PracticeVideosBlogFlashcardsEspañol
All Practice Exams

100+ Free CC-CEM Practice Questions

Pass your Citrix Endpoint Management Certified (1Y0-170) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

What is the recommended approach to disable lost-device geolocation tracking once a device has been recovered?

A
B
C
D
to track
Same family resources

Explore More Citrix Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

Citrix CCA-AppDS App Delivery and Security Associate

Practice Questions

Citrix CCA-N Certified Associate Networking (1Y0-241)

Practice Questions

Citrix CCE-N Certified Expert Networking (1Y0-440)

Practice Questions

Citrix CCE-V Certified Expert Virtualization (1Y0-402)

Practice Questions

Citrix CCP-N (1Y0-341)

Practice Questions

Citrix CCP-V Certified Professional Virtualization

Practice Questions
2026 Statistics

Key Facts: CC-CEM Exam

1Y0-170

Citrix Exam Code

Citrix

$200

Exam Fee (USD)

Citrix 2026

3

Management Modes (MDM, MAM, MDM+MAM)

Citrix Endpoint Management docs

12 months

APNs Certificate Validity

Apple

Pearson VUE

Test Delivery

Citrix / Pearson VUE

CEM-205

Recommended Course

Citrix Training

CC-CEM (1Y0-170) is the Citrix-administered associate-level certification for Citrix Endpoint Management (formerly XenMobile). The exam tests architecture, enrollment, MDM/MAM device policies, MDX/Secure Hub workflows, NetScaler Gateway micro VPN, and ongoing compliance/troubleshooting. Candidates typically complete the CEM-205 Manage Citrix Endpoint Management course and have hands-on production experience.

Sample CC-CEM Practice Questions

Try these sample questions to test your CC-CEM exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which Citrix Endpoint Management (CEM) component is the on-device agent that initiates enrollment, displays the enterprise app store, and starts micro VPN connections to internal resources?
A.Citrix Workspace app
B.Secure Hub
C.Citrix ADC Gateway plug-in
D.MDX Toolkit
Explanation: Secure Hub is the mobile client that drives MDM enrollment, presents the enterprise app store, and triggers per-app micro VPN tunnels back through NetScaler Gateway to internal resources. It is required on iOS and Android for both MDM and MAM workflows.
2In a Citrix Endpoint Management Enterprise deployment, which two management functions are combined?
A.Mobile Device Management (MDM) and Mobile Application Management (MAM)
B.Mobile Threat Defense and Mobile Content Management
C.Identity Provider and Conditional Access
D.Content filtering and Endpoint Detection and Response
Explanation: Enterprise mode in CEM combines MDM (device-level configuration, restrictions, and inventory) with MAM (per-app containerization through MDX) so administrators can manage both the device and corporate apps within a single enrollment.
3A BYOD program needs to protect corporate email and documents inside MDX-wrapped apps without enrolling personal devices into device management. Which CEM mode best fits?
A.MDM only
B.MAM only (MAM-First)
C.Enterprise with mandatory MDM
D.Dedicated device mode
Explanation: MAM-only (sometimes called MAM-First) deployments protect corporate data inside MDX containers and Secure Hub without requiring device-level enrollment, which is the typical fit for unmanaged BYOD where users will not accept full MDM control.
4Which Citrix component is required in the resource location for MDX-wrapped mobile apps to reach internal HTTP and TCP resources through micro VPN?
A.Citrix Cloud Connector only
B.NetScaler Gateway
C.Citrix Federated Authentication Service
D.StoreFront
Explanation: Per-app micro VPN tunnels initiated by Secure Hub and MDX-wrapped apps terminate at NetScaler Gateway. CEM requires NetScaler Gateway in the resource location to broker access to internal line-of-business resources.
5Which certificate type must be uploaded to Citrix Endpoint Management before iOS devices can be enrolled and managed?
A.Apple Push Notification service (APNs) certificate
B.Apple Developer Enterprise Distribution certificate
C.Apple Worldwide Developer Relations (WWDR) intermediate
D.Apple Pay merchant certificate
Explanation: An APNs certificate is mandatory for managing iOS, iPadOS, macOS, and tvOS devices because Apple requires the MDM server to push commands through the Apple Push Notification service. CEM cannot enroll Apple devices without a valid APNs certificate.
6How often must the Apple Push Notification service (APNs) certificate be renewed for ongoing iOS management in CEM?
A.Every 90 days
B.Every year
C.Every two years
D.Every three years
Explanation: APNs certificates issued through the Apple Push Certificates Portal expire every 12 months. Administrators must renew the same certificate annually using the same Apple ID; letting it lapse breaks command delivery to all enrolled Apple devices.
7Which Apple service lets organizations pre-assign newly purchased corporate iPads to their MDM server so devices are supervised and auto-enrolled out of the box?
A.Apple Configurator 2
B.Apple Business Manager (ABM)
C.iCloud Family Sharing
D.Apple Volume Purchase Program legacy portal
Explanation: Apple Business Manager (ABM, and its education equivalent ASM) hosts Automated Device Enrollment. Devices purchased through approved resellers appear in ABM and are bound to the configured MDM server, enabling supervised, mandatory enrollment from first boot.
8Which Android Enterprise deployment mode is most appropriate for a personally owned phone that should keep the user's personal apps separate from corporate apps?
A.Fully Managed (Device Owner)
B.Work Profile (Profile Owner)
C.Dedicated Device (kiosk)
D.COPE legacy device admin
Explanation: Work Profile creates a managed container alongside the user's personal space. The administrator controls only the work profile, leaving personal apps and data outside CEM's reach, which is the supported BYOD model on Android Enterprise.
9How are public Android apps distributed to enrolled Android Enterprise devices through CEM?
A.By sideloading the APK from a web server
B.Through the managed Google Play store
C.Using the Apple Volume Purchase Program
D.By emailing the APK to users
Explanation: Android Enterprise integrates with managed Google Play. Administrators approve apps in managed Google Play, and CEM publishes them so they appear in the Play Store on the work profile or fully managed device for silent or user-driven install.
10What is the primary purpose of the MDX (Mobile Device eXperience) policy framework in Citrix Endpoint Management?
A.To replace the device's native operating system
B.To apply per-app security policies such as encryption, copy/paste control, and micro VPN to wrapped or SDK-enabled apps
C.To act as the iOS supervised configuration profile
D.To provide a hypervisor for mobile virtual machines
Explanation: MDX policies are the per-app rules CEM applies to MDX-wrapped or MDX-SDK apps. They control container behavior such as data encryption, clipboard isolation, Open In restrictions, and per-app micro VPN routing.

About the CC-CEM Exam

The Citrix Endpoint Management Certified (CC-CEM) credential, earned by passing the 1Y0-170 exam, validates an administrator's ability to manage a Citrix Endpoint Management deployment (formerly XenMobile). Topics include CEM architecture, NetScaler Gateway integration, mobile device and application management modes, enrollment workflows for Apple and Android Enterprise, MDX policies, and Secure Hub operations.

Questions

65 scored questions

Time Limit

~90 minutes

Passing Score

Determined by Citrix; not publicly listed

Exam Fee

$200 USD (Citrix (Cloud Software Group), delivered via Pearson VUE)

CC-CEM Exam Content Outline

~20%

CEM Architecture and Deployment

On-premises CEM versus Citrix Cloud-hosted CEM Service, multi-server clustering with a load balancer, Cloud Connector role, NetScaler Gateway placement, Active Directory and IdP integration, and RBAC.

~20%

Enrollment and Management Modes

Choosing MDM only, MAM only (MAM-First), or Enterprise (MDM+MAM); enrollment profiles; Apple ABM Automated Device Enrollment; Android Enterprise Work Profile, Fully Managed, and Dedicated; Windows Autopilot; macOS Setup Assistant.

~25%

Device Management and Policies

Passcode, restrictions, Wi-Fi (including 802.1X EAP-TLS), VPN, Exchange ActiveSync, credentials/SCEP, encryption, OS update, and platform-specific configuration for iOS, Android Enterprise, Windows 10/11, and macOS.

~20%

App Management with MDX

Citrix mobile productivity apps (Secure Hub, Secure Mail, Secure Web, Citrix Files); MDX policies for App Passcode, network access, Open In, container encryption; managed app configuration; and distribution of public, enterprise, and private apps via VPP/Apps and Books and managed Google Play.

~15%

Monitoring, Compliance, and Troubleshooting

Smart Actions, compliance rules (jailbreak/root, OS version, encryption), Self-Service Portal, dashboards, MTD integrations, ServiceNow integration, and CEM/Secure Hub/NetScaler micro VPN log analysis.

How to Pass the CC-CEM Exam

What You Need to Know

  • Passing score: Determined by Citrix; not publicly listed
  • Exam length: 65 questions
  • Time limit: ~90 minutes
  • Exam fee: $200 USD

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

CC-CEM Study Tips from Top Performers

1Build (or borrow lab access to) a CEM Service tenant or on-prem server, NetScaler Gateway, AD, and an APNs certificate to practice the workflow end to end.
2Memorize the prerequisites for NetScaler Gateway micro VPN: SmartAccess mode, Clientless Access ON with Clear URL Encoding, Secure Browse, and DNS suffix.
3Master the enrollment programs: Apple ABM Automated Device Enrollment, Android Enterprise (Work Profile, Fully Managed, Dedicated), Windows Autopilot, and macOS ADE.
4Drill the MDX policies that show up most: App Passcode, Network access, Open In/Document exchange, Block jailbroken or rooted devices, Online session required, Maximum offline period.
5Practice compliance scenarios: jailbreak/root detection, minimum OS version, encryption status, and Smart Actions (notify, mark out of compliance, selective wipe, full wipe).

Frequently Asked Questions

What does the Citrix CC-CEM 1Y0-170 exam cover?

The exam covers Citrix Endpoint Management architecture (on-prem and Citrix Cloud), management modes (MDM, MAM, Enterprise), enrollment for Apple and Android Enterprise, device and MDX policies, NetScaler Gateway micro VPN integration, and ongoing monitoring, compliance, and troubleshooting.

Is XenMobile the same as Citrix Endpoint Management?

Yes. XenMobile was renamed Citrix Endpoint Management. Most of the underlying concepts (Secure Hub, MDX policies, NetScaler Gateway micro VPN) carry over, although the cloud-hosted CEM Service and modern Apple/Google enrollment programs have evolved significantly.

What course does Citrix recommend for the 1Y0-170 exam?

Citrix recommends the CEM-205 Manage Citrix Endpoint Management course, plus hands-on administration of a CEM environment, before attempting 1Y0-170.

How much does the CC-CEM exam cost?

Citrix lists the exam fee at $200 USD (subject to local taxes and currency). Confirm the current price in your Pearson VUE Citrix profile before scheduling.

How is the CC-CEM exam delivered?

1Y0-170 is delivered through Pearson VUE, either at a physical test center or online via OnVUE remote proctoring, depending on availability and Pearson VUE policy in your region.

What management modes do I need to know for CC-CEM?

Be fluent in MDM only, MAM only (often called MAM-First), and Enterprise mode (MDM+MAM). Understand which mode fits BYOD, COPE, and corporate-owned/dedicated scenarios, and how enrollment profiles target them per platform.