2H0_25 exam questions

1. Question 1

   Single answer

   Two load-balanced Connection Servers are healthy replicas in a Horizon pod. A review finds that both VMs currently run on the same ESXi host. The management cluster has another host with sufficient capacity. The requirement is to keep at least one broker running throughout a single ESXi host failure, rather than wait for both broker VMs to restart.

   Which change directly addresses this availability gap?

   • A

     Enable host HA recovery for both broker VMs while leaving both on the current host.

   • B

     Reserve more memory for both broker VMs while leaving their host placement unchanged.

   • C

     Add a third broker replica to the same current host and include it in the load balancer.

   • D

     Place the broker replicas on different hosts and configure an appropriate VM anti-affinity rule.

   Reveal answer

   Correct answer

   • D

     Place the broker replicas on different hosts and configure an appropriate VM anti-affinity rule.

   Explanation

   The two replicas currently share a host failure domain. Placing them on separate hosts and maintaining that placement with an appropriate anti-affinity rule keeps one replica running if a single host fails, given the stated spare capacity and healthy network and load balancer.

   Validate resources and the placement rule with the vSphere administrator. Confirm that both brokers accept new connections before a controlled single-host failure test, and verify that the load balancer sends requests to the surviving replica. Review placement after maintenance and keep the previous rule and recovery plan available.

2. Question 2

   Single answer

   An engineer designs external access to Horizon 8 through two Unified Access Gateway appliances. The security requirement is that UAG itself validates the client’s certificate during client certificate authentication. This design does not use an identity-bridging or header-based authentication alternative. The engineer must retain load balancing and choose a supported TLS topology.

   Which design meets the requirement?

   • A

     Terminate client TLS at the load balancer and use plaintext HTTP to the selected UAG.

   • B

     Pass client TLS through a layer-4 TCP load balancer and terminate it at the selected UAG.

   • C

     Terminate client TLS at the load balancer and re-encrypt to UAG using the same server certificate.

   • D

     Terminate client TLS at the load balancer and re-encrypt to UAG using different server certificates.

   Reveal answer

   Correct answer

   • B

     Pass client TLS through a layer-4 TCP load balancer and terminate it at the selected UAG.

   Explanation

   Direct client certificate authentication requires the client TLS connection to reach UAG without being terminated at the load balancer. Test the design with both a trusted and a rejected client certificate, then verify TLS termination and normal access. Roll back the test topology if authentication or access validation fails.

3. Question 3

   Single answer

   A Horizon 8 Cloud Pod Architecture deployment has separate internal and external Connection Server instances. An engineer expects the global desktop entitlement named Internal-Engineering to be unavailable through the external instance. The same entitled test user can nevertheless open a new desktop through that instance. Network routing sends this test directly to the external Connection Server, and no other entitlement grants the resource.

   Which explanation best fits the configuration in the exhibit?

   Synthetic effective configuration:

   CS-Internal tags: Internal

   CS-External tags: External

   Global entitlement Internal-Engineering tags: none

   Test user: explicitly entitled to Internal-Engineering

   New session entry point: CS-External

   • A

     A Connection Server with tags can access a global entitlement that has no tags.

   • B

     Tag restrictions do not apply to global desktop entitlements when the user has an explicit entitlement.

   • C

     The global entitlement’s descriptive name automatically matches the internal Connection Server tag.

   • D

     The external Connection Server inherits the internal instance’s tag through CPA replication.

   Reveal answer

   Correct answer

   • A

     A Connection Server with tags can access a global entitlement that has no tags.

   Explanation

   A tagged Connection Server can access a global entitlement that has no tags. The entitlement’s name expresses an administrative intention but does not enforce an access restriction, so this configuration permits the entitled user to connect through CS-External.

   For internal-only access, apply the appropriate entitlement tag restriction and separately ensure that network routing uses the intended Connection Server. Test access from both entry points, including a negative external test. Record the previous tag assignments so an unintended lockout can be reversed.

4. Getting the hang of it? 75 more 2H0_25 questions are waiting, each with its answer. Unlock them all

5. Question 4

   Single answer

   During maintenance of an automated instant-clone RDSH farm in Horizon 8 2206, an administrator has selected Stop at first error. The reviewed records show that a new clone fails during customization, while other clones continue to be provisioned and customized. No provisioning-stage error is recorded. The administrator asks whether the continued work proves that the option was ignored.

   Which explanation is correct?

   • A

     The option stops work for provisioning errors; a customization error does not stop other clones.

   • B

     The option stops work for either error type, so continued work proves it was ignored.

   • C

     The option stops work only after all RDS hosts have completed the maintenance cycle.

   • D

     The option stops work only for manual farms, so it cannot affect this automated farm.

   Reveal answer

   Correct answer

   • A

     The option stops work for provisioning errors; a customization error does not stop other clones.

   Explanation

   In the version and workflow stated in the question, the option applies to provisioning errors. A customization failure does not stop work on other clones, so continued work does not prove the option was ignored. The failed clone still needs investigation; these observations do not establish its root cause or show that it is healthy.

6. Question 5

   Single answer

   A Horizon 8 2206 automated instant-clone RDSH farm has ten hosts. An engineer configures routine periodic refreshes and sets minimum farm size to two so hosts remain available while others are maintained. Existing users must be allowed to log off naturally, even if refresh completion takes longer; there is no fixed completion deadline. Provisioning and the selected image are valid.

   Which scheduling choice fits these constraints?

   • A

     Recurring maintenance with Wait for users to log off.

   • B

     Immediate maintenance with Wait for users to log off, relying on minimum farm size to exclude two hosts.

   • C

     Recurring maintenance with Force users to log off after a notification.

   • D

     Immediate maintenance with Force users to log off and a minimum farm size of two.

   Reveal answer

   Correct answer

   • A

     Recurring maintenance with Wait for users to log off.

   Explanation

   Recurring maintenance provides the requested periodic refresh, while Wait for users to log off allows existing sessions to end naturally. Monitor maintenance state, available capacity, and completion before the next demand peak. Long-lived sessions can delay completion, so this choice does not guarantee a finish time. Keep the prior schedule and image selection for a controlled reversal; changing a schedule cannot restore unsaved work lost through a forced logoff.

7. Question 6 Locked Unlock to see this question
8. Question 7 Locked Unlock to see this question

Back to the 2H0_25 exam page