Which two authentication methods are available in the Workspace ONE UEM console? (Choose two.)
- A . SAML
- B . Azure AD
- C . CAPTCHAs
- D . OAUTH
- E . Certificate Based Authentication
DE
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-Access/20.01/ws1_access_authentication.pdf
Which Workspace ONE UEM feature can assist in sending event log information to a Security Information and Event Management (SIEM) tool?
- A . Relay Server Integration
- B . Syslog Integration
- C . File Storage Integration
- D . Certificate Authority Integration
B
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/1907/Legacy_Analytics/GUIDAWT-SYSLOGOVERVIEW.html
An administrator wants to use VMware Unified Access Gateway (UAG) appliance to enable devices to connect to internal resources without needing the Workspace ONE UEM SDK.
Which method can the administrator use to deploy the UAG appliance?
- A . Manual install to a Linux Server
- B . PowerShell install to a Windows Server
- C . Manual install to a Windows Server
- D . PowerShell install to vSphere
D
Explanation:
Reference: https://docs.vmware.com/en/Unified-Access-Gateway/3.5/uag-35-deploy-config-guide.pdf
An organization has purchased a SaaS Workspace ONE solution and wants to implement these:
integration with back-end resources like Active Directory from Microsoft to sync users and groups
Kerberos authentication
integration with Virtual Desktops and Applications from services (Horizon 7, Horizon Cloud, or Citrix)
third party integration with RSA SecureID, RADIUS for authentication
Which Workspace ONE component is required?
- A . VMware AirWatch Cloud Connector
- B . VMware Workspace ONE Assist
- C . VMware Workspace Unified Access Gateway
- D . VMware Workspace ONE Access Connector
D
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-Access/services/rn/VMwareWorkspace-ONE-Release-Notes—Cloud-2020.html
IT management has announced all traffic from the DMZ will be blocked unless it passes through a newly configured proxy, effective immediately. Administrators notice that SEGv2 is unable to contact the Workspace ONE API server.
Which configuration will the administrators need to amend and apply to the SEGv2 servers?
- A . inbound proxy
- B . SSL offloading
- C . KCD integration
- D . outbound proxy
D
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2001/WS1_SEGV2_Doc.pdf (21)
Which two are IT-driven on-boarding workflows for Windows 10 devices? (Choose two.)
- A . command line interface (CLI) staging
- B . ODBII
- C . manual device staging
- D . OOBE
- E . native MDM enrollment
Which feature of Workspace ONE can be used to create a custom dashboard showing key information about a device fleet?
- A . Secure Email Gateway
- B . Workspace ONE Intelligence
- C . Workspace ONE Access D. Unified Access Gateway
B
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE/services/intelligence-documentation/GUID-01_intel_intro.html
Which three internal applications are supported by Workspace ONE UEM 20.01? (Choose three.)
- A . .ipa
- B . .apk
- C . .msi
- D . .msix
- E . .ppkg
- F . .app
A certificate profile set to AUTO will expire in 2 days and no new certificates are being renewed.
Which certificate template configuration can an administrator modify to start renewing these certificates sooner?
- A . Set or lower the certificate the private key length.
- B . Set or increase the certificate revocation period.
- C . Set or lower the certificate revocation period.
- D . Set or increase the certificate auto renewal period.
Which is used to authenticate and encrypt traffic from individual applications on compliant devices to internal resources?
- A . Email Notification Service
- B . Device Compliance
- C . Workspace ONE Intelligence
- D . VMware Tunnel
D
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2005/Tunnel_Linux/GUID-AWT-TUNNEL-INTRODUCTION.html
Which Workspace ONE UEM console feature can be leveraged to confirm a Certificate Authority (CA) is accessible?
- A . Test Connection button
- B . PKI Validation button
- C . Request Dummy Cert button
- D . SCEP Request button
A
Explanation:
Reference: https://docs.hol.vmware.com/HOL-2020/hol-2051-10-uem_html_en/
Which auxiliary component, with a default configuration, has the ability to self-update after an upgrade?
- A . Workspace ONE Access Connector
- B . Unified Access Gateway
- C . Secure Email Gateway on UAG
- D . AirWatch Cloud Connector
C
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/1903/WS1_Upgrade.pdf
During an enrollment attempt, a user enters their email address in the initial field in the Intelligent Hub. The user receives an error stating, “Something went wrong with discovery”.
Which configuration setting can be enabled to allow end users to enter an email address instead of a Server URL?
- A . Allow only known users
- B . Pre-Register devices
- C . Autodiscovery Enrollment
- D . Enrollment Token
Which is highly recommended to be installed for discovery services integration in a Software as a Service environment (SaaS)?
- A . AitWatch Cloud Connector
- B . AirWatch Cloud Messaging
- C . Workspace ONE Adaptive Connector
- D . AirWatch API components
When creating third party identity providers in Workspace ONE Access, which two SAML assertion components can be used to identify the user? (Choose two.)
- A . SAML EntityID
- B . SAML Attribute
- C . SAML Issuer
- D . SAML NameID
- E . SAML Signature
BD
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-Access/20.01/ws1_access_authentication/GUID-0C459D5A-A0FF-4893-87A0-10ADDC4E1B8D.html
When Single Logout (SLO) is disabled in a third party identity provider configuration of Workspace ONE Access, what is the default action taken upon a user signing out of Workspace ONE Access?
- A . The user is redirected back to the Workspace ONE Access catalog.
- B . The user is redirected to the third party identity provider URL provided in metadata.
- C . The user is redirected to a custom URL provided in the identity provider configuration.
- D . The user is redirected to the default Workspace ONE Access login page.
D
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-Access/services/ws1_access_authentication_cloud/GUID-0C459D5A-A0FF-4893-87A0-10ADDC4E1B8D.html (Single Sign-out configuration)
Which is required to deliver a Check In, Check Out experience on an Android Device?
- A . Enable VMware Workspace ONE Intelligence.
- B . Deliver Launcher profile to the end-user.
- C . Use a basic user as a staging account.
- D . Block open enrollment into Workspace ONE UEM.
Which underlying technology does Workspace ONE Access use to collect Workspace ONE UEM device information?
- A . SOAP API
- B . REST API
- C . AirWatch Cloud Connector (ACC)
- D . Security Assertion Markup Language (SAML)
Which three options are supported by Workspace ONE Access? (Choose three.)
- A . unified application catalog
- B . conditional access
- C . Per-App VPN
- D . network segmentation
- E . encryption
- F . Mobile SSO
Which two configuration steps must be performed when managing iOS devices? (Choose two.)
- A . Obtain an iCloud Account.
- B . Obtain an Apple Developer ID.
- C . Obtain an Apple ID.
- D . Obtain an Apple Server Certificate.
- E . Obtain an APNS certificate.
CE
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/1903/WS1_iOS_Platform_Doc.pdf (7)