1Y0-301 · Question #38
Which two steps should a Citrix Engineer take to ensure that StoreFront traffic is encrypted? (Choose two.)
The correct answer is B. Modify the website bindings to use HTTPS. D. Import a certificate in the IIS Management console. Encrypting StoreFront web traffic requires both obtaining and importing an SSL certificate into IIS and then binding the site to use HTTPS, which together enable TLS for client-to-StoreFront communication.
Question
Which two steps should a Citrix Engineer take to ensure that StoreFront traffic is encrypted? (Choose two.)
Options
- AEnable SecureICA for the virtual desktops.
- BModify the website bindings to use HTTPS.
- CConfigure NetScaler Gateway for ICA proxy.
- DImport a certificate in the IIS Management console.
How the community answered
(64 responses)- A19% (12)
- B72% (46)
- C9% (6)
Why each option
Encrypting StoreFront web traffic requires both obtaining and importing an SSL certificate into IIS and then binding the site to use HTTPS, which together enable TLS for client-to-StoreFront communication.
SecureICA encrypts the ICA protocol stream between the Citrix client and the VDA, not the HTTP/HTTPS traffic between the user's browser and the StoreFront server.
Modifying the IIS website bindings to use HTTPS is required to instruct IIS to serve StoreFront over TLS instead of plain HTTP, directly encrypting browser-to-StoreFront traffic.
Configuring NetScaler Gateway for ICA proxy enables external users to tunnel ICA sessions through the Gateway, but it does not by itself encrypt StoreFront web traffic.
Importing a trusted SSL certificate into the IIS Management console is the prerequisite step that provides the certificate IIS will present during the TLS handshake when the HTTPS binding is active.
Concept tested: StoreFront SSL/TLS configuration using IIS certificate and HTTPS binding
Source: https://docs.citrix.com/en-us/storefront/current-release/secure/certificate.html
Topics
Community Discussion
No community discussion yet for this question.