Which type of policy should a Citrix Administrator configure to ensure that only users who have data antivirus protection can connect to the environment?

• A. SmartControl
• B. Traffic
• C. SmartAccess
• D. Pre-Authentication Scan

Answer: (D)

Requiring an endpoint to meet a security posture before granting access is enforced through a pre-authentication check at the gateway. A Pre-Authentication Scan policy runs before the user is asked to sign in, evaluating the device’s state to ensure it complies with security requirements—such as having antivirus protection installed and up to date. If the device passes, the user can proceed to authenticate and connect; if not, access is blocked or redirected for remediation. This gating guarantees that only devices meeting the antivirus criterion can reach the environment.

Other policy types focus on post-authentication behavior or traffic handling rather than gating access by endpoint posture. SmartAccess, SmartControl, and traffic policies deal with how access is granted or what happens after login, or how traffic is treated, rather than verifying antivirus presence before authentication.