Free OCE-H sample questions

Correct answer: It ensures that the UAG can accurately monitor the health of the specific Connection Server it proxies for.

Omnissa/VMware best practices recommend a 1:1 ratio because the UAG acts as a smart proxy. If a Load Balancer sits between them, the UAG might send traffic to the LB VIP, which routes to a healthy server even if the specific server the UAG is 'paired' with is down. However, for session affinity and accurate status reporting in the dashboard, a direct 1:1 link allows the UAG to detect if its specific backend broker is down and mark itself as unavailable to the external load balancer, ensuring cleaner failover.

Correct answer: It is required to restore the ADAM database from a backup.

The data recovery password (1-128 characters) is set when you install the first, standard Connection Server. Horizon backs up its LDAP (AD LDS) configuration as encrypted LDIF data, and you must supply this password to decrypt and restore that backup, for example with vdmimport -d -p -f backup.LDF > decrypted.LDF followed by vdmimport -f decrypted.LDF. It is not used for JMS, vCenter communication or console logon.

Correct answer: Virtual Machine > Provisioning > Customize

The vCenter Server user that Horizon uses for instant clones needs Virtual machine > Provisioning privileges, including Customize, Clone virtual machine, Deploy template and Read customization specifications, along with inventory, configuration and snapshot privileges. Global > Settings, Host > System Management and Guest Operations > Execute are not the required privilege for guest customization.

Correct answer: Port 389 is already in use by another application on the server.

The Horizon Connection Server installs a lightweight directory service (ADAM/LDS) which listens on standard LDAP ports (389 for standard, 636 for SSL). If another service (like a local AD Domain Controller role or another LDAP tool) is binding to port 389, the ADAM instance creation will fail.

Correct answer: Blast (TCP/UDP 8443 client to UAG, TCP/UDP 22443 UAG to agent) or PCoIP (TCP/UDP 4172).

Authentication and brokering use HTTPS 443, so they succeed. The display protocol session then opens: Blast Extreme uses TCP/UDP 8443 from client to UAG and TCP/UDP 22443 from UAG to the agent; PCoIP uses TCP/UDP 4172 on both legs. If these flows are blocked, the user sees a black screen until the session times out.

Correct answer: Manually delete the stale VM record from vCenter and the AD computer account, then perform a 'Remove' operation on the stuck VM in Horizon Console.

The fault means vCenter already has an object with the name Horizon is trying to create, usually a stale VM left from an earlier failed operation. Remove the stale VM in vCenter (and its stale AD computer account), then remove the stuck machine in Horizon Console so provisioning can retry with the name.

Correct answer: The SMB File Server hosting the DEM Config/Profile shares.

During a logon storm, thousands of users simultaneously request their profile configuration files (DEM) and profile archives. If the backend SMB file server cannot handle the IOPS or network throughput, the 'Profile Load' phase will stall, causing the symptoms described.

Correct answer: The Connection Server, via Kerberos authentication.

'Log in as current user' utilizes Kerberos. The Horizon Client obtains a ticket-granting ticket (TGT) from the local OS and passes it to the Connection Server, which validates it against AD without prompting for a password.