Access to a XenDesktop environment has already been configured. In which two scenarios should a Citrix Administrator configure additional NetScaler session policies in an existing environment? (Choose

VPN access requires a dedicated NetScaler session policy that enables the SSL VPN or ICA Proxy mode, configures split tunneling, and defines allowed network resources - settings not present in a basic XenDesktop access session policy.

Endpoint device scanning (endpoint analysis) requires a session policy with an associated scan expression or SmartAccess policy that evaluates client device posture before granting access, which must be defined as a separate session policy.

Multiple XenDesktop sites do not inherently require additional session policies - site selection is handled through StoreFront or ICA routing, not through separate NetScaler session policies.

Multiple authentication methods are handled by NetScaler authentication policies and profiles, not by session policies, so additional session policies are not required solely because different auth methods are in use.