1Y0-204 Site Deployment and Configuration Practice Question
A Citrix administrator is configuring a new Citrix Virtual Apps and Desktops 7 Site. The security team requires all communication between the Delivery Controllers and the Site database to be encrypted. The database is Microsoft SQL Server 2017 with a valid certificate installed. Which action should the administrator take to meet this requirement?
⚠ Common exam trap
The trap here is assuming that Citrix Studio provides a setting to encrypt database traffic, when in fact encryption is enforced at the SQL Server level.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable SQL Server Force Encryption on the database server and ensure the Delivery Controllers trust the certificate.
To encrypt all traffic between Delivery Controllers and the SQL database, the administrator should enable Force Encryption on the SQL Server instance. This forces SSL/TLS for all connections, and the Controllers must trust the certificate. This approach satisfies the security requirement without additional Citrix configuration, as the encryption is handled at the database layer and Citrix services will automatically use it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable TLS 1.2 on the Delivery Controllers and set the SQL connection string to use Encrypt=True.
Why it's wrong here
While enabling TLS 1.2 on the Controllers is good practice, Citrix Studio does not expose a connection string property to set Encrypt=True. The encryption must be enforced on the SQL Server side or via a connection string in the registry, but the standard method is to configure Force Encryption on SQL Server. This option is incomplete and not directly configurable in the Citrix interface.
- ✗
Install and configure Citrix ADC to perform SSL offloading for database traffic.
Why it's wrong here
Citrix ADC is used for load balancing and SSL offloading of client and VDA traffic, not for encrypting traffic between Delivery Controllers and the SQL database. Database connections are direct from the Controllers to SQL Server; inserting an ADC would not encrypt that traffic and is not a supported configuration for this purpose.
- ✗
Configure the Delivery Controllers to use Windows Integrated Authentication for database connections.
Why it's wrong here
Windows Integrated Authentication controls how the Delivery Controllers authenticate to the database, not whether the connection is encrypted. While it can be part of a secure configuration, it does not encrypt the data in transit. The security team's requirement specifically calls for encryption, so this alone does not satisfy the requirement.
- ✓
Enable SQL Server Force Encryption on the database server and ensure the Delivery Controllers trust the certificate.
Why this is correct
Enabling Force Encryption on the SQL Server instance forces all connections to use SSL/TLS, and the Delivery Controllers must trust the certificate to establish encrypted connections. This meets the security requirement without additional Citrix configuration because the encryption is handled at the SQL Server layer, and Citrix services will automatically use it once the certificate is trusted.
About these practice questions
This 1Y0-204 question is part of Courseiva's 216-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-204 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-204 exam.