1Y0-204 Architecture Practice Question
A Citrix architect is designing a new Virtual Apps and Desktops environment. The security team requires that all external users authenticate using smart cards before they can access any published applications. The architect must ensure that the smart card credentials are passed through to the published applications for single sign-on. Which Citrix component should the architect configure to meet these requirements?
⚠ Common exam trap
Candidates often confuse smart card redirection within a session with smart card authentication at the access layer; only Citrix Gateway can perform the initial smart card authentication and pass-through for SSO.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Citrix Gateway with smart card authentication and pass-through
Citrix Gateway is the component that handles external authentication and can be configured for smart card authentication with pass-through. This allows users to authenticate once at the Gateway and have their credentials passed to the published applications, enabling single sign-on. The other components either secure internal communication or handle redirection within a session, but they do not provide the required external smart card authentication and SSO.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Delivery Controller with XML service SSL
Why it's wrong here
The XML service on the Delivery Controller handles brokering requests from StoreFront, but it does not perform smart card authentication or pass-through. SSL on the XML service secures communication between StoreFront and the Controller, but it is not related to user authentication methods. Smart card requirements are handled at the access layer, not the brokering layer.
- ✓
Citrix Gateway with smart card authentication and pass-through
Why this is correct
Citrix Gateway supports smart card authentication and can pass the smart card credentials through to the published applications. This enables single sign-on, so users do not have to re-authenticate when launching applications. The Gateway acts as the secure entry point, validates the smart card certificate, and then forwards the credentials to the VDAs. This meets both the security and SSO requirements.
- ✗
VDA with registry-based smart card redirection
Why it's wrong here
The VDA can redirect smart cards from the client device to the session, but this is for using smart cards within the session, not for authentication to Citrix. Authentication happens before a session is established. While the VDA can be configured for smart card redirection, it does not provide the initial authentication or the pass-through of credentials for SSO. The access layer component is responsible for that.
- ✗
StoreFront with Kerberos constrained delegation
Why it's wrong here
Kerberos constrained delegation is used for single sign-on from StoreFront to the Delivery Controller, not for smart card authentication. It allows StoreFront to impersonate the user when contacting the Controller, but it does not handle smart card credential validation or pass-through to published applications. Smart card authentication requires a component that can read and forward the certificate.
About these practice questions
One of 216 original 1Y0-204 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-204 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-204 exam.