1Y0-300 · Question #37
Which two steps should a Citrix Engineer perform to confirm that SSL is configured correctly on the IIS server for Citrix Director? (Choose two.)
The correct answer is A. Set UI.EnableSslCheck to true in IIS under application settings. D. Verify that the SSL certificate is bound to the Citrix Director Site in the IIS management. See the full explanation below for the reasoning.
Question
Which two steps should a Citrix Engineer perform to confirm that SSL is configured correctly on the IIS server for Citrix Director? (Choose two.)
Options
- ASet UI.EnableSslCheck to true in IIS under application settings.
- BSet UI.EnableSslCheck to false in IIS under application settings.
- CVerify that the SSL certificate is bound to the application pool in the IIS management console.
- DVerify that the SSL certificate is bound to the Citrix Director Site in the IIS management
How the community answered
(45 responses)- A84% (38)
- B4% (2)
- C11% (5)
Community Discussion
6
Grace U.Apr 13, 2026The correct answers are A and D, and once you understand what each setting actually does, the wrong choices fall away pretty naturally. Setting UI.EnableSslCheck to true in the IIS application settings is what tells Director to actively enforce and verify the SSL connection, so without that being true, the check is not even happening. Verifying that the SSL certificate is bound to the Citrix Director Site in IIS is the other half of the picture, because a certificate has to be tied to the site itself, not the application pool, which is what makes C a trap for people who are fuzzy on IIS architecture. Option B is essentially the opposite of what you want, since setting that flag to false disables the check entirely, which would confirm nothing and actually hide a misconfiguration.
Nina C.Apr 29, 2026Saw this one on my actual exam last week and almost picked B by accident because I read "false" too fast. The two you need are A and D, enable the SSL check and confirm the cert is bound to the Director site itself, not the app pool. C is the trap answer they want you to grab.
Jovan I.Apr 24, 2026A and D, though C is the classic trap since certs bind to sites, not app pools.
Toby R.Apr 25, 2026C being the trap is spot on, but worth noting the real gotcha is that if you have multiple sites sharing the same app pool, removing the cert from one IIS binding does not pull it from the others, so test your cleanup steps in a lab first.
Toby R.May 11, 2026B and D, saw this exact wording on my exam.
Grace U.May 13, 2026Toby, the "exact wording" memory can trip us up here, because A and D are the correct pair. A covers the case where the source is directly reachable and D covers the fallback path, so you need both to account for all the routing scenarios the question is testing.