UIAAAV1 · Question #16
Scenario: A Citrix Administrator is enabling TLS Secure connections between the Cloud Connectors and on-premises StoreFront. After configuring the TLS certificate on all Cloud Connectors and…
The correct answer is C. Configure Cloud Connectors to allow unsecured connections. Option C is correct because in Citrix Cloud architecture, on-premises StoreFront communicates with Cloud Connectors via the XML service using HTTP by default for resource enumeration. When the administrator disabled HTTP connections on the Cloud Connectors, that XML enumeration…
Question
Scenario: A Citrix Administrator is enabling TLS Secure connections between the Cloud Connectors and on-premises StoreFront. After configuring the TLS certificate on all Cloud Connectors and disabling HTTP connections, the administrator finds that no resources are being enumerated. Which extra step does the administrator need to take to allow enumeration to work between on- premises StoreFront and Citrix Cloud?
Options
- AConfigure Internet Information Services (IIS) on the StoreFront server to use HTTPS.
- BChange transport type to HTTPS in the StoreFront store DDC list.
- CConfigure Cloud Connectors to allow unsecured connections.
- DInstall Internet Information Services (IIS) on the Cloud Connector.
How the community answered
(24 responses)- A8% (2)
- B17% (4)
- C67% (16)
- D8% (2)
Explanation
Option C is correct because in Citrix Cloud architecture, on-premises StoreFront communicates with Cloud Connectors via the XML service using HTTP by default for resource enumeration. When the administrator disabled HTTP connections on the Cloud Connectors, that XML enumeration channel was severed - the Cloud Connectors began refusing StoreFront's requests entirely. Allowing unsecured connections on the Cloud Connectors restores that enumeration path without requiring StoreFront reconfiguration.
Why the distractors are wrong:
- A - IIS on StoreFront already supports HTTPS natively; configuring it for HTTPS doesn't fix the Cloud Connector side refusing StoreFront's enumeration requests.
- B - Changing the transport to HTTPS in the StoreFront DDC list changes how StoreFront sends requests, but the root issue is that the Cloud Connectors are rejecting HTTP connections; this alone doesn't resolve the broken channel (and would require additional certificate trust setup on StoreFront).
- D - Cloud Connectors do not use IIS; they run their own internal service stack, so installing IIS on them is irrelevant.
Memory tip: Think of it as a two-lane road - TLS secures the Cloud Connector-to-Citrix-Cloud control lane, but StoreFront drives in the XML enumeration lane. Disabling HTTP closed that lane too. You must tell the Cloud Connector: "still allow traffic in the StoreFront lane" - that's allowing unsecured connections.
Topics
Community Discussion
No community discussion yet for this question.