The minimum built-in delegated administration role required to create an Application Group is the Delivery Group Administrator.  This role has the necessary permissions to manage application groups within a delivery group 1 .

 According to the  Policies  page of Citrix Virtual Apps and Desktops 7 2308 documentation, Classic policies are a collection of settings that define how sessions, bandwidth, and security are managed for a group of users, devices, or connection types. You can apply policy settings to physical and virtual machines or to users. Classic policies can be filtered by various criteria, such as  HTTP ,  IP , and  TCP . These are the only options allowed when using Classic policies. Other options, such as  CLIENT ,  SERVER , and  DNS , are not valid filters for Classic policies.

A SSL profile is a collection of SSL settings that define the SSL behavior of a virtual server.  A Citrix Administrator can use SSL profiles to apply the same SSL settings to multiple SSL virtual servers, which simplifies the configuration and management of SSL parameters 1 .

1 :  SSL Profiles

According to the Citrix documentation 1 , Citrix Workspace app for Windows supports both  pass-through authentication  and  session pre-launch  features, which are required by the management in this scenario. Pass-through authentication allows users to log on to the Citrix Workspace app without entering their credentials, and session pre-launch enables sessions to be started in the background before users request them. The other options do not support both of these features.

1 :  Citrix Workspace app 2309.1 for Windows - Citrix

 Application Prelaunch is a feature that can be enabled to reduce the perceived start time of applications.  It prelaunches an application session when the user logs on, so the application is ready when the user needs it, thus reducing the wait time during the initial access

The “Limit Visibility” option allows a Citrix Administrator to hide a published application on Citrix Workspace app for specified users or groups within a delivery group.  This option can be configured in the application properties in Citrix Studio 1 2 3  or using PowerShell commands 4 . This option does not affect the other choices.

 To ensure the line-of-business application is added to Favorites and users cannot remove it, the Citrix Administrator should add the phrase “KEYWORDS: Mandatory” to the application properties 3 .

 According to the Citrix Virtual Apps and Desktops 7 Deployment and Administration course, one of the methods to configure the Citrix Workspace app is to use a Group Policy Template File. This file contains the settings that can be applied to the Citrix Workspace app through Active Directory Group Policy.  This method allows the administrator to specify the server address and other settings for the users, so they do not have to remember or enter them manually 1

1 :  2  - Configuring Citrix Workspace app using Group Policy Template File.

Citrix Director includes application probing and health monitoring that categorizes issues into:

Warnings

Faults

Failures

According to Citrix’s monitoring definitions:

✔ An Application Fault refers to a failure that impacts functionality or causes loss of service or data.

Specifically, a fault indicates that the application:

Has experienced a significant failure

Cannot provide expected functionality

Has recorded an event indicating a serious problem

Needs administrative attention

This differs from:

Warnings (A) — non-critical issues that might lead to problems

Application unavailable (C) — a condition caused by machine/host failure

Probe failures (D) — failures detected through scheduled application probes and classified differently

Therefore, an Application Fault directly relates to loss of functionality or data , making B correct.

Documentation References

Citrix Director Monitoring Guide → Application Health States

Citrix Application Probing Documentation → Fault vs Warning Definitions

Citrix HDX Insight (part of Citrix ADM / NetScaler MAS) provides deep ICA and HDX analytics , especially for users connecting through NetScaler Gateway . It is the only Citrix tool that delivers:

Per-user ICA round-trip time

Network latency and jitter

Throughput and bandwidth usage

Packet loss

Channel-level analytics (Thinwire, audio, printing, etc.)

Gateway-level connection health

Historical and real-time ICA flow data

This makes it the correct tool for troubleshooting ICA latency specifically for external users entering through NetScaler Gateway .

Why the other options are incorrect:

Citrix Diagnostic Toolkit (B): Contains utilities like CDFControl—useful for deep log capture, but not for network analytics.

Configuration Logging (C): Tracks administrative changes, not network performance.

Citrix Scout (D): Gathers system logs for support, not real-time or historical ICA network metrics.

Documentation References

Citrix HDX Insight Overview

Citrix ADM / MAS Network Analytics for ICA

NetScaler Gateway Integration with Director for HDX Visibility