IT management has announced all traffic from the DMZ will be blocked unless it passes through a newly configured proxy, effective immediately. Administrators notice that SEGv2 is unable to contact the Workspace ONE API Service in their SaaS environment.
Which configuration will the administrators need to amend and apply to the SEGv2 servers?

A. SSL offloading

B. outbound proxy

C. inbound proxy

D. KCD integration

When configuring a Certificate Authority in Workspace ONE, which three protocols are supported? (Choose three.)

A. ADCS

B. SCEP

C. EST

D. PKI

E. CMP

Which is true about Workspace ONE compatibility when deploying content across different device types?

A. Content cannot be distributed to iOS devices.

B. Content cannot be distributed by Workspace ONE.

C. Content can be distributed to devices types including iOS, Android, Windows, and MacOS.

D. Content can be distributed to devices types including iOS, Android, and Windows.

Which is used to authenticate and encrypt traffic from individual applications on compliant devices to internal resources?

A. VMware Tunnel

B. Device Compliance

C. Workspace ONE Intelligence

D. Email Notification Service

An administrator wants to leverage the Workspace ONE Web application to allow end-user credentials to be passed to specific internal sites.
Which security policy in Workspace ONE UEM must be configured?

A. Offline Access

B. Single Sign-On

C. Network Access Control

D. Integrated Authentication

As a Workspace ONE administrator, you have been tasked with creating a custom visualization for management that shows device statistics, trust network threats, and application adoption metrics in a single view.
Which feature of Workspace ONE can be used?

A. Workspace ONE Intelligence Dashboards

B. Workspace ONE Access Application View

C. Workspace ONE Intelligence Automations

D. Workspace ONE UEM Device List View

Which three are benefits of a Workspace ONE Content productivity application? (Choose three.)

A. Secure Document distribution and mobile access.

B. Protect certificate keychain from third party access.

C. Promote secure collaboration.

D. Promote Content Disaster Recovery.

E. Protect sensitive content in a corporate container.

F. Secure application distribution and mobile access.

Which three Workspace ONE Edge Services are included in Unified Access Gateway? (Choose three.)

A. AirWatch Cloud Connector

B. Content Gateway

C. Secure Email Gateway

D. Workspace ONE Intelligence Connector

E. VMware Tunnel

During an enrollment attempt, a user enters their email address in the initial field in the Intelligent Hub. The user receives an error stating, `Something went wrong with discovery`.
Which configuration setting can be enabled to allow end users to enter an email address instead of a Server URL?

A. Autodiscovery Enrollment

B. Pre-Register devices

C. Allow only known users

D. Enrollment Token

An organization has purchased a SaaS Workspace ONE solution and wants to implement these:
✑ integration with back-end resources like Active Directory from Microsoft to sync users and groups
✑ Kerberos authentication
✑ integration with Virtual Desktops and Applications from services (Horizon 7, Horizon Cloud, or Citrix)
✑ third party integration with RSA SecureID, RADIUS for authentication
Which Workspace ONE component is required?

A. VMware AirWatch Cloud Connector

B. VMware Workspace ONE Access Connector

C. VMware Workspace ONE Assist

D. VMware Workspace Unified Access Gateway

A Workspace ONE UEM administrator is migrating collections, applications, and policies from SCCM to Workspace ONE.
When using AirLift, which three of the following must the administrator allow AirLift to access on the ConfigMgr server? (Choose three.)

A. Port 443 or specified TLS port if Secure Connection is configured

B. WinRM port (typically 5985)

C. Port 3268 or the specified Global Catalog port

D. Port 389 for Active Directory

E. Interactive Login Permissions

For federal clients, FIPS 140-2 and AES 256-bit encryption are applied to which three areas? (Choose three.)

A. data in use

B. data in flying

C. data in pace

D. data in rest

E. data in transit

An administrator is tasked with determining the root cause for a recent outage where devices were not able to authenticate. An investigation revealed a single
AirWatch Cloud Connector (ACC) server that had a disk error which caused it to be completely unresponsive.
Which VMware resiliency recommendation would have prevented this outage?

A. High Availability

B. Disaster Recovery

C. Cloud Hosted ACC

D. Restart ACC

An administrator must ensure enrolled corporate owned Android Enterprise devices do not update during the holiday season.
Which is VMware's recommended best practice to accomplish this?

A. Deliver ‘System Updates’ profile with change freeze payload.

B. Deliver ‘System Updates’ profile that defers updates up to 30 days.

C. Deliver ‘Restrictions’ profile that disables chrome on devices.

D. Deliver ‘Restrictions’ profile that disables Play Store on devices.

Which feature of Workspace ONE UEM can be configured to allow reports to run on a schedule and have them delivered to a subset of administrators?

A. Windows Scheduled Tasks

B. Report Subscriptions

C. Timed Report Execution

D. SQL Server Reporting Services

An administrator would like to configure SSO for Workspace ONE UEM console login.
Which catalog setting from Workspace ONE Access need to be configured?

A. Web Apps

B. Virtual Apps

C. Hub Configuration

D. Hub Catalog

An administrator has received complaints from end-users not receiving consistent email notifications on their iOS devices. Email is configured on the end-users devices using only the VMware Boxer email client. Boxer is only configured from Workspace ONE to use Office 365.
What can the administrator do to resolve the inconsistent email notifications?

A. Configure VMware ENS v2 to provide consistent notification experience.

B. Configure SEG v2 to provide a better notification experience.

C. Configure Mobile SSO for VMware Boxer to prevent users from entering credentials.

D. Configure VPN tunnel with a Boxer configuration, so that it is able to connect to the internal network.

A customer is managing only iOS devices using Workspace ONE. They would like to begin managing Android devices.
What would be the first step an administrator needs to complete to begin managing Android Devices?

A. Download and deploy Workspace ONE Unified Access Gateway.

B. Complete Android EMM registration from Workspace One Console.

C. Download and deploy Workspace ONE Access Connectors for Android devices.

D. Configure a Workspace ONE AirLift Server-side Connector.

Which two settings are configurable in a macOS disk encryption profile? (Choose two.)

A. Recovery Key Type

B. Administrator Password Policy

C. TPM License Key

D. FileVault Enterprise Certificate

E. Maximum Battery Level

What component of the Hub Services can be integrated with Physical Access Control Systems to allow the Workspace ONE Intelligent app on mobile devices to act as digital badge?

A. Hub Employee Self-service

B. Hub Passport

C. Hub Catalog

D. Hub Access

When creating Workspace ONE Intelligence Dashboards, what helps visualize collected data?

A. Elements

B. Widgets

C. Gizmos

D. Snapshots

A company has purchased a Workspace ONE UEM SaaS environment and are planning the on-premises servers and services that will be required. A primary use case is allowing AD authenticated end users to access enterprise SharePoint documents through the Workspace ONE Content application.
Which two on-premises servers/services should the company plan for? (Choose two.)

A. Unified Access Gateway

B. Workspace ONE UEM API

C. Secure Email Gateway

D. AirWatch Cloud Connector

E. AirWatch Cloud Messaging

You are an administrator configuring custom reports in Workspace ONE Intelligence.
What is the maximum number of custom reports you can create per Organization Group (OG)?

A. 10

B. 50

C. 99

D. 500

What is the purpose of the Workspace ONE UEM Security Pin?

A. Serves as a second layer of security for administrators while preventing inadvertent commands.

B. Provides a second factor of authentication for administrators during console login.

C. Provides multi-factor authentication for users during device enrollment.

D. Serves as a second layer of security for end users while preventing inadvertent commands.

Which protocol does Workspace ONE use to communicate with third party Identity Providers?

A. SAML

B. Kerberos

C. RADIUS

D. OAuth

Which is used to configure the VMware Content Gateway service before adding it to the Unified Access Gateway?

A. Workspace ONE Access console

B. Workspace ONE UEM console

C. Workspace ONE Assist console

D. Workspace ONE Intelligence console

Which three can be used to enforce conditional access in Workspace ONE? (Choose three.)

A. device ownership type

B. device enrollment method

C. device platform

D. application specific

E. network range

F. user-based role

What two features of Hub Services can be enabled without enabling Workspace ONE Access and having the authentication mode set to Workspace ONE UEM?
(Choose two.)

A. enable SSO for applications

B. enable People Search

C. notifications for iOS and Android

D. Hub Virtual Assistant Chatbot

E. Hub Catalog layout

DRAG DROP -
Drag and drop the device operating system on the left into the box associated with its third party messaging solution.
Select and Place:
 

Which type of design is a diagram that includes network zones, network components, server locations, and hardware recommendations?

A. Physical

B. Logical

C. Theoretical

D. Conceptual

If an administrator wants to leverage ThinApp packaged applications integrated with Workspace ONE Access, which of the following is the proper connector version to use?

A. VMware Workspace ONE Access (Windows) version 20.10.0.1.

B. VMware Identity Manager connector (Windows) version 19.03.0.1.

C. VMware Workspace ONE Access (Windows) version 19.03.0.1.

D. VMware Identity Manager connector (Linux) version 20.18.8.1.0.

An administrator is concerned about help desk employees having the Console Administrator role. The help desk employees only need to access the device list view page and perform minor troubleshooting steps.
Which console security feature can eliminate the administrators concern?

A. Use Role-Based Access for help desk employees.

B. Change the help desk accounts to user accounts.

C. Use Directory-Based Access for help desk employees.

D. Prevent all access by help-desk accounts.

An administrator of a Workspace ONE Access tenant would like to add the company’s logo and standard color scheme to their tenant.
Where would the administrator accomplish this task?

A. In the Workspace ONE UEM console > Configurations, Identity & Access Management tab > select Setup then Custom Branding.

B. In the Workspace ONE Access console > Setup, Identity & Access Management tab > select Custom Branding.

C. In the Workspace ONE UEM console > Identity & Access Management tab > select Setup then Custom Branding.

D. In the Workspace ONE Access console > Identity & Access Management tab > select Setup then Custom Branding.

Refer to the Exhibit.
 
An administrator has set up an iOS compliance policy for unwanted apps.
Which of the following is the expected behavior when Workspace ONE UEM receives the app sample indicating the presence of the unwanted app?

A. After 1 day, end user will receive the push notification.

B. The concerned device will be marked as Non-compliant immediately.

C. The concerned device will be unenrolled.

D. After 2 days, all managed apps will be blocked/removed from the concerned device.

An administrator is concerned with data loss on Workspace ONE managed endpoints.
Which three configurations should be enabled to further improve the device security posture? (Choose three.)

A. Configure compliance policies to monitor rooted and jailbroken devices.

B. Configure compliance policies to monitor Roaming Cell Data Usage.

C. Enable device-level data encryption.

D. Enable SMTP integration.

E. Enable verbose logging.

F. Enable Data Loss Prevention policies.

Which Workspace ONE UEM feature can assist in sending event log information to a Security Information and Event Management (SIEM) tool?

A. Syslog Integration

B. Relay Server Integration

C. Certificate Authority Integration

D. File Storage Integration

When using Workspace ONE 20.x and higher, which three ways can an administrator using UEM automatically move devices into specified organization groups?
(Choose three.)

A. user group mappings

B. device type mappings

C. location based mappings

D. IP-based mappings

E. device ownership mappings

Which two statements are true about Content Gateway and Tunnel on Unified Access Gateway? (Choose two.)

A. Both can be configured with the same hostname on port 8443.

B. Both can be configured with the same hostname on different ports.

C. Both can be configured on port 8443 with different hostnames.

D. Both can be configured with the same hostname on port 443.

E. Both can be configured on port 443 with different hostnames.

Which two are needed from the directory when configuring user and group settings for Directory Service integration? (Choose two.)

A. Base DN

B. AD Server IP

C. Group & Function Class

D. User & Group Object Class

E. Functional Level

Every time Workspace ONE Intelligent Hub is opened, a passcode is requested for end-users to authenticate. Mobile SSO is configured correctly and the configuration and logs are not showing any errors.
Which should be configured for Single Sign-On to be seamless for end-users without requiring a passcode to access Workspace ONE Intelligent Hub?

A. Device Touch ID

B. Device Security Settings

C. Default AirWatch SDK

D. Device Profile Passcode

An administrator would like to track these details for all Windows desktops managed by Workspace ONE UEM:
✑ driver details for a mouse driver
✑ warranty information for OS
✑ registry value of internal apps
Which Workspace ONE UEM utility can the administrator use?

A. Create LGPO and assign to Windows devices.

B. Create sensors and assign to Windows devices.

C. Create an OEM update profile and assign to Windows devices.

D. Create Application Control profile and assign to Windows devices.

Which three features from Workspace ONE Hub Services are Cloud only? (Choose three.)

A. Templates

B. Hub Virtual Assistant

C. People Search

D. Passport

E. Employee Self-Service Support

F. Custom Tab

Which of the following explains the differences between Workspace ONE UEM reports and Workspace ONE Intelligence Custom Reports?

A. Workspace ONE Intelligence Reports uses an on-premises reporting database to push data to a reports cloud service as Workspace ONE UEM Reports extracts data from your Workspace ONE UEM environment.

B. Workspace ONE Intelligence Reports uses a separate service to push data to a reports cloud service and Workspace ONE UEM Reports extracts data from your WS ONE UEM environment.

C. Workspace ONE Intelligence Reports use the same an API service to push data to a reports cloud service as Workspace ONE UEM Reports.

D. Workspace ONE Intelligence Reports use the same service to push data to a reports cloud service as Workspace ONE UEM Reports.

Which administrative console is used to change to an organization logo (branding) in the Intelligent Hub Catalog?

A. Workspace ONE Access

B. Workspace ONE Hub Services

C. Workspace ONE

D. Workspace ONE UEM

Which of the following is a prerequisite to deploy VMware Unified Access Gateway OVF?

A. VMware vSphere

B. VMware Workstation

C. VMware Fusion

D. VMware Horizon

Which two platforms can be used with Email Notification Service v2 (ENS2)? (Choose two.)

A. iOS

B. Chrome OS

C. macOS

D. Android

E. Windows CE

Which component can use an AirWatch generated certificate for Inbound SSL Traffic?

A. AirWatch Cloud Connector

B. VMware Tunnel

C. Reverse Proxy

D. VMware Secure Email Gateway

Which is required to deliver a Check In, Check Out experience on an Android Device?

A. Block open enrollment into Workspace ONE UEM.

B. Enable VMware Workspace ONE Intelligence.

C. Deliver Launcher profile to the end-user.

D. Use a basic user as a staging account.

An organization has a split network comprised of a DMZ and an internal network.
Which Workspace ONE UEM edge service does VMware recommend to be deployed within the organization’s internal network?

A. VMware Unified Access Gateway with (VMware Tunnel Proxy)

B. VMware Unified Access Gateway with (VMware Tunnel Front-End)

C. VMware Unified Access Gateway with (VMware Tunnel Back-End)

D. VMware Unified Access Gateway with (SEG v2)

Which two steps would an administrator complete to enable auto-discovery for their Workspace ONE UEM environment? (Choose two.)

A. Enter the email domain when installing the AirWatch Cloud Connector.

B. Verify the domain by accepting the link in the email that registered auto-discovery.

C. Register email domain within Workspace ONE UEM.

D. Enter the email domain when establishing directory services.

E. Email auto-discovery@workspaceone.com with the domain the administrator wants to register.