Which protocol does Workspace ONE use to communicate with third party Identity Providers?

A. SAML

B. Kerberos

C. RADIUS

D. OAuth

What product from Workspace ONE needs to be enabled to provide administrators a flexible method for alerting and informing end-users?

A. AirWatch Cloud Connector

B. Workspace ONE Intelligence

C. Workspace ONE Hub Services

D. VMware Tunnel

When installing Workspace ONE UEM on-premises, which of the following core components is the first that should be installed?

A. Database

B. AirWatch Cloud Connector

C. Reports

D. Application Server

When configuring a Certificate Authority in Workspace ONE, which three protocols are supported? (Choose three.)

A. ADCS

B. SCEP

C. EST

D. PKI

E. CMP

An administrator noticed after syncing sAMAccountName as EnrollmentUser and syncing in an administrator group, that users are unable to log in with sAMAccountName.
What could be the cause of the issue?

A. Admins need to apply fullName as their username.

B. Admins need to apply sAMAccountName as their username.

C. Admins need to have the role admin to be allowed to log in.

D. Admins need to sign in with their UPN as their username.

An administrator would like to configure SSO for Workspace ONE UEM console login.
Which catalog setting from Workspace ONE Access need to be configured?

A. Web Apps

B. Virtual Apps

C. Hub Configuration

D. Hub Catalog

Which component can use an AirWatch generated certificate for Inbound SSL Traffic?

A. AirWatch Cloud Connector

B. VMware Tunnel

C. Reverse Proxy

D. VMware Secure Email Gateway

Which of the following features can be used to enable Virtual Assistance?

A. Workspace ONE UEM

B. Workspace ONE Access

C. Workspace ONE Assist

D. Workspace ONE Hub Services

Which feature of Workspace ONE UEM can be configured to allow reports to run on a schedule and have them delivered to a subset of administrators?

A. Windows Scheduled Tasks

B. Report Subscriptions

C. Timed Report Execution

D. SQL Server Reporting Services

An administrator has configured a sensor to fetch a specific registry value for a Windows app.
Which Intelligence report could help organize and display the collected sensor data?

A. Managed Apps Report

B. Custom Report

C. Device Inventory Report

D. Devices with Application and User Details Report

A customer is managing only iOS devices using Workspace ONE. They would like to begin managing Android devices.
What would be the first step an administrator needs to complete to begin managing Android Devices?

A. Download and deploy Workspace ONE Unified Access Gateway.

B. Complete Android EMM registration from Workspace One Console.

C. Download and deploy Workspace ONE Access Connectors for Android devices.

D. Configure a Workspace ONE AirLift Server-side Connector.

Which three can be used to enforce conditional access in Workspace ONE? (Choose three.)

A. device ownership type

B. device enrollment method

C. device platform

D. application specific

E. network range

F. user-based role

What component of the Hub Services can be integrated with Physical Access Control Systems to allow the Workspace ONE Intelligent app on mobile devices to act as digital badge?

A. Hub Employee Self-service

B. Hub Passport

C. Hub Catalog

D. Hub Access

An administrator is preparing to setup email management for Office 365 in UEM.
Which is VMware's recommended email deployment model for this scenario?

A. VPN

B. Proxy

C. Indirect

D. Direct

Which Workspace ONE UEM feature helps device users perform automated tasks across multiple business backend systems within VMware applications?

A. Device Profiles

B. User Profiles

C. Mobile Flows

D. Automated Flows

Which type of design is a diagram that includes network zones, network components, server locations, and hardware recommendations?

A. Physical

B. Logical

C. Theoretical

D. Conceptual

A customer has decided to use VMware Workspace ONE as their primary SAAS solution for endpoint management. The customer's security team requires all infrastructure to support High Availability (HA).
Which two components of Workspace ONE will need to be maintained by the customer? (Choose two.)

A. AirWatch Cloud Connector

B. Workspace ONE Database

C. Console Services Servers

D. Unified Access Gateway

E. Device Services Server

Which two statements are true about Content Gateway and Tunnel on Unified Access Gateway? (Choose two.)

A. Both can be configured with the same hostname on port 8443.

B. Both can be configured with the same hostname on different ports.

C. Both can be configured on port 8443 with different hostnames.

D. Both can be configured with the same hostname on port 443.

E. Both can be configured on port 443 with different hostnames.

Which of the following connectors can auto-update?

A. AirWatch Cloud Connector

B. Workspace ONE Access Connector

C. Workspace ONE Mobile Flows Connector

D. Workspace ONE Intelligence Connector

Which is used to authenticate and encrypt traffic from individual applications on compliant devices to internal resources?

A. VMware Tunnel

B. Device Compliance

C. Workspace ONE Intelligence

D. Email Notification Service

Which is the only method to deploy Content Gateway when using Workspace ONE 20.01 and higher versions?

A. Unified Access Gateway

B. Legacy Linux

C. Legacy Windows

D. Standalone

Which three features from Workspace ONE Hub Services are Cloud only? (Choose three.)

A. Templates

B. Hub Virtual Assistant

C. People Search

D. Passport

E. Employee Self-Service Support

F. Custom Tab

Which three are features of the ENS v2? (Choose three.)

A. Supports most existing corporate file servers.

B. Provides email notification for Exchange Active Sync.

C. Secures access to internal content repositories.

D. Updates the badge count for an unread email.

E. Triggers a background sync on Workspace ONE Boxer.

Which three Workspace ONE Edge Services are included in Unified Access Gateway? (Choose three.)

A. AirWatch Cloud Connector

B. Content Gateway

C. Secure Email Gateway

D. Workspace ONE Intelligence Connector

E. VMware Tunnel

Refer to the Exhibit.
 
An administrator has set up an iOS compliance policy for unwanted apps.
Which of the following is the expected behavior when Workspace ONE UEM receives the app sample indicating the presence of the unwanted app?

A. After 1 day, end user will receive the push notification.

B. The concerned device will be marked as Non-compliant immediately.

C. The concerned device will be unenrolled.

D. After 2 days, all managed apps will be blocked/removed from the concerned device.

A customer intends to implement Android device management in their environment.
Which three enrollment options would result in an end-user experience in which a dedicated container is created on the device for only business applications and contents? (Choose three.)

A. Knox Container

B. Device Enrollment Program (DEP)

C. Work Managed Device

D. Legacy enrolled

E. Corporate Owned Personally Enabled (COPE)

F. Work Profile

Which is required during installation of the Workspace ONE Intelligence Connector service?

A. Workspace ONE Intelligence Connector service must be installed on the AWCM Server.

B. Workspace ONE Intelligence Connector must be installed on the Console Server.

C. Workspace ONE Intelligence Connector service must be installed on the Device Services Server.

D. Workspace ONE Intelligence Connector must be installed on its own server.

Which is true about Workspace ONE compatibility when deploying content across different device types?

A. Content cannot be distributed to iOS devices.

B. Content cannot be distributed by Workspace ONE.

C. Content can be distributed to devices types including iOS, Android, Windows, and MacOS.

D. Content can be distributed to devices types including iOS, Android, and Windows.

An administrator wants to create a new Workspace ONE Access Policy that is specific only to a newly created IP subnet.
Which three Workspace ONE Access Policy settings would the administrator set? (Choose three.)

A. assignment method

B. device type

C. authentication method

D. subnet range

E. network range

F. attribute type

Administrators have noticed that all iOS devices are not checking into Workspace ONE in their SaaS environment. They are also unable to send any push notifications to the iOS devices. However, Android and Windows devices are working fine.
What can the administrator do to resolve the issue?

A. Make sure that the Rest API and SOAP API certificate are valid.

B. Make sure that all SSL certificates used for the Workspace ONE environment are valid.

C. Make sure that the APNs certificate is valid and not expired.

D. Make sure that the Email Notification Service v2 is configured.

A customer has a Workspace ONE SAAS environment. None of the administrators are able to log in to the console using their Active Directory (AD) credentials.
They are able to log in using a basic administrator account provided to them when they deployed Workspace ONE.
What could be cause for this issue?

A. AirWatch Connector is not running.

B. Workspace ONE Enterprise Integration Services is not running.

C. Workspace ONE Access connector is not running.

D. Device Services is not running.

An administrator must ensure enrolled corporate owned Android Enterprise devices do not update during the holiday season.
Which is VMware's recommended best practice to accomplish this?

A. Deliver ‘System Updates’ profile with change freeze payload.

B. Deliver ‘System Updates’ profile that defers updates up to 30 days.

C. Deliver ‘Restrictions’ profile that disables chrome on devices.

D. Deliver ‘Restrictions’ profile that disables Play Store on devices.

Which Security Assertion Markup Language (SAML) configuration item is a pre-requisite to creating a third party identity provider in Workspace ONE Access?

A. SAML AuthN Request

B. SAML Metadata

C. SAML Assertion

D. SAML AuthN Context

Which two Workspace ONE UEM core components are required for all on-premises environments? (Choose two.)

A. Device Services

B. AirWatch Cloud Connector

C. Unified Access Gateway

D. Secure Email Gateway

E. Console Services

IT management has announced all traffic from the DMZ will be blocked unless it passes through a newly configured proxy, effective immediately. Administrators notice that SEGv2 is unable to contact the Workspace ONE API Service in their SaaS environment.
Which configuration will the administrators need to amend and apply to the SEGv2 servers?

A. SSL offloading

B. outbound proxy

C. inbound proxy

D. KCD integration

DRAG DROP -
Drag and drop the device operating system on the left into the box associated with its third party messaging solution.
Select and Place:
 

When creating third party identity providers in Workspace ONE Access, which two SAML assertion components can be used to identify the user? (Choose two.)

A. NameID Element

B. SAML Attribute

C. SAML EntityID

D. NameID Signature

E. SAML Issuer

Where is Hub Services component co-located?

A. Workspace ONE Intelligence

B. Workspace ONE Access

C. Workspace ONE Airlift

D. Workspace ONE UEM

Every time Workspace ONE Intelligent Hub is opened, a passcode is requested for end-users to authenticate. Mobile SSO is configured correctly and the configuration and logs are not showing any errors.
Which should be configured for Single Sign-On to be seamless for end-users without requiring a passcode to access Workspace ONE Intelligent Hub?

A. Device Touch ID

B. Device Security Settings

C. Default AirWatch SDK

D. Device Profile Passcode

Which three features within Hub Services can an administrator leverage when Workspace ONE Access is configured and integrated with Workspace ONE UEM?
(Choose three.)

A. Email Notification

B. Mobile Flows

C. AirLift

D. Virtual Assistant

E. People

An administrator of a Workspace ONE Access tenant would like to add the company’s logo and standard color scheme to their tenant.
Where would the administrator accomplish this task?

A. In the Workspace ONE UEM console > Configurations, Identity & Access Management tab > select Setup then Custom Branding.

B. In the Workspace ONE Access console > Setup, Identity & Access Management tab > select Custom Branding.

C. In the Workspace ONE UEM console > Identity & Access Management tab > select Setup then Custom Branding.

D. In the Workspace ONE Access console > Identity & Access Management tab > select Setup then Custom Branding.

An administrator would like to track these details for all Windows desktops managed by Workspace ONE UEM:
✑ driver details for a mouse driver
✑ warranty information for OS
✑ registry value of internal apps
Which Workspace ONE UEM utility can the administrator use?

A. Create LGPO and assign to Windows devices.

B. Create sensors and assign to Windows devices.

C. Create an OEM update profile and assign to Windows devices.

D. Create Application Control profile and assign to Windows devices.

Which three are features of the Workspace ONE Content Gateway service? (Choose three.)

A. Encrypted communications using SSL/TLS.

B. Secure access to internal repositories.

C. Provides health status on external repositories.

D. Support for most corporate file servers.

E. Provides email notification for Exchange mail.

Which two settings are configurable in a macOS disk encryption profile? (Choose two.)

A. Recovery Key Type

B. Administrator Password Policy

C. TPM License Key

D. FileVault Enterprise Certificate

E. Maximum Battery Level

A Workspace ONE UEM administrator is migrating collections, applications, and policies from SCCM to Workspace ONE.
When using AirLift, which three of the following must the administrator allow AirLift to access on the ConfigMgr server? (Choose three.)

A. Port 443 or specified TLS port if Secure Connection is configured

B. WinRM port (typically 5985)

C. Port 3268 or the specified Global Catalog port

D. Port 389 for Active Directory

E. Interactive Login Permissions

If an administrator wants to leverage ThinApp packaged applications integrated with Workspace ONE Access, which of the following is the proper connector version to use?

A. VMware Workspace ONE Access (Windows) version 20.10.0.1.

B. VMware Identity Manager connector (Windows) version 19.03.0.1.

C. VMware Workspace ONE Access (Windows) version 19.03.0.1.

D. VMware Identity Manager connector (Linux) version 20.18.8.1.0.

What is the maximum number of supported NICs on the Unified Access Gateway?

A. 1 NIC

B. 2 NICs

C. 3 NICs

D. 4 NICs

What is the purpose of the Workspace ONE UEM Security Pin?

A. Serves as a second layer of security for administrators while preventing inadvertent commands.

B. Provides a second factor of authentication for administrators during console login.

C. Provides multi-factor authentication for users during device enrollment.

D. Serves as a second layer of security for end users while preventing inadvertent commands.

An administrator has received complaints from end-users not receiving consistent email notifications on their iOS devices. Email is configured on the end-users devices using only the VMware Boxer email client. Boxer is only configured from Workspace ONE to use Office 365.
What can the administrator do to resolve the inconsistent email notifications?

A. Configure VMware ENS v2 to provide consistent notification experience.

B. Configure SEG v2 to provide a better notification experience.

C. Configure Mobile SSO for VMware Boxer to prevent users from entering credentials.

D. Configure VPN tunnel with a Boxer configuration, so that it is able to connect to the internal network.

When using Workspace ONE 20.x and higher, which three ways can an administrator using UEM automatically move devices into specified organization groups?
(Choose three.)

A. user group mappings

B. device type mappings

C. location based mappings

D. IP-based mappings

E. device ownership mappings