OCE-H Sample Questions & Answers
Revolves around planning and installing connection and access servers with Active Directory tied in, the top-weighted piece, troubleshooting tough VDI problems, running desktop and app pools, SSL certificates, scaling with Cloud Pod Architecture, and disaster recovery.
Launch the full OCE-H simulator →Showing 8 of 16 free samples.
- Question 1Intermediate
Troubleshooting · Troubleshoot and resolve complex VDI issues
A user attempts to connect to a desktop remotely via the Unified Access Gateway (UAG). They authenticate successfully, but when they click the desktop icon, the screen remains black for 10 seconds and then disconnects.
Which network flow is most likely blocked?
Show answer & explanation
Correct answer: C
Authentication and brokering use HTTPS 443, so they succeed. The display protocol session then opens: Blast Extreme uses TCP/UDP 8443 from client to UAG and TCP/UDP 22443 from UAG to the agent; PCoIP uses TCP/UDP 4172 on both legs. If these flows are blocked, the user sees a black screen until the session times out.
- Question 2Advanced
Troubleshooting · Troubleshoot and resolve complex VDI issues
You are troubleshooting an Instant Clone pool where provisioning has halted. In the Horizon Console, the error displayed is
VC_FAULT_FATAL: The name 'Win10-IC-1' already exists.What is the most effective immediate remediation step?
Show answer & explanation
Correct answer: A
The fault means vCenter already has an object with the name Horizon is trying to create, usually a stale VM left from an earlier failed operation. Remove the stale VM in vCenter (and its stale AD computer account), then remove the stuck machine in Horizon Console so provisioning can retry with the name.
- Question 3Intermediate
Troubleshooting · Troubleshoot boot and logon storms
Case Study Scenario:
Incident:
Users across the organization are reporting that logon times have increased from 30 seconds to over 3 minutes this morning.Observation:
- The 'Interactive Session' phase is normal.
- The 'Profile Load' phase is taking 150 seconds.
- DEM logs show 'Slow network' warnings.
Environment:
- DEM config share is on a Windows File Server.
- 5000 users logging in between 8:00 AM and 9:00 AM.
Question:
Which infrastructure component is the most likely bottleneck causing this 'Logon Storm' impact?Show answer & explanation
Correct answer: D
During a logon storm, thousands of users simultaneously request their profile configuration files (DEM) and profile archives. If the backend SMB file server cannot handle the IOPS or network throughput, the 'Profile Load' phase will stall, causing the symptoms described.
- Question 4Intermediate
Security and Compliance · Implement SSL certificates and MFA
Which component is responsible for authenticating the user against Active Directory when 'Log in as current user' is selected in the Horizon Client?
Show answer & explanation
Correct answer: D
'Log in as current user' utilizes Kerberos. The Horizon Client obtains a ticket-granting ticket (TGT) from the local OS and passes it to the Connection Server, which validates it against AD without prompting for a password.
- Question 5Advanced
Security and Compliance · Implement SSL certificates and MFA
You want a desktop pool to be reachable only through the Connection Servers that serve internal users, so that users who connect through the externally facing Connection Servers cannot see it.
Which feature are you configuring?
Show answer & explanation
Correct answer: C
Connection Server restrictions (restricted entitlements) use tags: tag the internal Connection Servers (e.g., "Internal") in Horizon Console, then select that tag in the pool's or global entitlement's Connection Server restrictions. The resource is then only accessible through Connection Servers with that tag. vdmadmin -Q is unrelated (it manages kiosk-mode client accounts).
- Question 6Intermediate
Infrastructure Planning and Management · Horizon Platform Upgrade
An administrator needs to perform maintenance on a Connection Server and wants to ensure no new sessions are brokered to it, but existing sessions remain active until users log off.
What is the correct procedure?
Show answer & explanation
Correct answer: D
Disabling the Connection Server in the console prevents it from accepting new connections or brokering new sessions. Existing established sessions (tunneled or direct) will typically persist until the user disconnects or the service is stopped.
- Question 7Intermediate
Monitoring and Optimization · Integrate with Omnissa Intelligence
What is the primary role of the Experience Management (DEEM) telemetry agent installed on Horizon virtual desktops that are integrated with Omnissa Intelligence?
Show answer & explanation
Correct answer: C
Experience Management (DEEM) for Horizon uses a separate Experience Management (telemetry) agent, installed on the Horizon VM alongside the Horizon Agent. It gathers an expanded set of telemetry from the guest OS (for example boot and logon times, application launches and crashes, resource usage) and sends it through the Horizon Edge Gateway to Omnissa Intelligence for experience scoring. Last-mile network telemetry such as Wi-Fi and LAN/WAN latency is collected by the Experience Management agent installed with Horizon Client.
- Question 8Intermediate
Infrastructure Planning and Management · Horizon Platform Upgrade
You are upgrading a Horizon 7.13 environment to Horizon 8 (2312). Which component must be upgraded LAST to ensure compatibility during the transition period?
Show answer & explanation
Correct answer: C
The Horizon 8 upgrade overview order is: Horizon Clients, then back up and upgrade all Connection Servers in the replicated group, then Horizon Edge, then Group Policy templates, then vCenter Server and ESXi (if upgrading vSphere), then RDS hosts and Horizon Agents in desktops and golden images. The Horizon Agent is therefore upgraded after the servers and vCenter, so of the listed components it is upgraded last.
Ready for the real thing?
The full OCE-H simulator has every exam-style question, timed mode, and instant scoring.