1Y0-312 Advanced Security and Access Control Practice Question
A Citrix Administrator is configuring a Citrix Gateway to provide secure remote access to published applications. The administrator wants to implement SmartAccess to control access based on endpoint analysis results. Which two components are required to enable SmartAccess with EPA? (Choose two.)
⚠ Common exam trap
The trap here is assuming that StoreFront SmartAccess filters are required for EPA, when in fact they are optional for resource filtering.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
EPA scan configured on Citrix Gateway.
SmartAccess with EPA requires the Citrix Gateway plug-in to perform endpoint analysis and an EPA scan configured on Citrix Gateway to define the checks. These two components work together to evaluate endpoint compliance and enforce access policies. StoreFront filters, FIPS mode, and Delivery Controller configuration are not required for EPA itself. Thus, the plug-in and EPA scan are the correct components.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
EPA scan configured on Citrix Gateway.
Why this is correct
An EPA scan must be configured on Citrix Gateway to define the checks that the plug-in performs on the endpoint. These scans evaluate criteria like OS version, antivirus status, and registry keys. The scan results are then used in SmartAccess policies to allow or deny access. Without an EPA scan, SmartAccess cannot enforce endpoint compliance, making this a required component.
- ✗
Citrix ADC FIPS mode enabled.
Why it's wrong here
FIPS mode on Citrix ADC enforces the use of FIPS 140-2 validated cryptography for secure communications but is not related to EPA or SmartAccess functionality. While it may be required for compliance, it does not enable EPA scans or endpoint analysis. Thus, it is not a required component for implementing SmartAccess with EPA in this scenario.
- ✗
Delivery Controller configured for SmartAccess.
Why it's wrong here
The Delivery Controller does not need specific configuration for SmartAccess with EPA. SmartAccess policies are evaluated on Citrix Gateway, and the results are passed to the Controller via session policies. The Controller simply receives the filtered resource list. Therefore, configuring the Controller for SmartAccess is not a required step to enable EPA-based access control.
- ✓
Citrix Gateway plug-in installed on the user device.
Why this is correct
The Citrix Gateway plug-in is required for EPA because it performs the endpoint analysis on the user device, checking for antivirus, firewall, and other security requirements. Without the plug-in, EPA cannot run, and SmartAccess policies based on EPA results cannot be applied. Thus, this component is essential for implementing SmartAccess with EPA in this scenario.
- ✗
StoreFront configured with SmartAccess filters.
Why it's wrong here
StoreFront can use SmartAccess filters to control resource enumeration based on Gateway session policies, but it is not a component required for EPA itself. EPA is performed by the Gateway plug-in, and the results are used by Gateway policies. StoreFront filters are optional for granular access control but not mandatory for basic SmartAccess with EPA. Therefore, this is not a required component.
About these practice questions
Courseiva writes every 1Y0-312 question from scratch — 186 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-312 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-312 exam.