nerdexam
Citrix

1Y0-250 · Question #1

Scenario: An administrator is implementing a two-factor authentication solution with an RSA SecureID product. The administrator already has the server name and port number of the RSA server. Which…

The correct answer is D. RADIUS shared secret. See the full explanation below for the reasoning.

Question

Scenario: An administrator is implementing a two-factor authentication solution with an RSA SecureID product. The administrator already has the server name and port number of the RSA server. Which additional information does the administrator need to configure RSA SecureID?

Options

  • ALDAP password
  • BFirewall access rule
  • CAuthentication policy
  • DRADIUS shared secret

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    4% (1)
  • D
    83% (20)

Community Discussion

6
Kemal J.Kemal J.Mar 22, 2026

D is your answer. The RADIUS shared secret is the shared password between the Citrix gateway and the RSA RADIUS server that authenticates the two devices to each other, and without it the gateway cannot talk to RSA no matter how correctly you have the server name and port configured.

25
Hiroshi T.Hiroshi T.Mar 25, 2026

D is correct, the RADIUS shared secret authenticates the client-server communication channel.

5
Carlos M.Carlos M.Mar 16, 2026

D is right. When integrating RSA SecurID with a RADIUS-based setup, the shared secret is what authenticates the communication between the NAS client and the RADIUS server, and without it the two devices will not trust each other regardless of whether you have the server name and port already configured.

4
Dervla O.Dervla O.Apr 7, 2026

C pulls a lot of people because authentication policy sounds like the logical next step after server config, but the stem is asking what you need to complete the RSA server configuration itself, not what comes after it. The RADIUS shared secret is the credential that lets the appliance authenticate to the RSA server, and without it the connection cannot be established regardless of what policies you layer on top, so D is the only answer that fills the actual gap the stem describes.

4
Kemal J.Kemal J.Apr 9, 2026

The shared secret point is solid, but worth adding that if the secret is mismatched rather than missing entirely, you get a silent failure that CDF traces will show as a UDP timeout rather than an auth rejection, which trips up a lot of people diagnosing this in the real world.

0
Yusuf A.Yusuf A.Apr 13, 2026

I actually picked C at first because I thought you needed an auth policy to tie the whole thing together, but then I remembered my senior showing me the RSA setup screen and pointing out that without the RADIUS shared secret the Citrix server and the RSA server cannot even authenticate each other, so the shared secret has to come before any policy decisions.

0
Full 1Y0-250 Practice