Workspace ONE Engineer - ExtendedPractice Test

• Strategy and planning of device enrollment settings
• Identify smart groups for platform, device, or user

Perform advanced Workspace ONE UEM console administration

• Design configuration profiles based on use cases
• Configure Intelligence Hub settings

• Analyze customer requirements and create appropriate smart groups
• Create profile payloads for each device platform

• Integrate enterprise service components (ACC, UAG, ADCS, CA, etc.)
• Install the ACC software
• Integrate an on-premises directory and certificate services
• Implement the Tunnel service and VPN profile using the Tunnel component (UAG or container)
• Implement the SEG service and email profile using the UAG component
• Create a profile that will enable a device to access a wireless network using an identity defined within a certificate

• Evaluate the concept of conditional access for different risk scenarios
• Within the Omnissa Access console, enable User Risk Scores and implement the usage of those scores within a policy rule
• Perform the integration between Workspace ONE UEM and Microsoft Entra Conditional Access

• Differentiate authentication methods (Connector, Cloud-based, 3rd-party IDP) and justify their use cases
• Implement a Password (Cloud deployment) access policy rule within Workspace ONE Access
• Implement a 3rd party IDP and create an access policy rule leveraging that IDP
• Create an Access policy rule that steps up authentication requirements based on user's network location

• Diagram the workflow of password-based authentication (cloud deployment)
• Indicate the steps required to implement a Password (Cloud deployment) Access policy

• Implement cloud deployment authentication methods (RADIUS, RSA, SSO, etc.)
• Indicate the steps required to implement a RADIUS Access policy

• Configure Mobile SSO for iOS and Android
• Demonstrate the effectiveness and advantages of implementing Mobile SSO
• Create a Mobile SSO policy rule within Omnissa Access

• Design an LDAP directory integration workflow for Workspace ONE Access, including troubleshooting steps for common sync failures
• Indicate the steps required to implement a new Active Directory domain within Omnissa Access
• Demonstrate within the Omnissa Access console where an admin can find sync failures

• Configure and manage device email in a Workspace ONE solution
• Construct email workflow by determining whether configuration will be direct or flow through a UAG/Mail Gateway for user access
• Employ conditional access policy using Omnissa Access to grant/deny email access

• Configure and manage content sharing in a Workspace ONE solution
• Construct content access workflow by creating administrative or user content repositories

• Conduct alternative application management methods in a Workspace ONE solution
• Configure integration between Workspace ONE UEM and Apple Business Manager (ABM/VPP)
• Configure integration between Workspace ONE UEM and Google EMM
• Build an Application Assignment in the Purchased section of Resources->Applications in the UEM Console
• Connect to the Google Play Store through the Workspace ONE UEM console and approve applications for use

• Perform application management in a Workspace ONE solution
• Illustrate deployment of an Internal Application
• Illustrate deployment of a Native Application
• Employ the Enterprise Application Repository (EAR) to deploy managed third-party applications
• Illustrate the ability to remove applications from devices

• Configure email settings in a Workspace ONE solution
• Configure Boxer Application Profile including email configurations settings (O365, SMTP, etc.)
• Configure Native email applications via profile across multiple OS platforms

• Configure content sharing in a Workspace ONE solution
• Configure Admin Content Repositories
• Configure User Content Repositories

• Configure patch management life cycle across multiple OS platforms (iOS, Android, Windows, etc.)
• Configure and manage Android OS updates
• Configure and manage iOS updates
• Configure and manage macOS updates
• Configured Zebra Lifeguard OTA updates
• Configure and manage Windows updates

• Configure application update policy across native Omnissa and Third-Party Applications
• Configure and deploy updated third party applications (Be aware of versioning)

• Categorize resource types and configure them in the Workspace ONE Hub catalog
• Navigate to Hub Services and configure self-service settings
• Navigate to Hub Services and configure App Catalog settings

• Diagnosed Workspace ONE UEM component Issues
• Test connection for UAG and ACC
• Test connection for WS1 UEM and Omnissa Access
• Access UAG server and ensure all services (Tunnel, SEG, Content Gateway) are running
• Access ACC server and ensure service is running
• Inspect configuration of UAG in WS1 Console
• Inspect configuration of ACC in WS1 console

• Diagnose Omnissa Access component issues
• Inspect 3rd party auth source configuration and test connectivity
• Test MFA solutions
• Inspect Mobile SSO configurations and status
• Ensure Omnissa Access Connector Service is running

• Resolve Device and Endpoint Problems
• Utilize Workspace ONE Assist to remotely access devices
• Create and edit profiles to resolve issues
• Create and edit compliance policies to resolve issues
• Inspect relevant devices and Hub logs for affected devices

• Investigate third-party Infrastructure Components
• Test connectivity to 3rd party components
• Inspect and mitigate issues with API communications from and to 3rd party components
• Inspect configuration of Intelligence integrations and automations with 3rd party components (ServiceNow, Salesforce, etc.)

• Troubleshoot Application and Email Management
• Inspect application assignment
• Inspect application installation status
• Inspect app config
• Inspect app version
• Inspect email profile payload
• Inspect email profile installation status
• Inspect email profile assignment
• Inspect email configuration in Workspace ONE Console

• Leverage Troubleshooting Tools (Assist, logs, Intelligence support, adv reports)
• Identify pertinent logs for troubleshooting (device logs, targeted DS logging, Hub logs)
• Utilize Workspace ONE Assist to view device screen
• Utilize Workspace ONE Intelligence and DEX dashboards and reports to analyze trends in device issues
• Create integration with Syslog to export logs to 3rd party log analysis tool

• Illustrate your understanding of conditional access and security policies
• Identify Conditional Access integration options and requirements
• Evaluate impact of security policies at device and app level
• Evaluate impact of Conditional Access policies

• Assess risk scoring using Workspace ONE Intelligence Risk Analytics
• Evaluate Organization risk scores and components
• Identify Risk based on device posture
• Identify Risk based on MTD integration
• Identify Risk based on Login behavior
• Identify Risk based on user behavior

• Evaluate third-party solutions in the Workspace ONE Intelligence Trust Network
• List built-in 3rd party integrations in WS1 Intelligence
• Review custom integration capabilities in WS1 Intelligence
• Evaluate options for integrating 3rd party and Omnissa data into workflows

• Monitor device health metrics
• Inspect Dashboard for Last Seen, Compromised, etc.
• Inspect Device Details page for Compliance, profile, app status

• Collect and interpret UEM logs to identify trends (e.g., enrollment failures)
• Inspect Console Events logs
• Inspect Device Events logs
• Inspective Device Commands and Troubleshooting logs

• Customize Workspace ONE Intelligence dashboards and reports for operational insights
• Examine enrollment trends, compliance, device physical health (battery, memory, etc.), app usage
• Create custom reports to monitor a specific device parameter

• Optimize third-party integrations with Workspace ONE Intelligence for data automation
• Build a workflow to utilize a 3rd party service and Intelligence data for automated actions, e.g., ServiceNow

• Enable and configure Hub Services
• Configure branding within Hub Services
• Configure the App Catalog settings within Hub Services

• Design custom device workflow using Freestyle Orchestrator
• Deploy a profile and applications using if/then conditions for a particular device type within Freestyle Orchestrator

• Integrate Workspace ONE UEM with Omnissa Access and validate the workflow
• Perform the integration steps between Workspace ONE UEM and Omnissa Access and verify a device that can properly enroll using Omnissa Access as the source of authentication

• Develop an OAuth 2.0 authentication flow for a web application
• Perform an integration of ServiceNow with Omnissa Access

• Configure OpenID Connect and SAML authentication workflows
• Perform an integration of Okta with Omnissa Access

• Employ third-party data sharing with Workspace ONE Intelligence
• Create an Intelligence custom connector with ServiceNow

• Construct a Workspace ONE API call for a specific use case
• Query a device's installed applications using an API

• Setup Omnissa Connect using SAML and SCIM
• Configure the federation of Omnissa Connect with Microsoft Entra to enable console access for admins
• Configure SCIM integration for End User Management with Omnissa Identity Service within Omnissa Connect