NEW QUESTION 1
Which three on-premises components require a public IP address. (Choose three.)

• A. Secure Email Gateway (SEG)
• B. Integration Broker
• C. Database Server
• D. Unified Access Gateway – Content Gateway service
• E. AirWatch Cloud Connector (ACC)
• F. Unified Access Gateway – Vmware Tunnel service

Answer: ADF

NEW QUESTION 2
How can an administrator integrate approved third-party solutions into Workspace ONE?

• A. Using EAS Integration API
• B. Using S/MIME
• C. Using REST API
• D. Using Cloud Connector services

Answer: C

NEW QUESTION 3
Which policy should an administrator modify to grant a user access to the company’s federated Web app in Workspace ONE?

• A. Default access policy set
• B. Default compliance policy
• C. Default authentication user
• D. Default profile policy

Answer: A

NEW QUESTION 4
Which is the VMware recommended persistence mode for load balanced VMware Unified Access Gateway servers?

• A. SSL Session Persistence
• B. Source IP-based Persistence
• C. Cookie Persistence
• D. Destination IP-based Persistence

Answer: B

NEW QUESTION 5
Which two settings need to be configured to allow a user to move content from Admin Repository A to Admin Repository B in the VMware Content Locker? (Choose two.)

• A. Admin Repository A needs Allow Savings to Other Repositories enabled
• B. Local storage needs to be enabled for VMware Content Locker
• C. Admin Repository B needs Write enabled
• D. Admin Repository A needs Allow Edit Enabled
• E. Sharing needs to be enabled in the SDK setting for VMware Content Locker

Answer: DE

NEW QUESTION 6
What two steps would an administrator take to troubleshoot iOS devices that are not communicating with the console? (Choose two.)

• A. Confirm that DEP is enabled
• B. Confirm that the iOS devices have network connection
• C. Confirm that AWCM is running
• D. Confirm that the VPP token is valid
• E. Confirm that the APNs certificate is still valid

Answer: AD

NEW QUESTION 7
Drag and drop the labels into the correct boxes, placing them in the correct order from top to bottom, for diagramming a recommended multi-tier VMware Tunnel deployment.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 8
Which method can an administrator use to deploy the VMware Unified Access Gateway (UAG) appliance for use as a Workspace ONE VMware Tunnel?

• A. Manual install to a Linux Server
• B. Manual install to a Windows Server
• C. Powershell install to a Windows Server
• D. Powershell install to vSphere

Answer: B

NEW QUESTION 9
An organization’s newly deployed Workspace ONE Mobile SSO works correctly for Windows 10 and iOS devices, but fails for Android devices.
What Workspace ONE component is likely the cause of this issue?

• A. VMware Identity Manager
• B. VMware Tunnel
• C. Content Gateway
• D. Workspace ONE UEM

Answer: D

NEW QUESTION 10
Which domain attribute must be included to meet the SAML assertion requirement for Just-In-Time provisioning in Workspace ONE?

• A. email
• B. lastName
• C. firstName
• D. userName

Answer: D

NEW QUESTION 11
An administrator is planning a SaaS Workspace ONE deployment that will include integration of an existing on-premises Citrix environment.
Which two components are required to integrate the Citrix resources? (Choose two.)

• A. VMware Identity Manager Connector
• B. Integration Broker
• C. VMware Unified Access Gateway
• D. Enrollment Server
• E. Connection Server

Answer: BE

NEW QUESTION 12
What functionality would be lost if you configure only SAML as compared to SAML and LDAP?

• A. The ability to create assignment groups
• B. The ability to create user groups
• C. The ability to sync user groups
• D. The ability to create organization group

Answer: D

NEW QUESTION 13
Users are reporting to IT they are getting an error when attempting to launch mobile apps that require VPN to access.
Which command would an IT Administrator need to run to check the status of the Tunnel Per-App VPN service on the Unified Access Gateway (UAG)?

• A. systemctl status pavpn
• B. systemctl status vpnd
• C. service status vpnd
• D. service status pavpn

Answer: B

NEW QUESTION 14
Which underlying technology does Automation in Workspace ONE Intelligence use to execute Actions?

• A. SOAP API
• B. Java
• C. REST API
• D. PowerShell

Answer: C

NEW QUESTION 15
Which two integrations require the VMware Identity Manager Connector component? (Choose two.)

• A. VMware Horizon
• B. Email Relay
• C. Certificate Services
• D. RADIUS Auth Adapter
• E. Syslog

Answer: AE

NEW QUESTION 16
When configuring profiles in the Workspace ONE UEM Console for Android devices, why would some setting features and payloads be supported for specific original equipment manufacturers (OEMS) and/or operating system (OS) versions?

• A. Profile configuration requires a device directly purchased from Google
• B. Profile configuration requires an application built with the AirWatch SDK installed on the device
• C. Profile configuration is dependent on operating system and firmware API availability
• D. Profile configuration is XML-based and depending on the OEM or OS, the device may not support XML

Answer: C

NEW QUESTION 17
An administrator would like to access the Workspace ONE Intelligence portal, however, the administrator does not see Intelligence under Monitor.
Which could be causing the issue?

• A. VMware Identity Manager environment is not setup in the Workspace ONE Intelligence portal
• B. Workspace ONE Intelligence is not integrated with the administrator’s account
• C. Workspace ONE UEM API is not configured in the Workspace ONE Intelligence portal
• D. The administrator tried to access Workspace ONE Intelligence from a Container type Organization Group

Answer: B

NEW QUESTION 18
Which are the two device enrollment modes in the Workspace ONE UEM console? (Choose two.)

• A. Device Enrollment Program
• B. Active Directory Authentication
• C. Registered Devices
• D. Open Enrollment
• E. Token Enrollment

Answer: AD

NEW QUESTION 19
A customer has two sub-organizations with different domains with separate AD servers. Both Domain Controllers and Cloud Connector are in the same subnet. The first sub-organization is currently set up to manage devices in Workspace One UEM using Cloud Connector and a VMware Identity Manager.
What is the VMware recommendation to set up the second sub-organization that is not set up for management with Workspace One UEM?

• A. Use the same Cloud Connector server and set up directory services and request an additional Identity Management Tenant
• B. Deploy Use an additional Cloud Connector server and set up directory services server and request additional Identity Management Tenant
• C. Deploy an additional Cloud Connector Server and set up Directory services and then use the Identity Manager Tenant currently available
• D. Use the same Cloud Connector server to set up directory services and the same Identity management tenant

Answer: C

NEW QUESTION 20
Which three configuration changes must be made to use an enterprise Certificate Authority (CA) for Mobile SSO with iOS devices? (Choose three.)

• A. Integrate 3rd party Certificate Authority (CA) with Workspace ONE UEM console
• B. Configure Mobile SSO adapters in Workspace ONE to trust enterprise CA
• C. Modify Mobile SSO profiles to use enterprise CA
• D. Configure mobile application records in Workspace ONE to trust enterprise CA
• E. Modify Workspace ONE authentication policies to use enterprise CA
• F. Configure VMware Tunnel network traffic rules to allow access to enterprise CA

Answer: ABF

NEW QUESTION 21
......