Question: 2 When configuring a web application that has more than two logon fields, which three criteria can be specified? (Choose three.

Question: 1 Which type of object can have password policies assigned to it? A. Users B. Groups C. Servers D. Applications Question: 2 When configuring a web application that has more than two logon fields, which three criteria can be specified? (Choose three.) A. Text B. Rows C. Attribute D. Columns E. HTML tags Answer: A, C, E Question: 3 You are an administrator of a server running MetaFrame Password Manager. You want the agent To automatically select the OK button after a user provides their credentials. Which option in the Miscellaneous tab of the selected application definition can be used to perform this task? A. Auto-OK B. AutoLogin C. Auto-Enter D. Auto-Submit Question: 4 During startup, what happens if a change is detected in the local credential store but not in the Central credential store? A. Logon will fail and synchronization must be manually forced by the administrator. B. The central credential store will override the changed file in the local credential store. C. The agent will merge the local credential store with the central credential store. D. The user will be asked to confirm their identity by answering a pre-defined question. Question: 5 The primary encryption keys are based upon which kind of information? A. Server name B. Application name C. Identity verification information D. Application credential information Page 1 of 30

Question: 6 Which type of information should be provided when configuring a shared folder as the license repository? A. The type of license B. The administrator password C. The shared folder permissions D. The UNC path of the shared folder Question: 7 Which two are needed to implement host-based application definitions? (Choose two.) A. ENTLIST.INI B. SSOBHO.EXE C. MetaFrame Presentation Server for UNIX D. A terminal emulator that supports HLLAPI E. The MetaFrame Password Manager console, E Question: 8 You are the MetaFrame administrator for Company.com. You would like to create an application definition for the Citrix Program Neighborhood ICAclient. You want to achieve this goal using minimal administrative effort. What should you do? A. From the MetaFrame Password Manager console, upload the APPLIST.INI file to the sync point. B. Install the MetaFrame Password Manager console on the same machine as the ICA client. Use the Detect Fields Wizard to configure the application definition. C. From the MetaFrame Password Manager console, in the Add Application windows, select the appropriate application template from the Use Template drop-down box. D. From the MetaFrame Password Manager console, export the Agent Settings to a.reg file, then run the.reg file on the MetaFrame Password Manager agent machine. Question: 9 Which three statements are true when implementing a shared folder as the central credential store? (Choose three.) A. The shared folder should be a UNC path. B. All users must have full control permissions to the share. C. Administrators must have full control permissions to the share. D. The CXFILESYNCPREP.EXE utility should be run on the system hosting the share. E. The system hosting the shared folder should be in the same domain as the agents that it will synchronize. Answer: A, D, E Citrix MetaFrame Password Manager 2.5: Administration CTX-1321BB. Question: 10 Page 2 of 30

You are in the final process of migrating a server that is running MetaFrame Password Manager 2.0 to MetaFrame Password Manager 2.5. You want to ensure that the existing Identity Verification Questions are available when users authenticate to the server running MetaFrame Password Manager 2.5. Which node in the MetaFrame Password Manager console is used to perform this task? A. Directory B. Applications C. Agent Settings D. Password Policies Answer: A MetaFrame Password Manager Administrator's Guide Saving Existing Custom User Questions If you are upgrading to MetaFrame Password Manager 2.5, you must include the existing custom user questions when you save new information to the synchronization point. Important Users cannot reauthenticate if the user question they answered originally is not displayed by the agent. To save existing custom user questions (with file share synchronization) 1. Install the MetaFrame Password Manager console. 2. In the console, go to the Directory node in the left pane and Connect To your original synchronization point. 3. Go to the root of the file share where the settings were originally saved, rightclick each one, and select Bring to Console. Make sure to bring the following files: entlist, ftu, and adminoverrride). The Bring to Console command populates the left pane of the console with all of the previously configured applications, password policies, agent settings, and old custom user questions. 4. If applicable, add new password policies, user questions, or edit agent settings. 5. While connected to the synchronization point, right-click the root where you want to save the new settings and select Configure SSO Support. You can save the settings in the same location where you previously saved them. This step overwrites the old settings. 6. Deliver your settings and other data to the agent Question: 11 You want to ensure that the agent prompts users to reauthenticate after a specified length of time. Which setting in the Access manager node can be used to perform this task? A. AutoLogoin B. AllowReveal C. AllowRefresh D. LogonAfterConfig Answer: A Question: 12 You have installed the MetaFrame Password Manager agent for all users in the Sales department. All Sales applications share on Oracle database for user authentication. The department has requested that MetaFrame Password Manager automatically adjust all the Sales Applications credentials whenever the password changes for one of them. Password sharing has already been enabled. What two actions need to be taken? (Choose two.) A. Create a new password policy group called Sales. B. Crete a new password sharing group called Sales. Page 3 of 30

C. Configure each Sales application to use the Sales password policy. D. Configure each Sales application to use the Sales password sharing group. E. Configure each Sales application to use the Domain password sharing group., D Question: 13 Which statement is true about a default agent installation? A. Users can add new three-field web applications. B. Users can add new two-field Windows applications. C. Users can delete pre-defined applications from the Logon Manager. D. Users can add applications that require user ID, password, and domain. Question: 14 You are the MetaFrame Password Manager administrator for Company.com. Mary, the Help Desk manager, has contacted you about troubleshooting issues for MetaFrame Password Manager. She would like to find out if something can be done to allow the help desk personnel to easily identify which MetaFrame Presentation Server is generating the MetaFrame Password Manager session for users. Which actions satisfies Mary's request? A. In Agent Settings -> Shell, set the AutoLogonDelay setting to 3 B. In Agent Settings -> Shell, set the DisplayComputerName setting to Enabled C. IN Agent Settings -> AccessManager, set the AllowReveal setting to Enabled D. In Agent Settings -> Shell, set the ShowTrayIcon setting to "Show The Tray Icon." Question: 15 An administrator will implement MetaFrame Password Manager to provide SSO for users who access published applications using Web Interface for MetaFrame Presentation Server. Users currently access applications through a browser using an ICA client. Remote connections are secured through the use of Secure Gateway for MetaFrame Presentation Server. In which location should the agent be installed for this deployment scenario? A. On the server running the Secure Gateway service B. On each MetaFrame Presentation Server in the farm C. On the system with the Secure Ticketing Authority installed D. On the Internet Information Server hosting Web Interface for MetaFrame Presentation Server Question: 16 When configuring an application it is important that the application is. (Fill in the blank With the correct option.) A. published on a server running MetaFrame Presentation Server B. installed in the same place as the MetaFrame Password Manager agent C. listed in the application list of the MetaFrame Password Manager console D. running on the same operating system as the MetaFrame Password Manager agent Page 4 of 30

Question: 17 Which statement is true about password sharing groups? A. Applications can only belong to a single password sharing group. B. Applications can belong to more than one password sharing group. C. Applications can only belong to a single group when synchronization services have not been installed. D. Applications can belong to more than one password sharing group only if the Domain Password Sharing group is not utilized. Answer: A Applicationscanonlybepartasinglepasswordsharinggroup.It is not possiblewithintheapplicationtosetmultiplegroups. Question: 18 Which Agent Setting in the MetaFrame Password Manager console controls whether or not users are notified if a synchronization event fails while the user is working offline? A. NotifyFail B. OfflineNotification C. DNLevels ToMatch D. WorkDisconnected Question: 19 What are the three parts of the Intelligent Agent Response? (Choose three.) A. Detecting the event B. Determining the appropriate action C. Decrypting the local credential store D. Encrypting the local credential store E. Responding with the correct credentials Answer: A, B, E Question: 20 When using a Novell File Server for your synchronization point, the Public group must be given which two rights on the root folder? (Choose two.) A. Read B. Write C. Create D. File Scan E. Supervisor Answer: A, D Question: 21 By default what is the minimum amount of characters that must be entered in response to the MetaFrame Password Manager Identification Verification Question? A. 5 Page 5 of 30

B. 7 C. 9 D. 12 E. 15 Question: 22 application is the member of a domain password sharing group. john attempts to log in to windows and is prompted to change his password. after changing his password, the metaframe password manager agent prompts john for his identity verification phrase and then starts as normal. Which two options will the MetaFrame Password Manager agent configure to have identical passwords? (Choose two.) A. Applications XYZ B. John's network logon C. All applications that are in a password sharing group D. All applications that have a password generation policy applied E. All applications in the Domain Password sharing group that John accesses, E CTX-1321BB Student Manual, Page 184 Example: The administrator adds Microsoft Outlook to the domain password sharing group. The end-user changes the Windows authentication password for the domain. The password used to access Microsoft Outlook also changes because it is in the Domain password sharing group. When the end-user attempts to access Microsoft Outlook, the new password is sent to the authenticator and the application opens. Question: 23 Which file is responsible for launching the MetaFrame Password Manager agent in a pure MetaFrame Presentation Server deployment? A. SSOAGENT.EXE B. SSOPUPAPP.EX C. SSOCONSOLE.EXE D. SSOLAUNCHER.EXE Question: 24 HOTSPOT Page 6 of 30

Click the Node that is used to delete the user's data folder and registry keys after the agent is shutdown. Answer: Shell Question: 25 Which two statements are true regarding MetaFrame Password Manager 2.5? (Choose two.) A. Software that uses a custom GINA may disrupt the GINA chain if it is installed after you install the MetaFrame Password Manager agent. B. By installing the MetaFrame Password Manager last you ensure that the MetaFrame Password Manager GINA is called first by the Winlogon process. C. The MetaFrame Password Manager stores the name of the previous GINA in: HKEY_LOCAL_MACHINE/Software/CitrixMetaFrame Password Manager/ Authenticator. D. If you are performing a fresh installation of MetaFrame Access Suite that includes MetaFrame Password Manager, you must first install the MetaFrame Password Manager agent. Answer: A, B Question: 26 HOW are.net applications configured in the MetaFrame Password Manager console? A. As host applications B. AS web applications C. AS.NET applications D. As Windows applications Page 7 of 30

Question: 27 HOTSPOT Click the location under the Agent Settings that controls whether or not password change are Shared from the authenticator to credentials in the Group Domain. Answer: Authenticator Question: 28 A user is adding a web-based application using the Logon Manager and the application is not included in the predefined list. What must occur before the user ID and Password can be stored? A. User must enter the name of the application. B. The user must browse to the application and level it open. C. The user must enter the address of the application into the URL-http://field. D. The administrator must add the application to the application list in the MetaFrame Password Manager console. CTX-1321BB Student Manual, Page 75 It is a Web Application Question: 29 A company configured a password policy for an application that requires at least eight characters with a maximum of two numeric characters. The MetaFrame Password Manager administrator wants to add a Meta Frame Password Manager password policy to include this application. Page 8 of 30

A. a maximum of nine characters with special characters allowed B. a minimum of eight characters with numeric characters supported C. a minimum of nine character with one numeric character allowed D. a maximum of eight character with two special characters allowed Question: 30 Which configuration file is modified when the administrator enables an application for bulk-add? A. AELIST.INI B. FTULIST.INI C. APPLIST.INI D. ENTLIST.INI CTX-1321BB Student Manual, Page 146 The FTULIST.INI is the configuration file that contains the bulk-add items and user questions. Question: 31 Which statement describes a pure MetaFrame Presentation Server deployment? A. The MetaFrame Password Manager agent is only on the client devices. B. The MetaFrame Password Manager agent is installed only on the client devices. C. The MetaFrame Password Manager agent is installed only on the servers running MetaFrame Presentation Serves. D. The MetaFrame Password Manager console is installed only on the servers running MetaFrame Presentation Server. Question: 32 Which two conditions must exist to use mandatory profiles with a MetaFrame Password Manager implementation? (Choose two.) A. The registry must be edited. B. NTFS partitions must be configured. C. Files must be stored in the Application Data folder. D. The Application Data folder must be placed into a writable location. E. Folder redirection must be implemented for the Application Data folder., E Question: 33 Which three application types use SendKeys? (Choose three.) A. Java applications B. Host applications C. Web applications D..NET applications E. Windows applications Page 9 of 30

Answer: A, D, E Ref: Help files in the MPM Console: Working With Unconventional Applications Overview Sometimes you cannot configure application definitions using the templates or wizards, because not all applications use control IDs to request credentials and password changes. For example, some Web applications use JavaScript to prompt the user for credentials. In these special cases, you must manually identify where the credential fields are located in the application's form so that the agent can respond accordingly. For example, some Windows applications:? Cannot receive credentials through the Windows message queue? Have hidden or duplicate logon dialog boxes? Do not use standard Windows controls that have control IDs? Use dynamically generated control IDs (for example,.net applications use this method)? Do not use Windows control IDs. For example, Java or Flash applications For these type of unique conditions, you may need to use the tabs in the right pane to specify special conditions and the Send Keys option Question: 34 An administrator has configured the MetaFrame Password Manager agent to delete the local credential store. Which two events would result from this configuration? (Choose two.) A. File-level synchronization on agent startup B. Record-level synchronization on agent startup C. Record-level synchronization on agent shutdown D. User access to the central credential store maintained when offline Answer: A, C CTX-1321BB Student Manual, Page 51 The Administrator can configure the agent to delete the local credential store on shutdown, forcing a file-level synchronization on startup. Question: 35 Which condition must exist for users to be able to view all credentials for the applications listed in the Logon Manager? A. The user must enable this during setup. B. The Auto-Prompt feature must be enabled by a user. C. The application must be a pre-defined application by a user. D. The AllowREveal feature must be enabled through the MetaFrame Password Manager console by an administrator. Question: 36 Which two tasks must be completed to extend the schema of a directory service? (Choose two.) A. The CTXDPREP.EXE must be run. B. The SSO support must be configured. C. The CTXDOMAINPREP.EXE must be run. D. The CTXSCHEMAPREP.VBS must be run. E. The schema must be configured to allow updates. Page 10 of 30

, E Question: 37 You have deployed MetaFrame Password Manager to a server running MetaFrame Presentation Server that hosts numerous applications. All applications are accessed and credentials are automatically submitted successfully for users. A few days later, you receive a call from a user named Mary. Mary says that she receive a change password request and the new numeric password she manually submitted is not accepted by MetaFrame Password Manager. Which two settings must be enable din the MetaFrame Password Manager console to allow user's to submit passwords that contains only numeric characters? (Choose two.) A. Can Start Password B. Can Begin Password C. Enable Numeric Start D. Allow Numeric Characters E. Enable Numeric Characters Answer: A, D Question: 38 When the Intelligent Agent Response component detects a Windows application logon event, which configuration file is referenced to detect the Windows attributes needed to authenticate users successfully? A. AELIST.INI B. FTLIST.INI C. APPLIST.INI D. ENTLIST.INI Answer: A Question: 39 You are the administrator of a MetaFrame Presentation Server farm that includes a deployment Of MetaFrame Password Manager 2.5. You must edit the.ini file that contains a list of the terminal emulators and the location of the HLLAPI.DLL that the agent monitors. Which.INI file must you edit? A. AELIST B. ENTLIST C. APPLIST D. MFRMLIST Question: 40 A network consists of the following: 1. A server running MetaFrame Presentation Server, which is used to deploy all applications. 2. Web Interface, which is used as the access mechanism 3. 100 user workstations, which are Windows 2000 Professional or Windows XP Professional. These workstations are in the same Active Directory domain. MetaFrame Secure Access Manager is not used in the network. Required Results: The administrator must design a solution that allows users to logon on time to their workstation and have single sign on capabilities to all servers running MetaFrame Presentation Server and their deployed applications. Users will leverage the desktop credential pass-through feature to authenticate to the Web Interface website. Which solution produces the required results? Page 11 of 30

A. Install MetaFrame Password Manager agent on the user's workstations only. B. Install MetaFrame Password Manager agent on the Web Interface servers only. C. Install MetaFrame Password Manager agent on the servers running MetaFrame Presentation Server. D. Install MetaFrame Password Manager agent on the user's workstations and servers running MetaFrame Presentation Server. Keys: Users will leverage the desktop credential pass-through feature to authenticate to the web interface. Have a Single Sign On capabilities to all servers running MetaFrame Presentation servers and their deployed applications. Also, MSAM is not used. Question: 41 Which feature of MetaFrame Password Manager should be used by administrators to prompt users to add their credentials for a specified list of applications, when first using the MetaFrame Password Manager agent? A. Bulk-add B. Agent Settings C. Logon Manager D. Password Polices Answer: A Question: 42 Which two tabs in the MetaFrame Password Manager console can administrators access to create a list of applications for which users will be prompted to add logons during their first time use of the MetaFrame Password Manager agent? (Choose two.) A. General tab B. Bulk-Add tab C. Miscellaneous tab D. Application List tab, C Question: 43 What must be used to create an application definition for a Windows application that does NOT Use control IDs? A. SendKeys B. Text Matching C. Primary encryption key D. SmartCardSourceForKey Answer: A Question: 44 When configuring agent settings from the MetaFrame Password Manager console, what should you do to ensure that the MetaFrame Password Manager agent will receive the settings? Page 12 of 30

A. Select the Applications node and choose Save from the File menu to save settings to the agent. B. Select the Directory node and choose Save from the File menu to save the settings to the synchronizer. C. Select the Applications node and choose Export from the right-click context menu to enable the new application settings for the agent. D. Select the Directory node, then right-click on the synchronizer and choose the Configure SSO Support option from the context menu to save the settings to the synchronization point. Question: 45 Which two items are required to add a host-based application logon to the Logon Manager? (Choose two.) A. The administrator must enable Mainframe support. B. The application must appear in the predefined list of applications. C. The application logon must be auto-detected by MetaFrame Password Manager. D. The application must be installed on a server running MetaFrame Presentation Server. Answer: A, B Question: 46 In which two locations are the attributes stored for web applications that have been configured in the console? (Choose two.) A. AELIST.INI B. APPLIST.INI C. ENTLIST.INI D. WEBLIST.INI, C Question: 47 Web application definitions are required for which option? A. For all web applications B. For published web applications C. For web applications that do not have templates D. For web applications that have more than two credential fields Question: 48 Which item handles the communication between MetaFrame Password Manager and web applications? A. HLLPI B. SSOBHO.EXE C. SSOMHO.EXE D. AccessManager Question: 49 Page 13 of 30

You are the MetaFrame administrator for Company.com. Assuming all paths are valid, which command would you use to successfully create the MetaFrame Password Manager Novell Netware file Synchronization point using an unattended install? A. CtxNWFileSyncPrep.EXE B. CtxFileSyncPrep.EXE/Path:c:/CITRIXSYNC C. CtxNWFileSyncPrep.EXE/Path:\\Mpm-NW6\Vol1\CITRIXSYNC D. CtxNWFileSyncPrep.EXE/Path:\\Mpm-NW6\SYS\CITRIXSYNC MetaFrame Password Manager Administrator's Guide To use NetWare File Synchronization Setup for MetaFrame Password Manager 1. At a command prompt, access the /Tools directory on the MetaFrame Password Manager CD- ROM, and type: CtxNWFileSyncPrep /path:<uncpath> You must include the path parameter, and it must be specified using the following format: \\<NetWare server>\<volume>\folder Note Citrix recommends that you do not use the system volume to host the synchronization folder. Question: 50 Which types of character support an exclusion list? A. Uppercase letters B. Lowercase letters C. Special characters D. Numeric characters Question: 51 Which algorithm is used by MetaFrame Password Manager to encrypt and decrypt user credentials? A. AES B. RC-4 C. RC-5 D. Triple-DES MetaFrame Password Manager uses 3-DES not AES. Question: 52 You are the MetaFrame administrator of the Marketing Organization Unit. All of the users in Marketing have the MetaFrame Password Manager agent installed on their computers. All agents are configured to use an Active Directory central credential store. Jane travels frequently and uses a laptop. She has informed you that when she travels, she wants to use the MetaFrame Password Manager agent, but does not want to receive notifications if the agent synchronization fails. How can her request be met while keeping the notification warning for the rest of the users in Marketing? Page 14 of 30

A. On the Synchronizer's settings, set OfflineNotification to Disabled and configure these settings for the entire Marketing OU. B. On the Synchronizer's settings, set OfflineNotification to Disabled and configure these settings only on Jane's user account. C. On the SyncManager settings, configure WorkDisconnected to "Do Not Continue" and configure these settings for the entire Marketing OU. D. On the SyncManager settings, configure WorkDisconnected to "Do Not Continue" and configure these settings only on Jane's user account. Question: 53 You are the administrator for Company.com. One of your colleagues recently installed MetaFrame Password Manager on one of the farm servers. Users connecting to that server are experiencing logon problems. You need to find out which GINA was installed prior to the installation of MetaFrame Password Manager. Which of the following registry keys will provide that information? A. HKEY_LOCAL_MACHINE/SOFTWARE\Citrix\MetaFrame Password Manager\Schell\GINADLL B. HKEY_LOCAL_MACHINE/SOFTWARE\Citrix\MetaFrame Password Manager\Shell\OrigGINADLL C. HKEY_LOCAL_MACHINE/SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL D. HKEY_LOCAL_MACHINE/SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\OrigGinaDLL Question: 54 You need to specify how errors are going to be handled by the agent for Microsoft Access. Which tab in the MetaFrame Password Manager Console can be used to allow you to accomplish this task? A. Bulk-Add B. Application List C. Error Detection D. Password Policies Question: 55 Which Windows security group must a user be a member of in order to run the schema extension Utility found in the Tools directory of the MetaFrame Password Manager CD? A. Administrators B. Domain Admins C. Schema Admins D. Enterprise Administrators Question: 56 Which license type is used in scenarios in which licenses are pooled and used by multiple users? Page 15 of 30

A. Shared license B. Named user license C. Connected product license D. Concurrent-connected user license Question: 57 Why should the MetaFrame Password Manager console be installed in the same location as that of the applications? A. To ensure that the AELIST.INI file is created B. To ensure that the APPLIST.INI file is created C. To eliminate the need to configure application definitions D. To eliminate inconsistencies that occur with application definitions due to operating system differences Question: 58 You are the administrator of a server running MetaFrame Password Manager. You must implement a synchronization method that will determine whether or not to synchronize credentials whenever a user launches a web application. Which option in SyncManager would allow you to implement this task successfully? A. SynchInterval B. AggressiveSync C. ProvideCredentials D. WorkDisconnected Question: 59 How can an administrator check that credential synchronization is working when a shred folder is Used as the central credential store? A. Check the registry file with the same name as the console system. B. Import agent setting into the MetaFrame Password Manager console and compare to settings in the ENTLIST.INI file. C. Export the MetaFrame Password Manager console settings and launch them from another system with a console installed. D. Sent an ADMINOVERRIDE to the synchronization point and verify that the change has occurred at the MetaFrame Password Manager agent. Question: 60 You are the MetaFrame administrator for Company.com. You will be using a File Share Synchronization point password Manager deployment. You have just created a shared folder named "People" using the CtxFileSyncPrep.EXE utility. Which security measure must be taken to secure the servers running MetaFrame Presentation Server? A. Add CREATOR OWNER to the "People" folder's permission sheet. B. Remove the EVERYONE group from the shared folder's permission sheet. Page 16 of 30

C. No action is required; the CtxFileSyncPrep.EXE utility has already applied the required security settings. D. Disable "Allow inheritable permission from parent to propagate to this object" in the shared folder's permission sheet. Question: 61 You are a MetaFrame administrator for Company.com. You want to configure your agent to synchronize to an NTFS File Share called MySync$ located on Server A. Which two actions should you take to properly configure this? (Choose two.) A. Under Agent Settings ->SyncManager, add an NTFS Synchronizer. B. Under Agent Settings -> AccessManager, add an NTFS Synchronizer. C. Under Agent Settings -> AccessManager, configure the Path setting to have a value of \\ServerA\MySync$. D. Under Agent Setting -> SyncManager, add an AD Synchronizer and name the synchronizer \\ServerA\MySync$. E. Under Agent Settings -> SyncManager, configure the Synchronizer's Server setting to have a value of \\ServerA\MySync$. Answer: A, E Question: 62 You are the MetaFrame Password Manager administrator for Company.com. You are in the process of creating application definitions for applications used throughout your company. Some applications, such as payroll, require additional restrictive security. Which action improves the security on these confidential applications with the least amount of administrative effort? A. From the Console, select the sensitive application then on the Miscellaneous tab of the application, disable the Auto-Submit checkbox B. From the Console, select the sensitive application then on the Miscellaneous tab of the application, enable the Force Reauthentication checkbox C. From the Console, select Agent Setting -> AccessManager, and set the Autologin value to 3000 to force the users to re-authenticate every 5 minutes D. From Logon Manager, select the sensitive application, then in the Properties dialog for the application, disable the Auto Submit checkbox From the Console. A) Does not provide any security. Force Reauthentication: Select this option to ensure that users reauthenticate before providing credentials to the application. Auto-Submit: Select this option to have the agent automatically select the OK button (or equivalent) after providing credentials. The user can override this setting using Question: 63 Which Agent Setting in the console can be used to disable the automatic submission of credentials during initial application configuration? A. AutoLogon B. AutoLogonDelay C. LogonAFterConfig D. AutoLoginAFterConfig Page 17 of 30

Question: 64 Click the Node under the Agent Settings of MetaFrame Password Manager that is used to specify whether or not the user can add credentials for applications that are not in the predefined application list. Answer: Access Manager Question: 65 Which three configuration files contain application definitions? (Choose three.) A. AELIST.INI B. FTULIST.INI C. APPLIST.INI D. ENTLIST.INI E. APPDEF.INI Answer: A, C, D MetaFrame Password Manager saves application definitions in the following files:? applist.ini - contains preset application definitions supplied by Citrix (also referred as "templates."? entlist.ini - contains application definitions you create. Page 18 of 30

? aelist.ini - contains the customized entries in entlist.ini merged with the entries in applist.ini to create a complete list of application definitions available to the agent. The agent overwrites aelist.ini when it synchronizes with the central credential store, including at agent startup. The agent then uses aelist.ini to detect known applications. Reference: MetaFrame_Password_Manager_Guide.pdf Question: 66 What is a justification for using Active Directory as the central credential store? A. There are multiple domains. B. Users require different agent settings. C. Mandatory profiles are used in the environment. D. There are a large number of users in the environment. Question: 67 You are the Metaframe administrator for Company.com. You have successfylly created a Synchronization Point on your Netware server using the CtxNWFileSyncPrep utility provided by Citrix. You connect to the Synchronization point using the Metaframe Manager console and you wish to configure Agent Settings. When configuring the SyncManager settings in the console, what are two reasons for using Novell Netware File Share, instead of the Microsoft NTFS File Share for the Synchronizer type? (Choose two) A. The Novell SyncManager will create a user's folder based on the user's Login Domain, and username. B. The Novell SyncManager must alter permission when creating a user's credential store on the sync point. C. The Novell SyncManager must alter permissions when creating a user's credential store on the sync point. D. The Novell Sync Manager will create a user's folder based on the user's Login Tree, Context, and username. Answer: A, D Question: 68 HOTSPOT Exhibit, hotspot **MISSING*** Click on the Node under the Agent Settings that controls was or not Metaframe Password Manager continues to operate when unable to connect to a synchronizer. Answer: SyncManager Question: 69 You are the MetaFrame administrator for Company.com. You have disabled the Sync button for the agent to prevent users from manually synchronizing with the credential store. As Metaframe Password gains popularity, you find yourself frequently creating new application definitions and modifying other MetaFrame Password Manager agent settings. A. In Agent Settings -> SyncManager, set the SyncInterval setting to 0. B. In Agent Settings -> SyncManager, set the AutoSync setting to Always. Page 19 of 30

C. In Agent Settings -> SyncManager, set the AutoSync setting to Enable. D. In Agent Settings -> SyncManager, set the AggressiveSync setting to Enable. Question: 70 Which option can be used to configure logon events for Java applications? A. Site B. Realm C. Control ID D. SendKeys Question: 71 Which three types of central credential stores are supported by MetaFrame Password Manager 2.5? (Choose three.) A. Unix File Share B. Novell edirectory C. Microsoft Active Directory D. Novell Netware File Share E. Microsoft NTFS File Share, D, E Question: 72 You want to ensure that new passwords are generated and submitted without prompting or notifying the user. Which option in the Password Change tab can be used to enforce this setting? A. Prompt User B. Prompt with auto C. Generate and Notify D. Generate for selection E. Generate quietly and submit Answer: E Question: 73 When configuring a web application that has more than two logon fields, where in the MetaFrame Password Manager console can administrators specify criteria to distinguish among different forms? A. General tab B. Matching tab C. Web Form Wizard D. Add Application Wizard Question: 74 How is data merged between the local credential store and the central credential store? A. By User ID Page 20 of 30

B. By session ID C. By date and time D. By validation ticket Question: 75 What are two default options for application that are included in the Metaframe Password Manager console application list? (Choose two.) A. Mask the password B. 30 seconds for RetryTimeout C. 15 seconds for RetryTimeout D. Hide the confirmation password field Answer: A, B Question: 76 If multiple administrators are making changes to the synchronization point, how can each one make sure that none of their changes to the Metaframe Password Manager console settings are lost when others make changes? A. They can create a customized.msi file. B. Only one administrator can connect to the synchronization point at a same time. C. They can save the MetaFrame Password Manager console XML file in a location accessible to all administrators. D. They can export the Agent Settings as a.reg file and then import it into another console. Answer should be C, save to.xml as per page 57, Metaframe Password Manager 2.5 Administrator's Guide: Important: MetaFrame Password Manager allows multiple consoles to edit the shared folder or Active Directory objects used for synchronization. If multiple administrators on separate consoles make changes to the same synchronization point, the most recent changes are applied. To avoid a situation where credentials or settings could be overwritten, communicate with other administrators and verify that you have the most recent configurations on your console before making changes. Citrix recommends keeping an updated.xml file on a network share that contains all the current settings. You can open the.xml file from any console. See "Working with Console Files" on page 115 for more information about using.xml files on the console. Question: 77 Which two conditions, must exist to use mandatory profiles with a MetaFrame Password Manager implementation? (Choose two.) A. The registry must be edited. B. NTFS partitions must be configured. C. Files must be stored in the Application Data folder. D. The Application Data Folder must be placed into a writable location. E. Folder redirection must be implemented for the Application Data folder., E Question: 78 Page 21 of 30

You have decided to configure an in-house application to support Bulk-Add. Which option will allow you to enable this setting? A. Using the MetaFrame Password Management agent, select Applications. B. Using the MetaFrame Password Management agent, select Agent Settings. C. Using the MetaFrame Password Management console, select Applications. D. Using the MetaFrame Password Management console, select Agent Settings. Question: 79 You are the MetaFrame administrator for Company.com. Sandra, a user who logs on to two different workstations throughout the day, reports that changes made to each of the workstation are not synchronized right away. Which Agent Setting can be used to resolve Sandra's problem and minimize the impact on network bandwidth? A. In Agent Settings -> SyncManager, set the SyncInterval setting to 0. B. In Agent Settings -> SyncManager, set the SyncInterval setting to 1. C. In Agent Settings -> SyncManager, set the AggressiveSync setting to Enable. D. In Agent Settings -> SyncManager, set the AggressiveSync setting to Disable. Question: 80 Your manager would like to enable password sharing groups for your company's applications that prompt for credentials. Which two applications would you likely assign to the Domain password sharing group for Windows 2003 domain? (Choose two.) A. An intranet web site. B. A mainframe application. C. Personal webmail accounts with an ISP. D. An Active Directory enabled HR application. E. Personal instant Messaging clients with an ISP. Answer: A, D CTX-1321BB Student Manual, Page 184 Example: The administrator adds Microsoft Outlook to the domain password sharing group. The end-user changes the Windows authentication password for the domain. The password used to access Microsoft Outlook also changes because it is in the Domain password sharing group. When the end-user attempts to access Microsoft Outlook, the new password is sent to the authenticator and the application opens. Question: 81 The Company.com network consist of: 1. A server running MetaFrame Presentation Server, which is used to deploy all applications 2. Web Interface, which is used as the access mechanism 3. 100 user workstations, which are Windows 2000 Professional or Windows Xp Professional. These workstations are in the same Active Directory domain. Required Results: The administrator must design a solution that allows users to logon one time to their workstation and have single sign on to all MetaFrame Secure Access Manager web applications. Desired Results: Page 22 of 30

SSO capability should be enabled for servers running MetaFrame Presentation Server an theis deployed applications. Proposed Solution: The administrator installs the MetaFrame Password Manager agent on servers running MetaFrame Presentation Server and the workstations. Which results does the proposed solution produce? A. The proposed solution produces both the required and desired results. B. The proposed solution produces the required but not the desired results. C. The proposed solution does not produce any of the required or desired results. D. The proposed solution produces desired result but not the required results. Answer: A Question: 82 You are the administrator of a server running MetaFrame Presentation Server that includes a MetaFrame Password Manager. Your plan is to upgrade MetaFrame Password Manager 2.0 to MetaFrame Password Manager 2.5. You initially deployed MetaFrame Password Manager 2.0 using a custom.msi file. What does Citrix recommend when upgrading to MetaFrame Password Manager 2.5? A. Uninstall Microsoft Serve Pack 4. B. Uninstall MetaFrame Presentation Server C. Uninstall the MetaFrame Password Manager agent D. Uninstall the MetaFrame Password Manager console Question: 83 What is the maximum password length supported by MetaFrame Password Manager Policies? A. 8 characters B. 10 characters C. 128 characters D. 255 characters Source: Citrix MetaFrame Password Manager 2.5: Administration Page 177, Step 4: If an administrator wants to... Set a maximum length for password in the policy: Then...The valid range for this field is 0-255 characters. Question: 84 Which value must be configured when using a web application template? A. URL B. Realm C. Form name D. Frame name Answer: A Question: 85 Page 23 of 30

You are the MetaFrame Administrator for Company.com. You have deployed MetaFrame Password Manager to all users in your company through a Group Policy Object. You have configured password sharing groups for each department and placed all department applications into each corresponding group. You receive feedback from users that their domain and application passwords are synchronized. Which two additional settings have to be configured to correct this problem? (Choose two.) A. Within each application, enable Password Sharing B. Within each password sharing group, enable Password Sharing C. Under Agent Settings -> Authenticator, enable Password Sharing D. Under Agent Settings -> SyncManager, enable Password Sharing E. Under Agent Settings -> accessmanager, enable Password Sharing, E Question: 86 An administrator will implement MetaFrame Password Manager to provide SSO for users who access published applications on a server running MetaFrame Presentation Server. Users currently access applications through Program Neighborhood. Remote users connect through a VPN. Where should the agent be installed for this deployment scenario? A. On the system hosting the VPN B. On the local system of each user C. On the Internet Information Server hosting Web Interface D. On each server running MetaFrame Presentation Server in the farm Question: 87 HOTSPOT Page 24 of 30

Click the Node that is used to delete the user's data folder and registry keys after the agent is shutdown. Answer: Shell Question: 88 An administrator has just configured MetaFrame Password Manager to log in to an application using RSA tokens. What must be configured in the application definition to allow dynamic password usage, such in the scenario above? A. Auto-submit needs to e disabled in the application definition B. A third field label needs to be added to the application definition C. A password policy needs to be configured for the application definition D. Force reauthentication needs to be disable in the application definition Answer: A Source: Citrix MetaFrame Password Manager 2.5: Administration Page 126 Miscellaneous Settings Auto-submit- which is enabled by default for each application and allows the credentials to be automatically submitted instead of manually submitted. In certain cases, auto-submit would need to be disabled for SSO to occur successfully. An example of this would be if a dynamic password were being used, such as an RSA token. The end-user would be forced to enter the passcode and token number and then manually submit the credentials. Question: 89 Page 25 of 30

You are the administrator for Company.com. You created several new application definitions in the console. After informing users that the new definitions are available, users state that the agent is not properly detecting the new applications. Which two steps can you perform to determine the cause of the problem? (Choose two) A. Verify that the application definitions are stored in the.xml file. B. Verify that the application definitions are exported in.reg format. C. Verify that the application definitions are stored in the AELIST.INI file. D. Verify the application definitions are stored in the central credential store., D Question: 90 When adding an application to the New Logon screen of the Logon Manager, which statement is true? A. A description of the application is required. B. Applications that require three fields for authentication can be added. C. Users must select the Password icon manually and enter the password in the application. D. Users must select the Username/ID icon manually and then click on the appropriate field in the application <A> is optional and not required. The Application name is required. By testing this behavior in the Agent, the correct answer should be D. Question: 91 A user has two sets of credentials for credentials for a secure web application. After adding the first set of credentials to the Logon Manager, the user makes a copy of the credentials. How would the user be able to edit the second set of credentials? A. By altering the settings for the application. B. By viewing and altering information stored in the application's properties. C. By selecting the second set of credentials in the Logon Chooser screen. D. By turning off the Auto-Submit feature launching the application and providing the second set of credentials You cannot edit any field in the Logon Chooser screen (not C). Question: 92 You are the MetaFrame Password Manager administrator for your company. The company's distribution centers are small and the users to share computers in order to complete their daily tasks. You want to simplify the user's experience and also verify that MetaFrame Password Manager is still secure. Which three actions satisfy your goal? (Choose three.) A. In Agent Settings -> AccessManager, set the PasswordSharing setting to "Disable" to prevent users from sharing their passwords B. In Agent Settings -> AccessManager, set the AutoLogin value to 60 minutes so that the Agent timer expires in shorter period of time Page 26 of 30

C. In Agent Settings -> Shell, set the DeleteOnShutdown setting to "Enable" to force the user's local credential storage to be removed during logoff D. In Agent Settings -> Authenticator, set the SmartcardSourceForKey setting to "Password/PIN" to increase the encryption level used by the Agent E. From the MetaFrame Password Manager console, select each application then on the "Miscellaneous" tab of thee application, enable the Force Reauthentication checkbox to verify a user's identity prior to submitting credentials to all applications., C, E <A> does not provide any security enhancement but <B> Does. Also, users cannot share their passwords by themselves. Sharing passwords can be done through the console by the administrator. Question: 93 Which three components are included with MetaFrame Password Manager? (Choose three) A. MetaFrame Password Manager host B. MetaFrame Password Manager agent C. MetaFrame Password Manager server D. MetaFrame Password Manager console E. MetaFrame Password Manager license administration, D, E Question: 94 You have decided to use smart cards to provide two-factor authentication for increased network security. Which three components are required on the server for a successful implementation of the smart card software? (Choose three.) A. Novel Netware B. PC/SC software C. Microsoft Active Directory D. Smart Cards Reader Software drivers E. Cryptographic Service Provider software, D, E Question: 95 You are setting up MetaFrame Password Manager in a test environment to test overall functionality. The environment consists of applications hosted on MetaFrame Presentation Server and also on the workstation. In the production as well as the test environment, you have Active Directory in place. What type of configuration should you use? A. In the test environment, set-up MetaFrame Password Manager for Active Directory synchronization and install the agent on the test server running MetaFrame Presentation Servers, and on all the workstations B. In the production environment, set-up MetaFrame Password Manager for File Share synchronization and install the agent on the production running MetaFrame Presentation Servers, and on all the workstations C. In the test environment, set-up MetaFrame Password Manager for Active Directory synchronization and install the agent on the production servers running MetaFrame Presentation Servers, and on all the workstations Page 27 of 30

D. In the production environment, set-up MetaFrame Password Manager for Active Directory synchronization and install the agent on the production running server MetaFrame Presentation Servers, and on all the workstations. Answer: A The Question is about the Test Environment, which should match what in the production environment. Question: 96 When a user is working with a published application, which setting can be enabled to reveal the computer name of the server running MetaFrame Presentation Server to which the user is connected? A. IdentifyNew B. AllowReveal C. RevealComputerName D. DisplayComputerName Question: 97 You are the MetaFrame administrator for Company.com. Which two parameters can you specify When you create a MetaFrame Password Manager synchronization point the CtxFileSyncPrep.EXE utility? A. The local path to the folder you want to create and share B. The share name for the folder you want to create and share C. The permissions for the folder you want to create and share D. The file system type for the folder you want to create and share Answer: A, B Question: 98 Which node in the MetaFrame Password Manager console is used to configure connection options and to create a synchronizer for data shared between the MetaFrame Password Manager console and the MetaFrame Manager agent? A. Shell B. SyncAgent C. SyncManager D. AccessManager Question: 99 Which two options can be used as license repository? (Choose two.) A. Shared folder B. Local credential store C. Central credential store D. Active Directory containet E. Microsoft Access database Page 28 of 30

Answer: A, D Question: 100 Which statement is true for MetaFrame Password Manager password policies? A. MetaFrame Password Manager policies are merged into the registry B. MetaFrame Password Manager policies enforce password expiration requirements C. MetaFrame Password Manager policies use the Active Directory Group Policy engine D. MetaFrame Password Manager policies manage character generation for passwords Question: 101 Which algorithm is used by MetaFrame Password Manager to encrypt and decrypt user credentials? A. AES B. RC-4 C. RC-5 D. Triple-DES See page 37/38 in password manager book Question: 102 You are the administrator of a server running MetaFrame Password Manager. You must implement a synchronization method that will specify the time, before automatic resynchronization occurs. Which option in SyncManager would allow you to successfully implement this task? A. AutoSync B. SyncInterval C. AggresiveSync D. WorkDisconnected Question: 103 An administrator has just added a new application to the Bulk-Add list for users of enterprise resources. How is this revision to the application list recorded? A. It is recorded in the directory B. It is recorded by the version stamp C. The revision is recorded on the local credential store D. The new application is recorded to the ENTLIST.INI file From the Help: MetaFrame Password Manager enters a Date Stamp in yyyymmdd format. For example, "20040615" is June 15, 2004. If the value of Date Stamp is later than the date a given agent Page 29 of 30

completed setup, the agent prompts the user with the first-time-use list to add credentials to application definitions. Question: 104 By default, for how many days is the DaysBeforeDelete setting in the Agent Settings node of MetaFrame Password Manager 2.5 configured? A. 5 B. 7 C. 30 D. 90 E. 365 Question: 105 Which form type should administrators use when defining new applications in the MetaFrame Password Manager console? A. Logon B. EntList C. New Logon D. Text match criteria Answer: A Question: 106 When using a shared folder as the central credential store, where should the share be located? A. On the Web server B. On the Agent server C. On a system in the same domain as the agents D. On a server running Metaframe Presentation Server Question: 107 Which module is primary responsible for detecting user credential requests for host-based Terminal emulators? A. SSOBHO.EXE B. SSOMHO.EXE C. SSOHOOK.DLL D. SSOSHELL.EXE End of Document Page 30 of 30