VMware VMware Certifications 2V0-61.19 Questions & Answers

• Question 81:

  An administrator is troubleshooting the Per-App VPN function in the VMware Tunnel and runs the following command:

  openssl s_client -showcerts -connect :8443.

  They notice that the response is the certificate from their firewall and not the certificate from the Tunnel server.

  What remediation step should be taken?

  A. The VMware Tunnel should be re-configured to use the certificate from the firewall

  B. The VMware Tunnel SSL traffic needs to pass through the firewall unmodified

  C. The VMware Tunnel should be re-configured to trust the certificate from the firewall

  D. The VMware Tunnel Certificate should be exported from the console and uploaded to the firewall

  Correct Answer: C

• Question 82:

  What role does vIDM support in an OpenID Connect (OIDC) authentication flow?

  A. Relying Party

  B. Resource Server

  C. User-Agent

  D. OpenID Provider

  Correct Answer: C

• Question 83:

  Which report will give information about source IP when troubleshooting a network access policy in vIDM?

  A. Group membership

  B. Resource Entitlements

  C. Role membership

  D. Audit Events

  Correct Answer: D

  Reference: https://docs.vmware.com/en/VMware-Identity-Manager/3.2/idm-aw-administrator.pdf

• Question 84:

  What is the VMware recommended practice if you want to apply specific Conditional Access to all your Apple iOS devices regardless of browser or application used on the Apple iOS devices?

  A. Create a brand new Access Policy to only contain Apple iOS specific access rules

  B. Prioritize Apple iOS platform in Access Policies in the VMware Identity Manager Console

  C. Remove other access rules from Access Policies except the Apple iOS access rule

  D. Create a custom AirWatch SDK profile and assign it to the Apple iOS devices

  Correct Answer: D

• Question 85:

  Which Workspace ONE component can be integrated with VMware NSX to implement network micro-segmentation?

  A. VMware Tunnel

  B. VMware AirWatch Content Gateway

  C. VMware Identity Manager Connector

  D. VMware AirWatch Secure Email Gateway

  Correct Answer: A

• Question 86:

  Which URL would an administrator use to download Unified Access Gateway logs without logging in?

  A. https://:9443/rest/v1/monitor.7z

  B. https://:9443/rest/v1/monitor/zip

  C. https://:9443/rest/v1/monitor/support-archive

  D. https://:9443/rest/v1/monitor/tar.gz

  Correct Answer: B

• Question 87:

  What VMware client application is used for Android Mobile SSO, and what authentication method is utilized by this application?

  A. Workspace ONE Web and Certificate Authentication

  B. VMware Tunnel and Certificate Authentication

  C. Workspace ONE Intelligence Hub and Kerberos

  D. VMware Tunnel and Kerberos

  Correct Answer: A

  Reference: https://pubs.vmware.com/workspace_one_aw-91/index.jsp?topic=%2Fcom.vmware.aw-vidm-ws1integration-911%2FGUID-1E5128A5-1394-4A50-8098-947780E38166.html

• Question 88:

  A customer has Office 365 that is accessible to all devices for both OWA and Active Sync. The customer wishes to restrict email access so that email is only allowed on Workspace One Managed Devices.

  What are two VMware Recommended technologies to achieve this? (Choose two.)

  A. VMware Secure Email Gateway

  B. VMware Identity Manager

  C. AirWatch Cloud Connector

  D. VMware Tunnel

  E. PowerShell Integration

  Correct Answer: AE

• Question 89:

  When using Okta as a 3rd Party IdP with Workspace ONE, which party owns the entitlement of resources in Workspace ONE?

  A. Workspace ONE

  B. Okta

  C. SAML

  D. OAuth

  Correct Answer: B

• Question 90:

  Which two email management technologies allow you to enforce data loss prevention? (Choose two.)

  A. PowerShell Integration

  B. Secure Email Gateway

  C. Direct Google Sync Integration

  D. VMware Workspace ONE Boxer

  E. Conditional Access

  Correct Answer: DE