Library LAN thin clients sit on the trusted civic network, while remote park rangers work from untrusted home ISPs. How should Horizon access paths differ?
Select an answer to reveal the explanation.
Short Explanation
Same product family, two driveways: library LAN clients can pull up to the broker VIP, while rangers on a coffee-shop ISP must use the UAG gate. Do not hang Connection Server on the internet just to keep the paths identical.
Full Explanation
UAG is required for untrusted/remote networks so Connection Servers stay off the internet. Internal trusted clients commonly connect to a Connection Server or broker load-balancer VIP and may skip UAG. Horizon Client on a LAN can reach the broker; exposing Connection Server publicly is the anti-pattern UAG exists to prevent. NSX overlay and Workspace ONE Tunnel are not the Horizon remote-access path on this exam.