1Y0-204 Secure Access Practice Question
A Citrix Administrator is deploying Citrix Gateway in a high-availability pair. The administrator wants to ensure that if the primary Gateway fails, the secondary Gateway takes over seamlessly without requiring users to re-authenticate. Which configuration should the administrator implement?
⚠ Common exam trap
Many exam-takers confuse Session Reliability (an HDX feature) with Stateful Connection Failover (a Gateway HA feature) because both aim to maintain sessions but operate at different layers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Stateful Connection Failover on the Citrix Gateway high-availability pair.
To avoid re-authentication during a Citrix Gateway high-availability failover, Stateful Connection Failover must be enabled. This feature synchronizes session information between the primary and secondary nodes, allowing existing authenticated sessions to continue on the secondary node if the primary fails. Other options do not replicate session state and thus would require users to log in again.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Session Reliability on the Citrix Gateway virtual server.
Why it's wrong here
Session Reliability is an HDX feature that keeps sessions active during network interruptions by buffering data. It does not replicate authentication state between Gateway nodes in a high-availability pair. Therefore, it does not prevent re-authentication upon failover; it only helps maintain the ICA session during brief network disruptions.
- ✗
Enable HTTP compression on the Citrix Gateway virtual server.
Why it's wrong here
HTTP compression reduces bandwidth usage by compressing HTTP responses. It has no relation to session persistence or failover. It does not replicate authentication state or maintain sessions across a high-availability failover. Thus, it does not meet the requirement of seamless failover without re-authentication.
- ✗
Configure a GSLB (Global Server Load Balancing) setup with persistence based on source IP.
Why it's wrong here
GSLB is used for load balancing across multiple data centers, not for high availability within a single data center. Source IP persistence ensures that a user connects to the same Gateway node, but it does not replicate session state. If the primary fails, the user would still need to re-authenticate when redirected to the secondary.
- ✓
Configure Stateful Connection Failover on the Citrix Gateway high-availability pair.
Why this is correct
Stateful Connection Failover maintains session state information between the primary and secondary Citrix Gateway nodes. When a failover occurs, existing sessions are preserved, and users do not need to re-authenticate. This is the correct configuration to achieve seamless failover for authenticated sessions.
About these practice questions
This 1Y0-204 question is part of Courseiva's 216-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-204 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-204 exam.