NEW QUESTION 1
Which statement is true about device compliance policy and email compliance policy?

• A. If compliance criteria is available from both device compliance policy and email compliance policy, VMware recommends configuring this criteria with device compliance policy
• B. If compliance criteria is available from both device compliance policy and email compliance policy, VMware recommends configuring this criteria with email compliance policy
• C. VMware recommends leveraging the Automation feature built into the Workspace ONE Intelligence to manage device and email compliance
• D. If compliance criteria is available from both device compliance policy and email compliance policy, VMware recommends configuring this criteria with both device compliance policy and email compliance policy

Answer: D

NEW QUESTION 2
Which are the key functionalities of Workspace ONE Intelligence? (Choose three.)

• A. Content Insights
• B. App Analytics
• C. Mobile Analytics
• D. Powerful Automation
• E. Email Automation
• F. Integrated Insights

Answer: BDF

NEW QUESTION 3
Which are the two device enrollment modes in the Workspace ONE UEM console? (Choose two.)

• A. Device Enrollment Program
• B. Active Directory Authentication
• C. Registered Devices
• D. Open Enrollment
• E. Token Enrollment

Answer: AD

NEW QUESTION 4
Which three functions does Workspace ONE UEM Integration with a Microsoft Certification Authority (CA) allow administrators to execute? (Choose three.)

• A. Revoke an issued certificate
• B. Manage CA security permissions from the console
• C. Host a copy of the Certificate Revocation List
• D. Request certificates with custom attributes
• E. Renew an issued certificate

Answer: ADE

NEW QUESTION 5
An organization uses Mobile SSO for two Android applications, Application A and B. Application A signs on correctly, however, Application B never does Single Sign-On on any Android device.
Which two could be the cause of the issue? (Choose two.)

• A. Application B was not configured properly under Network Traffic Rules
• B. The Per-App Tunnel certificate is expired
• C. The Mobile SSO for Android authentication method is not configured
• D. Application B was not configured to use a Per-App VPN profile
• E. The VMware Tunnel application is not published to any Android device

Answer: AD

NEW QUESTION 6
An administrator is troubleshooting the Per-App VPN function in the VMware Tunnel and runs the following command:
openssl s_client –showcerts –connect <TunnelHostname>:8443.
They notice that the response is the certificate from their firewall and not the certificate from the Tunnel server.
What remediation step should be taken?

• A. The VMware Tunnel should be re-configured to use the certificate from the firewall
• B. The VMware Tunnel SSL traffic needs to pass through the firewall unmodified
• C. The VMware Tunnel should be re-configured to trust the certificate from the firewall
• D. The VMware Tunnel Certificate should be exported from the console and uploaded to the firewall

Answer: C

NEW QUESTION 7
Which underlying technology does Automation in Workspace ONE Intelligence use to execute Actions?

• A. SOAP API
• B. Java
• C. REST API
• D. PowerShell

Answer: C

NEW QUESTION 8
For a hybrid SaaS customer, what Workspace ONE components would always need to be installed On-premises? (Choose two.)

• A. VMware Identity Manager
• B. VMware Unified Access Gateway
• C. VMware Email Notification Service v2
• D. VMware AirWatch Cloud Messaging
• E. VMware Tunnel

Answer: AD

NEW QUESTION 9
Which three types of multi-factor authentication are offered by VMware Verify?

• A. Rotating Software One-Time Password (OTP)
• B. SMS
• C. Push notification
• D. Biometric authentication
• E. Security questions
• F. Email

Answer: ABC

NEW QUESTION 10
What two steps would an administrator take to troubleshoot iOS devices that are not communicating with the console? (Choose two.)

• A. Confirm that DEP is enabled
• B. Confirm that the iOS devices have network connection
• C. Confirm that AWCM is running
• D. Confirm that the VPP token is valid
• E. Confirm that the APNs certificate is still valid

Answer: AD

NEW QUESTION 11
An organization’s newly deployed Workspace ONE Mobile SSO works correctly for Windows 10 and iOS devices, but fails for Android devices.
What Workspace ONE component is likely the cause of this issue?

• A. VMware Identity Manager
• B. VMware Tunnel
• C. Content Gateway
• D. Workspace ONE UEM

Answer: D

NEW QUESTION 12
What is the VMware recommended practice if you want to apply specific Conditional Access to all your Apple iOS devices regardless of browser or application used on the Apple iOS devices?

• A. Create a brand new Access Policy to only contain Apple iOS specific access rules
• B. Prioritize Apple iOS platform in Access Policies in the VMware Identity Manager Console
• C. Remove other access rules from Access Policies except the Apple iOS access rule
• D. Create a custom AirWatch SDK profile and assign it to the Apple iOS devices

Answer: D

NEW QUESTION 13
What VMware client application is used for Android Mobile SSO, and what authentication method is utilized by this application?

• A. Workspace ONE Web and Certificate Authentication
• B. VMware Tunnel and Certificate Authentication
• C. Workspace ONE Intelligence Hub and Kerberos
• D. VMware Tunnel and Kerberos

Answer: A

NEW QUESTION 14
Which tool will help you troubleshoot SSO issues?

• A. Certreq
• B. Notepad ++
• C. SAML Tracer
• D. Postman

Answer: C

NEW QUESTION 15
Which two logs can be used to troubleshoot issues related to VMware Tunnel? (Choose two.)

• A. CloudConnector.log
• B. DeviceServices.log
• C. tunnel.log
• D. esmanager.log
• E. app.log

Answer: AC

NEW QUESTION 16
Workspace ONE VMware Tunnel supports which X.509 certificate file format?

• A. .pfx
• B. .p7s
• C. .pem
• D. .p12

Answer: A

NEW QUESTION 17
When using Okta as a 3rd Party IdP with Workspace ONE, which party owns the entitlement of resources in Workspace ONE?

• A. Workspace ONE
• B. Okta
• C. SAML
• D. OAuth

Answer: B

NEW QUESTION 18
An administrator would like to access the Workspace ONE Intelligence portal, however, the administrator does not see Intelligence under Monitor.
Which could be causing the issue?

• A. VMware Identity Manager environment is not setup in the Workspace ONE Intelligence portal
• B. Workspace ONE Intelligence is not integrated with the administrator’s account
• C. Workspace ONE UEM API is not configured in the Workspace ONE Intelligence portal
• D. The administrator tried to access Workspace ONE Intelligence from a Container type Organization Group

Answer: B

NEW QUESTION 19
Which three features can be enabled by integrating Workspace ONE UEM and VMware Identity Manager services? (Choose three.)

• A. Unified Catalog
• B. Mobile Application Management
• C. Mobile Email Management
• D. Password (Airwatch Connector)
• E. Single Sign-On to web applications
• F. Compliance Auth Adapter

Answer: DEF

NEW QUESTION 20
Which Workspace ONE component can be integrated with VMware NSX to implement network micro-segmentation?

• A. VMware Tunnel
• B. VMware AirWatch Content Gateway
• C. VMware Identity Manager Connector
• D. VMware AirWatch Secure Email Gateway

Answer: A

NEW QUESTION 21
What role does vIDM support in an OpenID Connect (OIDC) authentication flow?

• A. Relying Party
• B. Resource Server
• C. User-Agent
• D. OpenID Provider

Answer: C

NEW QUESTION 22
Which component load balances itself through the use of AirWatch Cloud Messaging (AWCM)?

• A. VMware Secure Email Gateway
• B. VMware Identity Manager Connector
• C. VMware AirWatch Cloud Connector
• D. VMware Unified Access Gateway

Answer: C

NEW QUESTION 23
......