Tested Material Used To 5V0-63.21 Test Engine Exam Questions in here [Jul-2024]
Penetration testers simulate 5V0-63.21 exam PDF
NEW QUESTION # 20
Which feature of Workspace ONE UEM can be configured to allow reports to run on a schedule and have them delivered to a subset of administrators?
- A. SQL Server Reporting Services
- B. Report Subscriptions
- C. Windows Scheduled Tasks
- D. Timed Report Execution
Answer: B
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/WS1_ReportsAnalytics.pdf
NEW QUESTION # 21
When using Workspace ONE 20.x and higher, which three ways can an administrator using UEM automatically move devices into specified organization groups? (Choose three.)
- A. user group mappings
- B. device ownership mappings
- C. device type mappings
- D. location based mappings
- E. IP-based mappings
Answer: A,B,E
Explanation:
According to documentation (link below) you can do Device Assignments, User Group Assignments and IP Range Assignments. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2011/WS1_UEM_Managing_Devices.pdf
NEW QUESTION # 22
Which three can be used to enforce conditional access in Workspace ONE? (Choose three.)
- A. device enrollment method
- B. network range
- C. device platform
- D. application specific
- E. user-based role
- F. device ownership type
Answer: B,C,D
Explanation:
https://blogs.vmware.com/euc/2021/01/vmware-workspace-one-delivers-improved-multi-factor-authentication.html#:~:text=%20Workspace%20ONE%20can%20make%20conditional%20access%20decisions,access%3F%20Internal%2C%20external%2C%20high%20security%2C%20etc.%3F%20More%20 And page 562 of manual WS1
NEW QUESTION # 23
An administrator is troubleshooting the Per-App VPN function in the VMware Tunnel and runs the following command:
openssl s_client -showcerts -connect <TunnelHostname>:8443.
They notice that the response is the certificate from their firewall and not the certificate from the Tunnel server.
What remediation step should be taken?
- A. The VMware Tunnel SSL traffic needs to pass through the firewall unmodified
- B. The VMware Tunnel Certificate should be exported from the console and uploaded to the firewall
- C. The VMware Tunnel should be re-configured to use the certificate from the firewall
- D. The VMware Tunnel should be re-configured to trust the certificate from the firewall
Answer: D
NEW QUESTION # 24
An administrator must ensure enrolled corporate owned Android Enterprise devices do not update during the holiday season.
Which is VMware's recommended best practice to accomplish this?
- A. Deliver 'System Updates' profile that defers updates up to 30 days.
- B. Deliver 'Restrictions' profile that disables Play Store on devices.
- C. Deliver 'Restrictions' profile that disables chrome on devices.
- D. Deliver 'System Updates' profile with change freeze payload.
Answer: D
NEW QUESTION # 25
A company using Mobile SSO would like to avoid deploying an additional connector for Workspace ONE. They currently do not have a use case for Virtual Apps or advanced authentication such as kerberos, RDA SecureID or Radius.
Which configuration can be used to sync users and groups with a single connector of Workspace ONE?
- A. Directory Sync from Workspace ONE UEM to Workspace ONE Access
- B. Directory Sync from Workspace ONE Assist to Workspace ONE Access
- C. Directory Sync from Workspace ONE Access to Workspace ONE Unified Access Gateway
- D. Directory Sync from Workspace ONE Intelligence to Workspace ONE Access
Answer: A
NEW QUESTION # 26
An administrator is concerned with data loss on Workspace ONE managed endpoints.
Which three configurations should be enabled to further improve the device security posture? (Choose three.)
- A. Configure compliance policies to monitor Roaming Cell Data Usage.
- B. Configure compliance policies to monitor rooted and jailbroken devices.
- C. Enable SMTP integration.
- D. Enable device-level data encryption.
- E. Enable Data Loss Prevention policies.
- F. Enable verbose logging.
Answer: B,D,E
NEW QUESTION # 27
Which three configuration changes must be made to use an enterprise Certificate Authority (CA) for Mobile SSO with iOS devices? (Choose three.)
- A. Modify Mobile SSO profiles to use enterprise CA
- B. Integrate 3rd party Certificate Authority (CA) with Workspace ONE UEM console
- C. Modify Workspace ONE authentication policies to use enterprise CA
- D. Configure Mobile SSO adapters in Workspace ONE to trust enterprise CA
- E. Configure VMware Tunnel network traffic rules to allow access to enterprise CA
- F. Configure mobile application records in Workspace ONE to trust enterprise CA
Answer: A,B,C
Explanation:
Configure Active Directory Certificate Authority in AirWatch
https://docs.vmware.com/en/VMware-Workspace-ONE/services/aw-vidm-ws1integration-/GUID-C0308F39-AC0F-42F6-B672-1C8D3BFEDE26.html Configure Apple iOS Profile in AirWatch Using Active Directory Certificate Authority and Certificate Template
https://docs.vmware.com/en/VMware-Workspace-ONE/services/aw-vidm-ws1integration-/GUID-1AEB8F12-4C3C-49EE-A1C2-5F742B13F2F6.html Configure Mobile SSO for iOS Authentication
https://docs.vmware.com/en/VMware-Workspace-ONE/services/aw-vidm-ws1integration-/GUID-59D589F7-55A4-4F96-AC04-D9A498DF3CCE.html
NEW QUESTION # 28
What two features of Hub Services can be enabled without enabling Workspace ONE Access and having the authentication mode set to Workspace ONE UEM? (Choose two.)
- A. Hub Virtual Assistant Chatbot
- B. Hub Catalog layout
- C. notifications for iOS and Android
- D. enable People Search
- E. enable SSO for applications
Answer: B,C
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE/services/intelligent-hub_IDM/GUID-012E7722-FC83-4EF5-8ADD-2457E29720FE.html And says "....Hub Services can operate with Workspace ONE UEM alone providing a subset of Hub Services features - Catalog for UEM apps, Notification, Self-Service Support, and Custom Tab."
NEW QUESTION # 29
Which two configuration steps must be performed when managing iOS devices? (Choose two.)
- A. Obtain an iCIoud Account.
- B. Obtain an APNS certificate.
- C. Obtain an Apple ID.
- D. Obtain an Apple Server Certificate.
- E. Obtain an Apple Developer ID.
Answer: B,C
Explanation:
To generate a new APNs certificate, you need a Apple ID. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/UEM_ConsoleBasics/GUID-B408B1B2-CF28-4CDD-A699-C7E8AC0BE140.html
NEW QUESTION # 30
Which three options are supported by Workspace ONE Access? (Choose three.)
- A. Configuring unified application catalog.
- B. Configuring encryption.
- C. Configuring conditional access.
- D. Configuring Per-App VPN.
- E. Configuring Mobile SSO.
- F. Configuring network segmentation.
Answer: A,C,E
NEW QUESTION # 31
For federal clients, FIPS 140-2 and AES 256-bit encryption are applied to which three areas? (Choose three.)
- A. data in pace
- B. data in rest
- C. data in transit
- D. data in flying
- E. data in use
Answer: B,C,E
NEW QUESTION # 32
Which three are features in the branding section of the Workspace ONE Access console? (Choose three.)
- A. Adjusting the background color.
- B. Adjusting the URL of the Access console.
- C. Uploading a logo for sign-in screens.
- D. Adjusting the name of the Intelligent Hub application on devices.
- E. Uploading a favicon to display in the browser address bar.
Answer: A,C,E
NEW QUESTION # 33
What product from Workspace ONE needs to be enabled to provide administrators a flexible method for alerting and informing end-users?
- A. Workspace ONE Intelligence
- B. Workspace ONE Hub Services
- C. AirWatch Cloud Connector
- D. VMware Tunnel
Answer: B
NEW QUESTION # 34
A company has BYOD iOS devices and would like to give them access to internal sites in VMware Web without requiring full device management.
Which VMware best practice configuration is needed to enable this?
- A. Configure a VPN Profile for VMware Tunnel.
- B. Configure Tunnel for VMware Tunnel Proxy in the SDK settings
- C. Configure a VPN Profile for VMware Tunnel Proxy.
- D. Configure Tunnel for VMware Tunnel in the SDK settings.
Answer: A
NEW QUESTION # 35
Where is Hub Services component co-located?
- A. Workspace ONE Access
- B. Workspace ONE Intelligence
- C. Workspace ONE Airlift
- D. Workspace ONE UEM
Answer: A
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE/services/intelligent-hub_IDM/GUID-012E7722-FC83-4EF5-8ADD-2457E29720FE.html
NEW QUESTION # 36
Which type of design is a diagram that includes network zones, network components, server locations, and hardware recommendations?
- A. Physical
- B. Theoretical
- C. Logical
- D. Conceptual
Answer: A
NEW QUESTION # 37
Users are reporting to IT they are getting an error when attempting to launch mobile apps that require VPN to access.
Which command would an IT Administrator need to run to check the status of the Tunnel Per-App VPN service on the Unified Access Gateway (UAG)?
- A. service status pavpn
- B. systemctl status vpnd
- C. systemctl status pavpn
- D. service status vpnd
Answer: B
NEW QUESTION # 38
A customer has decided to use VMware Workspace ONE as their primary SAAS solution for endpoint management. The customer's security team requires all infrastructure to support High Availability (HA).
Which two components of Workspace ONE will need to be maintained by the customer? (Choose two.)
- A. Unified Access Gateway
- B. Workspace ONE Database
- C. Device Services Server
- D. Console Services Servers
- E. AirWatch Cloud Connector
Answer: A,E
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/AirWatch_Cloud_Connector/GUID-AWT-ACC-REQSONPREM.html?hWord=N4IghgNiBcIQ9mAJgAgEaTAOwMYFMUcEBXVHeLLPHAF3gCcQBfIA
NEW QUESTION # 39
Which is required to suppress the Apple Enrollment Terms of Use (TOU) for agreement prior to iOS device management?
- A. Configure DEP
- B. Configure post-registration TOU
- C. Configure Apple VPP
- D. Configure pre-registration TOU
Answer: A
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/1912/WS1EX/GUID-AWT-COMPLETEENROLLPROFILE.html
NEW QUESTION # 40
Which is the VMware recommended persistence mode for load balanced VMware Unified Access Gateway servers?
- A. Source IP-based Persistence
- B. Destination IP-based Persistence
- C. SSL Session Persistence
- D. Cookie Persistence
Answer: A
NEW QUESTION # 41
Which of the following is a prerequisite to deploy VMware Unified Access Gateway OVF?
- A. VMware vSphere
- B. VMware Fusion
- C. VMware Workstation
- D. VMware Horizon
Answer: A
NEW QUESTION # 42
Which is required to deliver a Check In, Check Out experience on an Android Device?
- A. Deliver Launcher profile to the end-user.
- B. Block open enrollment into Workspace ONE UEM.
- C. Enable VMware Workspace ONE Intelligence.
- D. Use a basic user as a staging account.
Answer: A
Explanation:
https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/Boxer_Admin_Guide/GUID-CD118E94-18F2-4BB2-AAA7-C3673066E209.html#:~:text=Workspace%20ONE%20Boxer%20supports%20Check,in%20process%20for%20CICO%20users.
NEW QUESTION # 43
Refer to the Exhibit.
An administrator has set up an iOS compliance policy for unwanted apps.
Which of the following is the expected behavior when Workspace ONE UEM receives the app sample indicating the presence of the unwanted app?
- A. After 1 day, end user will receive the push notification.
- B. The concerned device will be unenrolled.
- C. The concerned device will be marked as Non-compliant immediately.
- D. After 2 days, all managed apps will be blocked/removed from the concerned device.
Answer: D
NEW QUESTION # 44
......
Authentic Best resources for 5V0-63.21 Online Practice Exam: https://www.practicedump.com/5V0-63.21_actualtests.html
Get the superior quality 5V0-63.21 Dumps with explanations waiting just for you, get it now: https://drive.google.com/open?id=19s1USF7nT35A_DrfDtV25G32i9sxPcC5