in front of the STA servers. The rewrite action that adds the key to each request uses the INSERT_HTTP_HEADER type. Which header name must the action insert?

   • AX-Citrix-XmlServiceKeyCorrect
   • BX-Content-Type-Options
   • CX-Frame-Options
   • DX-XSS-Protection
   ✓ Correct answer: A

   For the Secure XML feature on NetScaler, you add a rewrite action of type INSERT_HTTP_HEADER whose header name is X-Citrix-XmlServiceKey and whose expression is the XmlServiceKey1 value in quotes. A rewrite policy with the expression HTTP.REQ.IS_VALID uses that action and is bound to the load balancing virtual server. You must configure one load balancing virtual server per STA server, or sessions fail to launch. The feature is supported only on Citrix ADC and Citrix Gateway release 12.1 and later.

   Why the other options are wrong

   • BX-Content-Type-Options is a security header StoreFront returns to browsers to avoid MIME type sniffing, not the key header.
   • CX-Frame-Options is a StoreFront response header that stops other sites embedding StoreFront in a frame.
   • DX-XSS-Protection is a StoreFront response header that some browsers use against cross-site scripting.
5. Question 56 Troubleshooting

   A branch office user on a congested link reports blurry, slow screen updates. The administrator suspects the VDA cannot push enough data to the endpoint for this session. On the Session Performance tab, which comparison tests this suspicion?

   • AICA Latency against ICA RTT for the session
   • BOutput Bandwidth Available against ConsumedCorrect
   • CFrames Per Second against ICA RTT over time
   • DICA Latency against Output Bandwidth Available
   ✓ Correct answer: B

   Output Bandwidth Available measures the total bandwidth available to transmit data from the VDA to the endpoint. Output Bandwidth Consumed is the actual amount of data transmitted from the VDA to the endpoint to display the session. Analyzing the two together shows whether enough bandwidth is available and whether a session is affected by insufficient bandwidth. ICA Latency is the network latency and ICA RTT is the time from a user's action to the graphical response, so both describe delay rather than bandwidth.

   Why the other options are wrong

   • AICA Latency and ICA RTT both measure delay, with RTT adding endpoint and host delay to latency; neither shows bandwidth use.
   • CFrames Per Second indicates responsiveness and ICA RTT measures response time; the pair does not compare available bandwidth with bandwidth used.
   • DICA Latency is network latency, so setting it against Output Bandwidth Available does not show how much of the bandwidth is consumed.
6. Question 67 Printing

   A company requests a TLS server certificate for its Universal Print Server from Microsoft Active Directory Certificate Services. What should the certificate template set as the Common Name attribute of the Subject DN?

   • AThe NetBIOS name of the Universal Print Server
   • BThe FQDN of the Universal Print ServerCorrect
   • CThe FQDN of the Delivery Controller hosting Studio
   • DThe thumbprint passed to Enable-UpsSsl.ps1
   ✓ Correct answer: B

   For HTTPS, the Universal Print Server needs an SSL server certificate that the VDAs trust. The Common Name attribute of the Subject DN must be set to the fully qualified domain name of the Universal Print Server. The certificate goes in the Local Computer Personal certificate store, and the key size must be at least 2048 bits.

   Why the other options are wrong

   • AA NetBIOS name is not what the TLS on Universal Print Server section requires; the Common Name must be the fully qualified domain name of the Universal Print Server.
   • CThe FQDN of the Delivery Controller is wrong because the certificate identifies the Universal Print Server, which acts as the SSL/TLS server.
   • DThe thumbprint is what the Enable-UpsSsl.ps1 script uses to select a certificate; it is not a Subject DN attribute.
7. Question 78 PowerShell

   An administrator runs Citrix DaaS scripts with the Remote PowerShell SDK from a domain-joined server in a resource location. At the start of each PowerShell session, they want to sign in explicitly and be prompted for credentials before any other SDK cmdlet runs. Which cmdlet does this?

   • ASet-XdCredentials
   • BGet-XdAuthenticationCorrect
   • CSet-HypAdminConnection
   • DAdd-PSSnapin
   ✓ Correct answer: B

   The Get-XdAuthentication cmdlet provides the authorization to cross the secure boundary from the resource location to the control plane. By default it prompts for credentials, and this must be done once per PowerShell session. If it is not run explicitly, the first Remote PowerShell SDK cmdlet calls it. After authentication, remote access remains valid in the current PowerShell session for 24 hours.

   Why the other options are wrong

   • ASet-XdCredentials creates a default authentication profile from a Secure Client so that the prompt is bypassed, which is not what the administrator wants here.
   • CSet-HypAdminConnection specifies the hypervisor admin connection to use in an on-premises script; it does not sign in to the control plane.
   • DAdd-PSSnapin adds the snap-in when the snap-in is used instead of the module; it does not sign in.
8. Question 81 Deploying Citrix Virtual Apps and Desktops

   In an on-premises site, users sign in with their domain credentials on a web page and see the desktops and apps they are allowed to use. Which server component checks those credentials and presents that list?

   • ACitrix Director
   • BCitrix StoreFrontCorrect
   • CDelivery Controller
   • DCitrix Workspace app
   ✓ Correct answer: B

   StoreFront authenticates users and manages stores of desktops and applications that users access. It can host the enterprise application store, which gives users self-service access to the desktops and applications made available to them. StoreFront also keeps track of users' application subscriptions, shortcut names and other data, which helps give users a consistent experience across multiple devices. When users log on using StoreFront, their credentials pass through to the Broker Service on the Controller.

   Why the other options are wrong

   • ACitrix Director is a web-based tool that help desk teams use to monitor the environment and troubleshoot issues; it does not authenticate users or host their catalog.
   • CThe Delivery Controller brokers connections, but users never log on to it directly; their StoreFront logon credentials are passed through to the Broker Service on the Controller.
   • DCitrix Workspace app is installed on user devices and other endpoints, not on a server; it gives users access to the resources that StoreFront presents.
9. Question 92 Providing Resources to End UsersSelect all that apply

   Visitors at a shopping-mall kiosk must launch a published application without presenting any credentials. Which TWO requirements apply to this configuration? (Choose TWO)

   • AEach machine in the group has a VDA for Windows Server OS 7.6 or laterCorrect
   • BUnauthenticated access is enabled on the application group's Users page
   • CAn unauthenticated StoreFront store is configured for the kiosk usersCorrect
   • DAnonXYZ user accounts are created in Active Directory before the launch
   • EThe kiosk users are added to the application's Limit Visibility list
   ✓ Correct answer: A, C

   For delivery groups containing multi-session OS machines, users can be allowed to access applications and desktops without presenting credentials to StoreFront or Citrix Workspace app, for example at kiosks. Each machine in the delivery group must have a VDA for Windows Server OS, minimum version 7.6, and an unauthenticated StoreFront store is required. The unauthenticated accounts are created on demand when a session launches and are named AnonXYZ. Enabling unauthenticated use is available only in delivery groups, not in application groups.

   Why the other options are wrong

   • BEnabling application use by unauthenticated users is available only in delivery groups, not on an application group's Users page.
   • DAnonXYZ accounts are created on demand when a session is launched; they are not created in Active Directory in advance.
   • EThe Limit Visibility list limits which users can see an application; it is not one of the requirements for access without credentials, which are the Server OS VDA and an unauthenticated store.
10. Question 103 Providing Access to App and Desktop Resources

    An administrator needs multiple Delivery Controllers from two SEPARATE Sites to provide resources to the same StoreFront store. How should these controllers be configured in the store?

    • ACreate a separate Delivery Controller entry for each Site's controllersCorrect
    • BCreate a separate store for each Site and merge them with a load balancer
    • CAdd the controllers only to the store website, not to the store itself
    • DList all controllers from both Sites in one single Delivery Controller entry
    ✓ Correct answer: A

    In Manage delivery controllers, each Citrix Virtual Apps and Desktops site is added as its own entry: click Add, enter a display name that identifies the feed, choose the type and list that site's DDCs. Controllers of two separate sites are therefore added as two entries rather than as one server list.

    Why the other options are wrong

    • BA separate store per Site merged by an external load balancer is not needed, because one store can hold several Delivery Controller entries.
    • CDelivery Controllers are configured on the store in Manage delivery controllers, not on a store website.
    • DStoreFront treats the servers in one entry as members of the same site, so controllers from two separate Sites belong in separate entries.

Who this Citrix CCA-V practice exam is for

This practice set is for anyone preparing for the Citrix CCA-V: Certified Associate - Virtualization exam at the intermediate level - from first-time candidates building a foundation to experienced Citrix practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this Citrix CCA-V practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real Citrix CCA-V exam.

Related Citrix resources

• Citrix CCA-V study guideKey concepts
• Citrix practice examsAll Citrix
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• Citrix CCP-AppDS practice examRelated
• Citrix CCA-AppDS (Traffic Management track) practice examRelated

Citrix CCA-V practice exam FAQ