With Workspace ONE UEM staging, what are the three supported enrollment options for Android devices? (Choose three.)
- A . Sideload
- B . QR Code
- C . Web
- D . NFC
- E . Barcode
B, C, D
Explanation:
For Android devices, Workspace ONE UEM supports various enrollment options that facilitate easy and secure device management. The supported options include QR Code, Web, and NFC. QR Code enrollment involves scanning a specific code to start the enrollment process. Web enrollment allows users to enroll their devices via a web browser. NFC (Near Field Communication) enables device enrollment by simply tapping the device against another NFC-enabled device.
Reference: VMware Workspace ONE UEM Documentation: Android Enrollment
VMware Blog: Understanding Workspace ONE Enrollment Options for Android
DRAG DROP
Match the Workspace ONE Service on the left to its Service Port on the right.
Refer to the exhibit.
A user has attempted to launch an iOS application and during authentication they see this response.
What is the cause of the issue?
- A . The user does not have access to that application
- B . They installed the application from the Apple Agp Store
- C . You need to add the identifier to the Mobile SSO profile
- D . The user put in the wrong email address
Which two email clients can be configured with an Exchange ActiveSync profile? (Choose two.)
- A . Microsoft Outlook
- B . Workspace ONE Boxer
- C . macOS native email client
- D . Gmail
- E . iOS native email client
A, B
Explanation:
Workspace ONE UEM supports the configuration of Exchange ActiveSync profiles with specific email clients. Microsoft Outlook and Workspace ONE Boxer are the two clients that can be configured with these profiles. Microsoft Outlook is a widely used email client, and Workspace ONE Boxer is a customized email client designed for Workspace ONE, offering integrated security and management features.
Reference: VMware Workspace ONE UEM Documentation: Email Configuration
VMware Blog: Integrating Email Clients with Workspace ONE
During an enrollment attempt, a user enters their email address in the initial field in the Intelligent Hub. The user receives an error stating, “Something went wrong with discovery”.
Which configuration setting can be enabled to allow end users to enter an email address instead of a Server URL?
- A . Allow only known users
- B . Enrollment Token
- C . Autodiscovery Enrollment
- D . Pre-Register devices
C
Explanation:
The error encountered during enrollment due to entering an email address suggests a need for enabling Autodiscovery Enrollment. This feature allows users to enroll their devices using their email address by automatically discovering the appropriate server settings, thereby simplifying the enrollment process and reducing user errors.
Reference: VMware Workspace ONE UEM Documentation: Enrollment Options
VMware Knowledge Base: Troubleshooting Enrollment Issues
DRAG DROP
In Workspace ONE Access, some authentication methods can best be used as Primary Authentication, while others can only be used as Secondary Authentication.
Drag and drop the authentication methods on the left into the correct classification on the right.
What is the name of the natively available source for Windows applications in Workspace ONE UEM?
- A . Enterprise Application Repository
- B . Microsoft Agg Store
- C . Windows Application Repository
- D . Microsoft Store for Business
D
Explanation:
The natively available source for Windows applications in Workspace ONE UEM is the Microsoft Store for Business. This integration allows administrators to manage and distribute Windows applications easily within the Workspace ONE UEM console, offering a streamlined process for accessing and deploying Microsoft applications.
Reference: VMware Workspace ONE UEM Documentation: Managing Windows Applications
VMware Blog: Integrating Microsoft Store for Business with Workspace ONE
An administrator wants to deploy and configure a web browser for mobile devices that contains a survey. The browser needs to go back to the default homepage after 5 minutes of inactivity.
What browser can be configured from Workspace ONE?
- A . VMware Intelligent Hub
- B . VMware Workspace ONE Web
- C . Google Chrome
D Microsoft Edge - D . Apple Safari
B
Explanation:
VMware Workspace ONE Web is the browser that can be configured from Workspace ONE for the specified requirements. It allows for custom configurations like setting a default homepage and specifying actions after a period of inactivity, making it suitable for deploying and managing a web browser on mobile devices for specific organizational needs.
Reference: VMware Workspace ONE UEM Documentation: Browser Configuration
VMware Blog: Customizing Browsing Experience with Workspace ONE Web
What are the two Tunnel Modes that can be configured in Tunnel Traffic Rules? (Choose two.)
- A . Group Application
- B . Per Application
- C . Full Device
- D . Proxy
- E . Per Device
B, C
Explanation:
In Tunnel Traffic Rules within Workspace ONE, the two modes that can be configured are ‘Per Application’ and ‘Full Device’. ‘Per Application’ mode directs traffic from specified applications through the tunnel, whereas ‘Full Device’ mode routes all traffic from the device through the tunnel. These modes offer flexibility in managing network traffic based on organizational security and access requirements.
Reference: VMware Workspace ONE UEM Documentation: Tunnel Traffic Rules
VMware Blog: Understanding Tunnel Modes in Workspace ONE
Refer to the exhibit.
During Directory Sync and Authentication configuration, which two options are selectable for the Administrator in the User Name pull down menu? (Choose two.)
- A . distinguishedName
- B . sAMAccountName
- C . UserPrincipalName
- D . UserName
- E . SID
A Workspace ONE administrator is configuring email for an organization that uses Microsoft Exchange Online (Office 365). The organization has an extreme security posture and wants to require all email attachments be encrypted.
Which component is needed to meet the organization’s requirement?
- A . Workspace ONE Content with DLP enabled.
- B . PowerShell integration with default blacklist.
- C . SEGv2 with content transforms.
- D . Workspace ONE Web with DLP enabled.
C
Explanation:
To meet the requirement of encrypting all email attachments for an organization using Microsoft Exchange Online with an extreme security posture, SEGv2 with content transforms is needed. This setup allows for advanced security configurations, including the ability to transform and secure email content such as attachments, aligning with strict security policies.
Reference: VMware Workspace ONE UEM Documentation: Secure Email Gateway
VMware Knowledge Base: Email Security Configurations
To use the authentication method “Device Compliance (with Workspace ONE UEM)”, where in Workspace ONE Access must it be enabled first to establish the communication with Workspace ONE UEM?
- A . Connector Authentication Methods
- B . Identity Providers
- C . Connectors
- D . Hub Configuration
- E . UEM Integration
- F . Directories
E
Explanation:
To use the ‘Device Compliance (with Workspace ONE UEM)’ authentication method, it must first be enabled in the ‘UEM Integration’ section of Workspace ONE Access. This establishes the necessary communication between Workspace ONE Access and Workspace ONE UEM, facilitating device
compliance checks as part of the authentication process.
Reference: VMware Workspace ONE Access Documentation: Authentication Methods VMware Blog: Integrating Workspace ONE UEM with Access
DRAG DROP
Order the steps for the authentication flow for Android SSO. Order responses from left to right.
Which of the following components can be leveraged to integrate LDAP, SMTP, SCEP, and ADCS for maintaining internal resource security in Workspace ONE UEM?
- A . Intelligence Connector (ETL)
- B . Workspace ONE Access Connector
- C . AirWatch Cloud Connector (ACC)
- D . Unified Access Gateway (UAG)
C
Explanation:
The AirWatch Cloud Connector (ACC) is the component that integrates LDAP, SMTP, SCEP, and ADCS for maintaining internal resource security in Workspace ONE UEM. ACC acts as a bridge between Workspace ONE UEM and your internal resources, ensuring secure communication and data exchange.
Reference: VMware Workspace ONE UEM Documentation: AirWatch Cloud Connector
VMware Knowledge Base: Integrating Internal Resources
Which two of the following Windows device onboarding methods become available after integrating Workspace ONE UEM with Azure AD? (Choose two.)
- A . Workspace ONE Intelligent Hub enrollment
- B . Microsoft 365 application onboarding
- C . Out-of-Box Experience
- D . Native MDM enrollment
- E . Command-line staging with Intelligent Hub
C, D
Explanation:
After integrating Workspace ONE UEM with Azure AD, the Windows device onboarding methods that become available are ‘Out-of-Box Experience’ and ‘Native MDM enrollment’. These methods facilitate smooth and efficient device onboarding, leveraging the capabilities of Azure AD for streamlined management and deployment.
Reference: VMware Workspace ONE UEM Documentation: Azure AD Integration
VMware Blog: Enhancing Windows Device Management
Which Out-of-band Management solution can be integrated with Workspace ONE UEM?
- A . Intel vPro
- B . KVM
- C . Lantronix
- D . IPMI
A
Explanation:
Intel vPro can be integrated with Workspace ONE UEM as an Out-of-band Management solution. This integration enables advanced management capabilities such as remote control, system defense, and hardware-based KVM (Keyboard, Video, Mouse) control, enhancing device management and security.
Reference: VMware Workspace ONE UEM Documentation: Intel vPro Integration
VMware Blog: Advanced Device Management with Intel vPro
What option can be used by an administrator that wants to onboard Microsoft Windows devices in an Out of Box Experience (OOBE)?
- A . Microsoft SBS
- B . Microsoft CSP
- C . Microsoft Autopilot
- D . Windows automatic enrollment
C
Explanation:
For onboarding Microsoft Windows devices in an Out of Box Experience (OOBE), the Microsoft Autopilot option can be used. This feature simplifies the device setup process, allowing administrators to set up and pre-configure new devices, making them ready for productive use right out of the box.
Reference: VMware Workspace ONE UEM Documentation: Microsoft Autopilot Integration
VMware Knowledge Base: Setting Up Windows OOBE
Which of the following components can integrate with an external Certificate Authority?
- A . ENS (Email Notification Service)
- B . ETL (Intelligence Connector)
- C . UAG (Unified Access Gateway)
- D . ACC (AirWatch Cloud Connector)
D
Explanation:
The AirWatch Cloud Connector (ACC) is capable of integrating with an external Certificate Authority. This integration is crucial for secure certificate management and issuance, ensuring that devices and users in the Workspace ONE UEM environment have the necessary certificates for authentication and secure communication.
Reference: VMware Workspace ONE UEM Documentation: Certificate Authority Integration
VMware Blog: Certificate Management with ACC
Which two values are needed to configure the Secure Email Gateway (SEG) edge service on Unified Access Gateway? (Choose two.)
- A . SEG Friendly Name
- B . Email Server URL
- C . API Server URL
- D . Exchange Version
- E . MEM Config GUID
C, E
Explanation:
https://docs.vmware.com/en/Unified-Access-Gateway/3.10/com.vmware.uag-310-deploy-config.doc/GUID-777AD886-B48D-4D07-8A82-F17F3664EDA0.html
Which certificate is needed to configure Workspace ONE UEM Configuration with Workspace ONE Access?
- A . Workspace ONE UEM Device Services Certificate
- B . Workspace ONE UEM User Certificate
- C . Workspace ONE UEM Soap Certificate
- D . Workspace ONE UEM REST API Certificate
D
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE-Access/services/WS1-Access-deploymentguide/GUID-0AC4DCE9-A41B-4B8B-9953-F9874B04C575.html
An administrator noticed users are never disabled in the Workspace ONE UEM Console after they are disabled in Active Directory.
What can be done to resolve the issue?
- A . Enable custom attributes for user status.
- B . Enable automatic sync for user status.
- C . Manually sync attributes.
- D . Enable auto merge.
B
Explanation:
To ensure that user status changes in Active Directory are reflected in the Workspace ONE UEM Console, enabling automatic synchronization is necessary. This setting allows Workspace ONE UEM to periodically check and update the user status based on Active Directory.
Reference: VMware Workspace ONE UEM documentation on Active Directory integration.
Which three values are needed to enable Email Notification Service (ENS) for Workspace ONE Boxer? (Choose three.)
- A . ENS API Token
- B . Exchange Admin Credentials
- C . Domain
- D . ENS Server Address
- E . Exchange ActiveSync Host
- F . EWSURL
A, D, E
Explanation:
To enable Email Notification Service (ENS) for Workspace ONE Boxer, you need the ENS API Token for authentication, the ENS Server Address for communication, and the Exchange ActiveSync Host to connect to the mail server.
Reference: VMware documentation on configuring ENS for Workspace ONE Boxer.
An administrator would like to deploy Apple Purchased apps.
Which setting does the administrator need to configure in Workspace ONE UEM?
- A . VPP Managed Distribution
- B . Android EMM Registration
- C . Device Enrollment Program
- D . CDN Integration
A
Explanation:
For deploying Apple Purchased apps in Workspace ONE UEM, the administrator needs to configure Volume Purchase Program (VPP) Managed Distribution. This allows bulk purchasing and deployment of iOS apps.
Reference: VMware Workspace ONE UEM documentation on Apple VPP integration.
DRAG DROP
Match the use cases on the left with the correct configurations an administrator can use with Workspace ONE Launcher.
An administrator is concerned with data loss on Workspace ONE managed endpoints.
Which three configurations should be enabled to further improve the device security posture? (Choose three.)
- A . Enable verbose logging.
- B . Enable device-level date encryption.
- C . Configure compliance policies to monitor rooted and jailbroken devices.
- D . Configure compliance policies to monitor Roaming Cell Data Usage.
- E . Enable SMTP integration.
- F . Enable Data Loss Prevention policies.
B, C, F
Explanation:
To improve device security posture and prevent data loss, enabling device-level data encryption, configuring compliance policies to monitor for rooted and jailbroken devices, and enabling Data Loss
Prevention (DLP) policies are effective strategies.
Reference: VMware Workspace ONE documentation on security configurations and DLP policies.