Self Test

---

The following questions will help you measure your understanding of the material presented in this chapter. Read all the choices carefully, as there may be more than one correct answer. Choose all correct answers for each question.

Recognizing Citrix Web Components

1.	Define NFuse. A Citrix portal software that allows users to access published applications via Program Neighborhood. A Citrix portal software that allows administrators to create server farms. A Microsoft add-on product that allows Program Neighborhood to be Web-enabled. A Citrix portal software that allows users to access published applications via the Web.
2.	You have just created a custom NFuse Web site using the Web Site Wizard. On a new desktop PC running Windows 2000, you browse to the NFuse Web site using Internet Explorer 5.0. The Web-based ICA Client installation pop-up window appears stating that you do not have the latest ICA Client. However, when you click the link to install the ICA Client, it brings up a Page Not Found notice. What could be the cause of this? Internet Explorer 5.0 is not supported and needs to be upgraded to version 5.5. The Web server cannot communicate with the Citrix server. You did not select 'ICA Client Detection' when creating your custom NFuse Web site. The NFuseClients folder does not exist in the wwwroot folder on the Web server.
3.	What are the components that make up the three tiers of NFuse? A Web browser An ICA Client device A Citrix server farm A Web server
4.	NFuse is a Web-enabled version of what program? Program Neighborhood The Citrix ICA Client Citrix Management Console Published Application Manager
5.	You have created a custom Web site using the Web Site Wizard. Your Unix users are complaining that they get the Web-based ICA Client Installation window every time they return to the NFuse login page. What can you do to fix this problem? Install the Web-based ICA Client Remove the NFuseClients folder from the wwwroot on your Web server. On the Web-based ICA Client installation pop-up window, check the box labeled Do Not Show This Window At Login. By design, this cannot be fixed.
6.	The NFuse Web Site Wizard installation is not installed with the NFuse Web Server Extensions. Where can this executable be found? It can only be downloaded from the Citrix Web site. It resides on the NFuse CD and must be installed separate from the NFuse Web Server Extensions installation. On the Web server, this executable may be found under the NFuseClients folder in the wwwroot folder. It can be found on any 32-bit Windows machine running the ICA Client.
7.	What Web server component will authenticate users to a Citrix server farm? NFuse Java objects Web Site Wizard Program Neighborhood Microsoft ASP or Sun JSP scripting
8.	What three items can you use to call and use NFuse Java objects? JavaServer Pages Active Server Pages Notepad Citrix proprietary substitution tags
9.	Your company has two Citrix server farms that they want to be integrated into one NFuse page. Both Citrix server farms reside in the same domain. What two ways could you enable the NFuse page to force domain authentication information? Configure the Citrix XML Service to pass only the domain information you request. Using the NFuse Web Site Wizard, create a custom Web site to force the domain name for explicit logins. Using the NFuse Web Site Wizard, create a custom Web site to allow guest logins. Configure the user's local ICA Clients to only log in to a specific domain.
10.	Which of the following are functions of the Citrix server farm with an NFuse system? Hosts published applications. Provides the Web server with application set data for authenticating users. Hosts the NFuse Java objects. Passes customized ICA files to ICA Client devices.

Answers

1.	þ D is the correct answer. NFuse is a portal software that allows users to access published applications through an Internet or intranet Web site. ý A is incorrect because applications are accessed through a Web browser and not through Program Neighborhood. B is wrong because NFuse does not allow administrators to create server farms. C is incorrect because NFuse is not a Microsoft technology.
2.	þ D is correct. If during the NFuse Web Server Extensions setup you did not supply an ICA Client CD or copy the contents of the CD's ICAWEB folder to the NFuseClients folder, the Web-based ICA Client installation will fail. ý A is wrong because Internet Explorer 5.0 is supported. B is wrong because the Web server hasn't reached a point where it would need to contact a Citrix server. C is incorrect because this isn't an option using the Web Site Wizard.
3.	þ B, C, and D are correct. All three make up the three tiers that NFuse requires. ý A is incorrect because it is not a component of NFuse; it is a component of the ICA Client device.
4.	þ A is correct. NFuse is essentially a Web-enabled version of Program Neighborhood. ý B is wrong because the ICA Client device uses the Citrix ICA Client to initiate ICA sessions to the Citrix servers. C and D are simply incorrect.
5.	þ C is correct. The Web-based ICA Client Installation piece can correctly detect the presence of the ICA Client on only the 32-bit and 16-bit Windows platforms. For all other platforms, this window will pop up until the Do Not Show This Window At Login check box has been marked. ý A is wrong because even if you do install the Web-based ICA Client, the Web-based ICA Client Installation code cannot correctly detect the presence of an ICA Client on the Unix platform. B is incorrect because even if you remove the NFuseClients folder from the wwwroot on the Web server, this pop-up box will remain. D is wrong because placing a check in the check box will stop the page from popping up on subsequent visits to the login page.
6.	þ B is correct. The NFuse Web Site Wizard is a separate installation from the NFuse Web Server Extensions and may be installed on any 32-bit Windows machine. ý A is wrong because not only can it be downloaded from the Citrix Web site, but it also can be found on the NFuse CD. C is wrong because the Web-based ICA Clients reside under the NFuseClients folder under the wwwroot on the Web server. D is incorrect because it does not install with the ICA Client program.
7.	þ A is correct. The NFuse Java objects perform several functions, one of which is assisting in authenticating users to a Citrix server farm. ý B is incorrect because the Web Site Wizard plays no part in Citrix server farm authentication. C is wrong because Program Neighborhood is an ICA Client device component, not a Web server component. D is incorrect because these are examples of two Web-server side scripts that will call NFuse Java objects but do not perform the function of authentication.
8.	þ A, B, and D are correct. These three items allow an administrator to call and execute NFuse Java objects.ý C is incorrect because Notepad cannot be used to make NFuse Java object calls.
9.	þ B and C are correct. During the custom Web site creation process using the NFuse Web Site Wizard, you have the ability to force domain information for explicit logins and allow guest logins where the domain is specified. ý A is incorrect because the Citrix XML Service cannot be configured to pass specific domain information for authentication purposes. D is incorrect because all connection information used through NFuse is passed through the ICA file customized for the ICA Client, not the ICA Clients local settings.
10.	þ A and B are correct. The Citrix server farm's role within an NFuse system is to host the published applications and provide the Web server application set information for users authenticating themselves. ý C and D are incorrect because these are roles of the Web server with an NFuse system.

Identifying NFuse Features and Components

11.	What TCP port is used by default for SSL communication? 1494 2513 443 80
12.	Which of the following ICA Clients are capable of supporting 128-bit encryption? Unix Win32 Win16 WinCE
13.	Your company wants to implement an NFuse Web site that will bring the published application information from two server farms, a MetaFrame XP 1.0 farm and a MetaFrame 1.8 farm, together on a single page. How would you create this Web site to allow for ticketing? Create a custom Web site using the Web Site Wizard that allows for ticketing. Create a custom Web site using the Web Site Wizard that allows for ticketing. Install and activate Feature Release 1 on all of the MetaFrame XP 1.0 servers. Create a custom Web site using the Web Site Wizard that allows for ticketing. Install and activate Feature Release 1 on a single MetaFrame 1.8 server. Create a custom Web site using the Web Site Wizard that allows for ticketing. Install and activate Feature Release 1 on all MetaFrame 1.8 servers.
14.	You just installed a Citrix MetaFrame XP for Windows 1.0 server farm with all of the default ports left intact and created a custom NFuse Web site to publish your applications via the Internet. On your firewall, you opened ports 80 for HTTP traffic and 443 for ICA communication. When testing connectivity through the NFuse site locally, everything works fine, though your remote users get no connectivity through the firewall. What do you need to do to fix the problem? Require that all your published applications have a 128-bit encryption ICA session to connect. Enable ticketing on the custom created NFuse Web site. Open port 1494 for ICA communication on your firewall instead of port 443. Instruct your remote users to download the latest Citrix ICA Client.
15.	Which of the following is NOT a function performed by the NFuse Java objects? ýChoose all that apply.) Encrypts all data from the Web browser to the Web server. Authenticate users to a Citrix server farm. Retrieve application set data from a server farm on a per-user basis. Create dynamic Web pages that have application set information with hyperlinks to allow the ICA Client device to launch ICA sessions.
16.	You are the administrator of a MetaFrame XP server farm. Your company wants you to create an NFuse Web site allowing for secure communications between the Web server and the Citrix server farm. Which of the following must you do to accomplish this? Create a custom Web site using the Web Site Wizard that allows for ticketing. Nothing needs to be done on the MetaFrame XP servers, since these can use the ticketing technology by default. Create a custom Web site using the Web Site Wizard. Install a digital certificate on the Web server to allow for HTTPS communication between the Web server and the Citrix server farm. Configure a Citrix server to allow SSL Relay by running the Citrix SSL Relay Configuration Tool. Create a custom Web site using the Web Site Wizard. Configure a Citrix server to allow SSL Relay by running the Citrix SSL Relay Configuration Tool. Create a custom Web site using the Web Site Wizard that contains the SSL Relay information of the Citrix server.
17.	You are using NAT on your firewall and have configured an alternate address on your Citrix server to allow for remote connectivity. You find that your remote users cannot connect when entering through the NFuse Web site. On your firewall, you have opened TCP ports 80 and 1494 to allow for Web and ICA traffic. What else could be the problem? TCP port 443 needs to be open for SSL communication. The NFuse Web site must change the substitution tag [NFuse_IPV4Address] with [NFuse_IPV4AddressAlternate] in the template.ica file. The NFuse Web site must change the substitution tag [NFuse_IPV4Address] with [NFuse_IPV4AddressAlternate] in the launch.ica file. The NFuse Web site must change the substitution tag [NFuse_IPV4Address] with [NFuse_IPV4AlternateAddress] in the launch.ica file.
18.	You are the administrator of a single server implementation of a Web server running NFuse with Citrix MetaFrame XP. Your single server is accessible via the Internet. Your company does not have a firewall and can spend no more additional dollars on this project. What should you do to secure your single server as best you can? Create a custom NFuse Web Site using the Web Site Wizard that will allow for ticketing. Create a custom NFuse Web Site using the Web Site Wizard that will disable ticketing. Enable NAT on your Citrix server. Publish each application with a minimum requirement of 128-bit encryption for all ICA sessions.
19.	Which of the following are not supported platforms for an NFuse web server? ýChoose all that apply.) Windows NT 4.0 Lotus Domino Server Citrix WinFrame 1.8 The Microsoft Windows 2000 Server family
20.	NFuse objects are Java objects that are ____ compliant? JSP COM XML ASP

Answers

11.	þ C is correct. By default, all SSL communication is done through TCP port 443. ý A is wrong because it is the default port for ICA session communication. B is incorrect because it is the port for Citrix Management Console-to-MetaFrame XP server communication. D is wrong because it is the default port for HTTP, or Web, traffic.
12.	þ B, C, and D are correct. These three clients are all capable of using 128-bit encryption. ý A is incorrect because Unix does not have 128-bit RC5 encryption support.
13.	þ D is correct. A custom Web site created using the Web Site Wizard that allows for ticketing will enable the Web server for ticketing. All Citrix MetaFrame XP 1.0 servers have the capability of using ticketing by default, but Citrix MetaFrame 1.8 servers must have FR1 installed and licensed on all servers participating in the farm. ý A is incorrect because SP2 and FR1 need to be installed and activated on the MetaFrame 1.8 server farm. B is incorrect because FR1 needs to be installed on the MetaFrame 1.8 servers, not the XP servers. C is incorrect because FR1 needs to be installed on all servers in the farm, not just one.
14.	þ C is the correct answer. Local users have no problem connecting to the NFuse Web site and running their applications, which is an indication that both the Web server and Citrix servers are functioning properly. To have allowed users to connect initially, only port 80 for HTTP traffic and 1494 for ICA traffic needed to be opened. Port 443 is used for SSL communication. ý A, B, and D are all incorrect because if port 1494 is not opened on the firewall, no ICA session can be established. Though incorrect, each one is a good idea of things to do once connectivity has been established.
15.	þ A is correct in that it is not a function of the NFuse Java objects. This is an example of what SSL encryption on a Web server can provide. ý B, C, and D are incorrect because they are all functions that NFuse Java objects perform.
16.	þ D is correct. To allow for secure, encrypted communication between the Web server and the Citrix server farm, a single Citrix server must be configured as an SSL Relay server. In addition, the SSL Relay server information must be entered in when creating a custom Web site using the Web Site Wizard. ý A is incorrect because ticketing allows for secure authentication information between all three tiers. B is incorrect because HTTPS communication exists between the Web server and the Web browser. C is wrong because the SSL Relay server information needs to be entered into the custom Web site for SSL Relay to work.
17.	þ B is correct. The remote users must specify the alternate address of the Citrix server to connect through the firewall running NAT. In this scenario, the Citrix server will return its internal IP address which the users will not be able to connect to. ý A is incorrect because TCP port 443 is not needed in this scenario. C is incorrect because substitution tags only exist in the template ICA files, not the customized ones passed down to the ICA Client device. D is incorrect because the syntax for the substitution tag is wrong.
18.	þ A and D are correct. By allowing ticketing, authentication information is not passed through the ICA file. In addition, publishing all applications to require 128-bit encryption will allow for secure communications over the ICA connection between your ICA Client device and your Citrix server. ý B is wrong because ticketing would be a benefit in this scenario. C is incorrect because NAT is a feature of a firewall, not a Citrix server.
19.	þ B and C are correct in that they are not a supported platform for an NFuse Web server. ý A and D are incorrect because they are supported platforms for an NFuse Web server.
20.	þ B is correct. Java objects are Component Object Model (COM) compliant. COM is a method in which different software components can communicate with one another, regardless of hardware, operating system, or language being used. ý A is incorrect because JSP is a form of Web-side scripting. C is wrong because the XML service is used in conjunction with Java objects. D is incorrect because it is also a form of Web-side scripting.

---