Licensing clerks on the city LAN reach Horizon desktops without traversing the DMZ, while field inspectors on home broadband must not talk to Connection Server directly. Which access-path split should the operator describe?
Select an answer to reveal the explanation.
Short Explanation
Picture city hall as a courthouse with a public lobby and a staff hallway: inspectors use the lobby (Unified Access Gateway in the DMZ) while clerks already inside use the hallway to Connection Server on the LAN. Same Horizon pod, two doors. Tunnel and NSX are different products, and hanging Connection Server on the internet is the pattern this exam wants refused.
Full Explanation
Licensing clerks on the city LAN reach Connection Server directly, while remote field inspectors must connect through Unified Access Gateway in the DMZ—that internal-versus-remote access-path split is the correct design. In municipal EUC terms, treat the endpoint as a window into city systems when the architecture says so, not as the system of record for the files or apps in the stem. Distractor concept: Placing Connection Server in the DMZ so everyone shares one internet hostname exposes the broker unnecessarily. Distractor concept: Installing Workspace ONE Tunnel on every inspector laptop and skipping Horizon access appliances does not replace the standard UAG remote path for Horizon. Distractor concept: Publishing the 311 pool through an NSX load balancer instead of a Horizon gateway misassigns the secure remote access role. Exam caveat: Internal users → Connection Server; external users → UAG in DMZ is the classic associate access split. Operational check: From a LAN clerk PC hit Connection Server; from an external test client hit only the UAG VIP, and confirm Connection Server is not internet-facing. Record the chosen control and the rejected failure modes in the civic change ticket or runbook so on-call staff and auditors share the same rationale after the next maintenance window. Re-validate after personnel or image changes that the same control still meets the city's continuity, security, and support expectations for this service.