5V0-62.19 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
An administrator wants to add Okta as a new Identity Provider.
Which two pieces of information are needed to enter in the New Identity Provider page? (Choose two.)

A.SAML AuthN Request Binding
B.Binding Certificate
C.Connector association
D.Connector Metadata
E.Authentication Methods

正解:

Question No : 2
Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
- The design must use the F5 Loadbalancer and should be as redundant as possible.
- Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
- ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
ACME continues to use directory services for authentication.

Which two ports are needed to be accessed from the Cloud Connector to the Workspace ONE UEM console server? (Choose two.)

A.TCP 2195
B.UDP 443
C.TCP 80
D.UDP 22
E.TCP 443

正解:

Question No : 3
Which Workspace ONE Android app is needed for Mobile SSO for Android?

A.VMware Tunnel configured with the Cloud Tunnel component installed.
B.VMware Tunnel configured with the Device Tunnel component installed.
C.VMware Tunnel configured with the User Tunnel component installed.
D.VMware Tunnel configured with the Per-App Tunnel component installed.

正解:

Question No : 4
The certproxy will be managed on which server when using it on-premises?

A.The cert proxy settings must be configured on the Workspace ONE UEM Admin console to manage the Android Mobile SSO requests.
B.The cert proxy settings must be configured on the VMware Identity Manager in the appliance settings to manage the Android Mobile SSO requests.
C.The cert proxy settings must be configured on the Workspace ONE UEM Self Service portal to manage the Android Mobile SSO requests.
D.The cert proxy settings must be configured on the VMware UAG admin console to manage the Android Mobile SSO requests.

正解:

Question No : 5
An administrator wants to entitle users for Okta applications that are integrated into VMware Workspace ONE Identity Manager.
What needs to be configured?

A.Okta as an Built-in Service Provider
B.AD FS in VMware Identity Manager
C.Workspace ONE UEM integration in VMware Identity Manager
D.Okta application source in VMware Identity Manager

正解:

Question No : 6
An administrator wants to migrate a System Center Configuration Manager (SCCM) collection into a -managed stage in Workspace One UEM. Workspace ONE AirLift does not display the collection as mapped.
What is most likely the issue?

A.The collection is mapped to the wrong AP
B.The collection mapping is removed or the migration is completed and the ConfigMgr collection is no longer used.
C.The collection mapping is busy or the migration is failed.
D.The collection has at least one Windows 10 device.

正解:
Explanation:

Question No : 7
An administrator wants to integrate VMware Identity Manager as a Federated Identity Provider for AD FS.
Which two steps need to be completed? (Choose two.)

A.Configure VMware Identity Manager as a Service Provider for AD F
B.Create a VMware Identity Manager claims Provider Trust in AD F
C.Exchange the certificates between Workspace ONE IDM and the domain controllers.
D.Integrate Workspace ONE federated applications with AD F
E.Redirect mobile users to VMware Identity Manager for authentication.

正解:

Question No : 8
An administrator plans to create a staged enrollment of devices in Workspace ONE UEM.
What is a possible solution that enables the administrator to onboard devices one department after another?

A.Device Restriction Policy
B.Restrict enrollment to Configured Groups
C.Restrict enrollment to Assignment Groups
D.Access Policy

正解:

Question No : 9
An administrator is adding an SaaS app to authenticate using SAML.
Which file does the administrator need to collect?

A.Config files for adding the SaaS app in Workspace ONE UE
B.Within the VMware Identity Manager locate the Service Provider (SP) metadata, save it as sp.xml and import it in the Saas APP where the administrator needs it for the SAML authentication.
C.Within the VMware Identity Manager, locate the Identity Provider (IdP) metadata, save it as idp.xml (sample file name), import it in the Saas APP where the administrator needs it for the SAML authentication.
D.Backup configuration files.

正解:

Question No : 10
Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
- The design must use the F5 Loadbalancer and should be as redundant as possible.
- Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
- ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
ACME requires multi-factor authentication for application access from external networks. This has been established with a default access policy that incorporates multi-factor authentication.
However, some users complain that they do not want to enter the multi-factor authentication when accessing the applications from within the company network.

How can the user experience be improved?

A.Create an access policy that excludes internal users.
B.Create an access policy that does not require multi-factor authentication when accessing from LA
C.Create an access policy with a network range of 80.34.57.20/21 that does not require multi-factor authentication.
D.Create an access policy with a network range of 172.16.0.0/16 that does not require multi-factor authentication.

正解:

Question No : 11
Which three steps need to be completed to configure Identity Bridging for an SAML application on the VMWare UAG? (Choose three.)

A.An identity provider is configured and the SAML metadata of the identity provider saved.
B.SAML responses from IDP to SP contain SAML assertions which have SAML attribute.
C.Configure a Web Reverse Proxy for Identity Bridging - Certificate to Kerberos.
D.Replace the UAG Certificate with the SAML Certificate.
E.Pin the UAG certificate to the SAML provider.
F.SAML responses are expected from IDP for multiple SAML attributes.

正解:

Question No : 12
An administrator receives the following error message:
“404.idp.not.found”
Which authentication method change needs to be completed?

A.Navigate to the access policy rule settings, then select an authentication method that is passive.
B.Okta has to be configured as a third-party ID
C.Navigate to the access policy rule setting, then select an authentication method that is active and current.
D.AD FS has to be configured as a third-party ID

正解:

Question No : 13
What is required to configure VMware Horizon View to connect to VMware Identity Manager?

A.Add a SAML connector.
B.Add a OAUTH2 connector.
C.Add a SAML authenticator.
D.Add a OAUTH2 authenticator.

正解:

Question No : 14
Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
- The design must use the F5 Loadbalancer and should be as redundant as possible.
- Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
- ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date
Which component needs to be implemented if ACME wants to a seamlessly login into the Horizon View Desktop when accessing it externally with a certificate-based authentication?

A.True SSO
B.Security Server
C.Provisioning Server
D.Integration Broker

正解:

Question No : 15
An architect is planning a design for a Workspace ONE deployment that will use Kerberos for integrated windows authentication. A requirement of the solution is that all authentication methods must be highly available.
Which two solution components are necessary to support the design requirement? (Choose two).

A.Connectors deployed behind load-balancer
B.Directory type must be set to Active Directory with IWA
C.IdP Hostname set to load-balancer FQDN
D.Redirect Host Name set to load-balancer FQDN
E.Connectors deployed in Outbound Mode

正解:

VMware 5V0-62.19 問題練習