A Citrix Administrator configured a Citrix Gateway virtual server for authentication, but there is no authentication policy bound to the virtual server. Which authentication binding point will the…

Question

Options

• AOverride global
• BGroup
• CDefault global
• DUser

• B
  2% (1)
• C
  4% (2)
• D
  94% (48)

Explanation

When no authentication policy is bound to the Citrix Gateway virtual server, the ADC moves down its binding hierarchy to the User level next. Citrix ADC evaluates authentication policies in this fixed order: Override Global → Virtual Server → User → Group → Default Global - so User is the immediate next stop after a virtual server with no policy.

Why the distractors are wrong:

• A (Override Global): This binding point is evaluated before the virtual server, not after - it would have already been processed.
• B (Group): Group comes after User in the hierarchy; it is not the next step following the virtual server.
• C (Default Global): This is the lowest-priority fallback, evaluated only when no other binding point yields a policy - it is last, not second.

Memory tip: Use the acronym "OV-U-G-D" - "Old Veterans Usually Go Downtown" - to remember the order: Override Global → Virtual Server → User → Group → Default Global. If the VS has nothing, slide one step right to User.

No community discussion yet for this question.