nerdexam
Citrix

1Y0-201 · Question #97

A Citrix Administrator must limit the Helpdesk team supporting Human Resources (HR) to only manage and view resources for the HR department. Which two steps must the administrator complete within…

The correct answer is C. Remove all current scopes for the HR Helpdesk team. E. Create a new custom scope and link it to the HR Helpdesk team. Citrix delegated administration uses scopes to restrict which resources an administrator can manage. To confine the HR Helpdesk team to only HR resources, existing broad scopes must be removed and a new HR-specific scope must be created and assigned.

Managing Infrastructure Components

Question

A Citrix Administrator must limit the Helpdesk team supporting Human Resources (HR) to only manage and view resources for the HR department. Which two steps must the administrator complete within Citrix Studio to meet the requirements of the scenario? (Choose two.)

Options

  • AApply the custom filter to the HR Helpdesk team.
  • BRemove all current roles for the HR Helpdesk team.
  • CRemove all current scopes for the HR Helpdesk team.
  • DCreate a new custom role and link it to the HR Helpdesk team.
  • ECreate a new custom scope and link it to the HR Helpdesk team.

How the community answered

(56 responses)
  • A
    7% (4)
  • B
    16% (9)
  • C
    71% (40)
  • D
    5% (3)

Why each option

Citrix delegated administration uses scopes to restrict which resources an administrator can manage. To confine the HR Helpdesk team to only HR resources, existing broad scopes must be removed and a new HR-specific scope must be created and assigned.

AApply the custom filter to the HR Helpdesk team.

There is no 'custom filter' step in Citrix Studio delegated administration - resource restriction is handled via scopes, not filters.

BRemove all current roles for the HR Helpdesk team.

Removing roles would strip the team of all permissions to perform actions (manage, view), not just limit which resources they act on.

CRemove all current scopes for the HR Helpdesk team.Correct

Removing all current scopes eliminates any existing broad resource access the HR Helpdesk team may have inherited, ensuring they cannot manage resources outside the HR department.

DCreate a new custom role and link it to the HR Helpdesk team.

Creating a custom role defines what actions (permissions) an administrator can perform, not which resources they can access - the scope is the mechanism for resource restriction.

ECreate a new custom scope and link it to the HR Helpdesk team.Correct

Creating a custom scope in Citrix Studio defines the specific set of objects (machines, delivery groups, etc.) belonging to HR, and linking it to the HR Helpdesk team ensures their administrative actions are restricted to only those objects.

Concept tested: Citrix delegated administration scopes and role assignment

Source: https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/secure/delegated-administration.html

Topics

#delegated administration#custom scope#RBAC#Citrix Studio

Community Discussion

No community discussion yet for this question.

Full 1Y0-201 Practice