Question 1
A financial services firm is deploying a new Horizon 8 environment. A key security requirement is that all external connections must be authenticated via a SAML 2.0 identity provider (IdP) and must not expose the internal Active Directory domain structure to the internet. Which component is specifically designed to function as a secure proxy and authentication bridge in the DMZ to meet this requirement?
Answer and explanation
Correct answer: B
The VMware Unified Access Gateway (UAG) is a hardened Linux appliance designed to be placed in a DMZ. It acts as a secure proxy for Horizon traffic and can be configured to delegate authentication to third-party identity providers using SAML, RADIUS, and other methods, thus preventing direct exposure of internal resources like Connection Servers and Active Directory.