Complete 1Y0-204 Citrix Materials

When StoreFront must integrate with a third-party portal, the portal typically acts as the external system that captures user credentials, handles primary authentication, and then passes those credentials (usually via HTTP headers or basic authentication mechanisms) to StoreFront.

Citrix documentation notes that HTTP Basic authentication is the method suited for integrations where StoreFront must accept credentials from an external portal or non-Citrix authentication framework. This method allows StoreFront to validate credentials passed programmatically from the third-party system.

Why not the other options?

Unauthenticated: This provides anonymous access and does not support integration with authenticated external portals.

Domain pass-through: Requires a Windows-integrated authentication flow, not compatible with third-party portals.

Pass-through from NetScaler Gateway: This applies only when authentication is performed via Citrix Gateway, not an external custom portal.

Therefore, HTTP Basic is the appropriate authentication method for third-party portal integration.

Documentation References:

StoreFront Authentication Methods Overview

StoreFront Third-Party Integration Scenarios (Authentication Requirements)

To secure XML traffic between StoreFront and Delivery Controllers, a Citrix Administrator must install a private server certificate on each Delivery Controller and bind the certificates to port 4431.

According to the Proxy modes | Citrix Secure Web Gateway 12.1 - NetScaler document, to configure a Content Switching virtual server for implementing the Citrix Secure Web Gateway in the transparent proxy mode, the command should be:

add cs vserver < name > PROXY < ipaddress > < port >

The document also provides an example of the command:

add cs vserver swgVS PROXY 192.168.10.1 80

Therefore, the correct answer is C, which matches the format and the example given in the document. The other options are incorrect because they either use asterisks (*) instead of an IP address, or they do not specify a port number.