1Y0-312 Advanced Security and Access Control Practice Question
An administrator is configuring Citrix StoreFront to use HTTPS for all communications. The security team requires that the StoreFront server uses a certificate that is trusted by all user devices. The administrator has obtained a certificate from a public CA and installed it on the StoreFront server. Which StoreFront configuration must be updated to bind the certificate to the IIS website?
⚠ Common exam trap
The trap here is assuming that StoreFront management console or PowerShell cmdlets handle certificate binding, when it is actually an IIS configuration task.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In IIS Manager, edit the bindings for the StoreFront website and add an HTTPS binding with the certificate.
Binding an SSL certificate to the StoreFront website is done in IIS Manager by editing the site bindings and adding an HTTPS binding with the desired certificate. This ensures that the website presents the correct certificate to clients. Other options either set URLs or manage services but do not perform the actual binding. Without the IIS binding, HTTPS will not function correctly, and users may see certificate errors.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure the StoreFront server to use the certificate in the Citrix Delivery Services console.
Why it's wrong here
The Citrix Delivery Services console is used to manage stores and servers, but it does not handle IIS certificate bindings. Certificate binding is an IIS-level configuration. Using this console to manage certificates is not applicable and will not bind the certificate to the website. The administrator must use IIS Manager or PowerShell commands like New-WebBinding to bind the certificate.
- ✗
Run the PowerShell cmdlet Set-STFWebReceiverService with the -HttpsPort parameter.
Why it's wrong here
The Set-STFWebReceiverService cmdlet configures the web receiver service, but it does not bind an SSL certificate to the IIS website. The -HttpsPort parameter sets the port for HTTPS but relies on IIS having a valid certificate binding. This cmdlet alone will not ensure the certificate is used; the binding must be configured in IIS.
- ✓
In IIS Manager, edit the bindings for the StoreFront website and add an HTTPS binding with the certificate.
Why this is correct
IIS Manager is the correct tool to bind an SSL certificate to a website. By adding an HTTPS binding and selecting the installed certificate, the StoreFront website will use that certificate for TLS connections. This ensures that user devices trust the certificate, as it is from a public CA. This step is essential for secure HTTPS communication and is a standard configuration for StoreFront.
- ✗
Use the StoreFront management console to change the base URL to HTTPS.
Why it's wrong here
Changing the base URL to HTTPS ensures that StoreFront generates URLs with HTTPS, but it does not bind the certificate to the IIS website. The certificate binding is done in IIS Manager or via PowerShell. Without the correct binding, HTTPS connections will fail or use a default certificate. This step is necessary but not sufficient for secure HTTPS communication.
About these practice questions
One of 186 original 1Y0-312 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Citrix exam blueprint
This 1Y0-312 practice question is part of Courseiva's free Citrix certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Y0-312 exam.