2V0-62-23 Workspace ONE 22.X Professional Practice Questions

A manufacturing company uses rugged Android devices on its factory floor. The devices are enrolled as Android Enterprise 'Work Managed' devices. The company needs to deploy a new in-house application (.apk file) to these devices without making it available on the public Google Play Store. Which three steps are required to achieve this? (Select THREE)

Case Study:

A healthcare organization, WellCare, uses Workspace ONE to manage thousands of devices, including shared iPads for patient charting and corporate iPhones for doctors. They have a strict security policy enforced by Workspace ONE Intelligence. Recently, the security team has identified a new threat and needs to implement an immediate, automated response.

Current Setup:

• Workspace ONE UEM is integrated with Workspace ONE Intelligence.
• A compliance policy in UEM marks devices with outdated OS versions as 'non-compliant'.
• A third-party security tool, ThreatDetect, is integrated with Intelligence. ThreatDetect can identify devices with malicious activity and reports a risk score to Intelligence.

New Requirement:
An automated workflow must be created in Workspace ONE Intelligence that triggers under two specific conditions:

1. If a device's risk score from ThreatDetect is 'High'.
2. If a device is marked as 'non-compliant' in UEM due to an OS version that is more than two major versions old (e.g., running iOS 15 when iOS 17 is current).

When either of these conditions is met, the workflow must immediately perform two actions:

1. Revoke all authentication tokens for the user of the device via Workspace ONE Access.
2. Add a tag named 'High-Risk-Quarantine' to the device object in UEM.

Which components of Workspace ONE Intelligence are required to build this specific workflow?

A consultant is designing a Workspace ONE UEM deployment for a client who requires high availability for their on-premises Device Services servers. The design includes two Device Services servers behind a load balancer. Which load balancer persistence method is required for proper function?

The help desk reports that multiple macOS users are unable to enroll their devices. During enrollment via Intelligent Hub, they receive an error immediately after authenticating, stating 'Profile Installation Failed'. The administrator confirms that the APNs certificate is valid and other device platforms are enrolling successfully. Which is the most likely cause of this specific macOS enrollment issue?

Which three components are required to configure Single Sign-On from a managed iOS device to a SAML-enabled web application, using Workspace ONE as the identity provider? (Select THREE)

A financial services firm is deploying VMware Workspace ONE Tunnel for per-app VPN access to internal resources. The security team mandates that only corporate-approved applications on compliant iOS devices can establish a tunnel. An administrator has configured the Tunnel profile in Workspace ONE UEM and assigned it. However, users report that while the Tunnel application installs, it fails to connect. The UEM compliance engine shows the devices as compliant. Which configuration step in Workspace ONE Access is most likely missing?

A retail company is using Workspace ONE UEM to manage shared Android devices in its stores. The devices are configured in Kiosk Mode using a Launcher profile. The IT team needs to ensure that if a device's battery level drops below 15% or if it has not synced with the UEM server in over 24 hours, specific actions are taken. Which two features must be configured to meet these requirements? (Select TWO)

True or False: When using Workspace ONE UEM to deploy Windows Updates via Baselines, the feature relies on devices being able to reach Microsoft's public Windows Update for Business (WUfB) services, and it cannot source update payloads from an on-premises WSUS server.

A hospital is leveraging Freestyle Orchestrator in Workspace ONE to automate complex onboarding workflows for clinician-used iPads. A new requirement is to deploy a specific set of clinical applications ONLY after confirming that the device has been successfully encrypted. The workflow should also notify the security team via a webhook if the encryption check fails. The administrator has built the following logical workflow:

┌───────────────────┐
│ Trigger: │
│ Device Enrolled │
└────────┬──────────┘
│
▼
┌───────────────────┐
│ Condition: │
│ Is Encrypted? │
└────────┬──────────┘
│
┌───────┴───────┐
│ Yes │ No
▼ ▼
┌──────────┐ ┌───────────────────┐
│ Install │ │ Send Webhook to │
│ App Set A│ │ Security Team │
└──────────┘ └───────────────────┘

During testing, the administrator observes that for newly enrolled iPads, the workflow immediately branches to the 'No' path and sends the webhook, even though the devices report as encrypted in the UEM console a few minutes later. What is the most likely cause of this behavior?

The command Get-WorkspaceONEGroup -Search 'Finance' is executed using the Workspace ONE UEM PowerShell module. What is the expected output of this command?