[2025年06月]更新の5V0-63.23試験資料VMware学習ガイド
有効な問題最新版を試そう5V0-63.23テスト解釈5V0-63.23有効な試験ガイド
質問 # 37
A company using Mobile SSO would like to avoid deploying an additional connector for Workspace ONE. They currently do not have a use case for Virtual Apps or advanced authentication such as kerberos, RDA SecureID or Radius.
Which configuration can be used to sync users and groups with a single connector of Workspace ONE?
- A. Directory Sync from Workspace ONE Intelligence to Workspace ONE Access
- B. Directory Sync from Workspace ONE Assist to Workspace ONE Access
- C. Directory Sync from Workspace ONE UEM to Workspace ONE Access
- D. Directory Sync from Workspace ONE Access to Workspace ONE Unified Access Gateway
正解：C
解説：
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-
Access/20.01/ws1_access_authentication.pdf (13)
質問 # 38
When configuring a Certificate Authority in Workspace ONE, which three protocols are supported?
(Choose three.)
- A. CMP
- B. EST
- C. PKI
- D. ADCS
- E. SCEP
正解：C、D、E
質問 # 39
A customer intends to implement Android device management in their environment.
Which three enrollment options would result in an end-user experience in which a dedicated container is created on the device for only business applications and contents? (Choose three.)
- A. Work Managed Device
- B. Device Enrollment Program (DEP)
- C. Corporate Owned Personally Enabled (COPE)
- D. Knox Container
- E. Legacy enrolled
- F. Work Profile
正解：A、C、F
質問 # 40
In the App Volumes Manager interface, which two objects can an administrator select to assign Windows software to users? (Choose two.)
- A. application
- B. version
- C. directory
- D. module
- E. package
正解：A、B
質問 # 41
What is the VMware recommended practice if you want to apply specific Conditional Access to all your Apple iOS devices regardless of browser or application used on the Apple iOS devices?
- A. Prioritize Apple iOS platform in Access Policies in the VMware Identity Manager Console
- B. Remove other access rules from Access Policies except the Apple iOS access rule
- C. Create a brand new Access Policy to only contain Apple iOS specific access rules
- D. Create a custom AirWatch SDK profile and assign it to the Apple iOS devices
正解：C
質問 # 42
An administrator is troubleshooting the Per-App VPN function in the VMware Tunnel and runs the following command:
openssl s_client -showcerts -connect <TunnelHostname>:8443.
They notice that the response is the certificate from their firewall and not the certificate from the Tunnel server.
What remediation step should be taken?
- A. The VMware Tunnel should be re-configured to use the certificate from the firewall
- B. The VMware Tunnel should be re-configured to trust the certificate from the firewall
- C. The VMware Tunnel SSL traffic needs to pass through the firewall unmodified
- D. The VMware Tunnel Certificate should be exported from the console and uploaded to the firewall
正解：B
質問 # 43
An administrator is preparing to setup email management for Office 365 in UEM.
Which is VMware's recommended email deployment model for this scenario?
- A. Proxy
- B. Direct
- C. Indirect
- D. VPN
正解：B
解説：
https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/WS1_MEM_Doc.pdf
質問 # 44
An administrator wants to leverage the Workspace ONE Web application to allow end-user credentials to be passed to specific internal sites.
Which security policy in Workspace ONE UEM must be configured?
- A. Offline Access
- B. Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-
UEM/services/WS1_Web_Guide.pdf
44.Which three are features of the ENS v2? (Choose three.)
A. Supports most existing corporate file servers.
B. Provides email notification for Exchange Active Sync.
C. Secures access to internal content repositories.
D. Updates the badge count for an unread email.
E. Triggers a background sync on Workspace ONE Boxer. - C. Single Sign-On
- D. Network Access Control
- E. Integrated Authentication
正解：C
解説：
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/WS1_ENS2_Doc.pdf
質問 # 45
Which Workspace ONE UEM feature can assist in sending event log information to a Security Information and Event Management (SIEM) tool?
- A. File Storage Integration
- B. Syslog Integration
- C. Relay Server Integration
- D. Certificate Authority Integration
正解：B
解説：
During syslog configuration, you can opt to send Console events, Device events, or both. Any events generated by the AirWatch Console are sent to your SIEM tool according to the scheduler settings.
Syslog can be configured for both on-premises and SaaS deployments.
質問 # 46
Which Workspace ONE productivity application enables delivery of PDFs to enrolled devices?
- A. Workspace ONE Content
- B. Workspace ONE Intelligent Hub
- C. Workspace ONE Web
- D. Workspace ONE Tunnel
正解：D
質問 # 47
What product from Workspace ONE needs to be enabled to provide administrators a flexible method for alerting and informing end-users?
- A. VMware Tunnel
- B. AirWatch Cloud Connector
- C. Workspace ONE Intelligence
- D. Workspace ONE Hub Services
正解：D
解説：
Reference: https://techzone.vmware.com/automating-notifications-workspace-one-operational- tutorial#_1267872
質問 # 48
When using Workspace ONE 20.x and higher, which three ways can an administrator using UEM automatically move devices into specified organization groups? (Choose three.)
- A. IP-based mappings
- B. location based mappings
- C. user group mappings
- D. device type mappings
- E. device ownership mappings
正解：A、C、E
解説：
According to documentation (link below) you can do Device Assignments, User Group Assignments and IP Range Assignments. https://docs.vmware.com/en/VMware-Workspace-ONE- UEM/2011/WS1_UEM_Managing_Devices.pdf
質問 # 49 
31.Which three can be used to enforce conditional access in Workspace ONE? (Choose three.)
A. device ownership type
B. device enrollment method
C. device platform
D. application specific
E. network range
F. user-based role
正解：
解説：
CDE
Explanation:
https://blogs.vmware.com/euc/2021/01/vmware-workspace-one-delivers-improved-multi-factor- authentication.html#:~:text=%20Workspace%20ONE%20can%20make%20conditional%20access%20d ecisions,access%3F%20Internal%2C%20external%2C%20high%20security%2C%20etc.%3F%20More
%20 And page 562 of manual WS1
質問 # 50
Users are reporting to IT they are getting an error when attempting to launch mobile apps that require VPN to access.
Which command would an IT Administrator need to run to check the status of the Tunnel Per-App VPN service on the Unified Access Gateway (UAG)?
- A. systemctl status pavpn
- B. service status vpnd
- C. service status pavpn
- D. systemctl status vpnd
正解：D
質問 # 51
An administrator would like to customize their admin consoles default branding to include the company logo and reflect the company's text color and background.
How would the administrator accomplish this task?
- A. Navigate to UEM Console, All Settings. System. Branding. Click Branding and edit the settings in the Branding page as appropriate.
- B. Navigate to the Hub Service console Home page. Click Branding. Edit the settings in the Branding page as appropriate.
- C. Navigate to the Configurations tab on the console. Click Branding. Edit the settings in the Branding page as appropriate.
- D. Navigate to UEM Console. All Settings. Hub Services. Click Branding and edit the settings in the Branding page as appropriate.
正解：A
質問 # 52
An administrator would like to track these details for all Windows desktops managed by Workspace ONE UEM:
driver details for a mouse driver
warranty information for OS
registry value of internal apps
Which Workspace ONE UEM utility can the administrator use?
- A. Create LGPO and assign to Windows devices.
- B. Create Application Control profile and assign to Windows devices.
- C. Create sensors and assign to Windows devices.
- D. Create an OEM update profile and assign to Windows devices.
正解：C
解説：
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-
UEM/services/Windows_Desktop_Device_Management/GUID-uemWindeskSensors.html
質問 # 53
Which three are features of the Workspace ONE Content Gateway service? (Choose three.)
- A. Provides health status on external repositories
- B. Support for most corporate file servers.
- C. Explanation:
Reference: https://techzone.vmware.com/configuring-edge-services-vmware-unified-access-gateway- vmware-workspace-one-operational-tutorial#_984128
23.Which is used to authenticate and encrypt traffic from individual applications on compliant devices to internal resources?
A. VMware Tunnel
B. Device Compliance
C. Workspace ONE Intelligence
D. Email Notification Service - D. Encrypted communications using SSUTLS.
- E. Provides email notification for Exchange mail.
- F. Secure access to internal repositories.
正解：B、D、F
質問 # 54
Which Security Assertion Markup Language (SAML) configuration item is a pre-requisite to creating a third party identity provider in Workspace ONE Access?
- A. SAML Metadata
- B. SAML Assertion
- C. SAML AuthN Context
- D. SAML AuthN Request
正解：A
解説：
https://docs.vmware.com/en/VMware-Workspace-ONE-Access/20.01/ws1_access_authentication/GUID-
0C459D5A-A0FF-4893-87A0-10ADDC4E1B8D.html
- here one of the prerequisites is: Obtain the appropriate third-party metadata information to add when you configure the identity provider in the Workspace ONE Access console. The metadata information you obtain from the third-party instance is either the URL to the metadata or the actual metadata.
質問 # 55
Refer to the Exhibit.
An administrator has set up an iOS compliance policy for unwanted apps.
Which of the following is the expected behavior when Workspace ONE UEM receives the app sample indicating the presence of the unwanted app?
- A. The concerned device will be marked as Non-compliant immediately.
- B. After 2 days, all managed apps will be blocked/removed from the concerned device.
- C. The concerned device will be unenrolled.
- D. After 1 day, end user will receive the push notification.
正解：B
質問 # 56
A Workspace ONE UEM administrator is migrating collections, applications, and policies from SCCM to Workspace ONE.
When using AirLift, which three of the following must the administrator allow AirLift to access on the ConfigMgr server? (Choose three.)
- A. Interactive Login Permissions
- B. Port 443 or specified TLS port if Secure Connection is configured
- C. Port 389 for Active Directory
- D. WinRM port (typically 5985)
- E. Port 3268 or the specified Global Catalog port
正解：A、B、D
解説：
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-
UEM/services/WS1_AirLift_Configuration.pdf (7)
質問 # 57
An administrator noticed after syncing sAMAccountName as EnrollmentUser and syncing in an administrator group, that users are unable to log in with sAMAccountName.
What could be the cause of the issue?
- A. Admins need to apply <domain>\sAMAccountName as their username.
- B. Admins need to sign in with their UPN as their username.
- C. Admins need to have the role admin to be allowed to log in.
- D. Admins need to apply <domain>\fullName as their username.
正解：C
質問 # 58
Which three configuration changes must be made to use an enterprise Certificate Authority (CA) for Mobile SSO with iOS devices? (Choose three.)
- A. Modify Workspace ONE authentication policies to use enterprise CA
- B. Integrate 3rd party Certificate Authority (CA) with Workspace ONE UEM console
- C. Modify Mobile SSO profiles to use enterprise CA
- D. Configure VMware Tunnel network traffic rules to allow access to enterprise CA
- E. Configure Mobile SSO adapters in Workspace ONE to trust enterprise CA
- F. Configure mobile application records in Workspace ONE to trust enterprise CA
正解：A、B、C
解説：
Configure Active Directory Certificate Authority in AirWatch https://docs.vmware.com/en/VMware- Workspace-ONE/services/aw-vidm-ws1integration-/GUID-C0308F39-AC0F-42F6-B672-
1C8D3BFEDE26.html
Configure Apple iOS Profile in AirWatch Using Active Directory Certificate Authority and Certificate Template
https://docs.vmware.com/en/VMware-Workspace-ONE/services/aw-vidm-ws1integration-/GUID-
1AEB8F12-4C3C-49EE-A1C2-5F742B13F2F6.html
Configure Mobile SSO for iOS Authentication
https://docs.vmware.com/en/VMware-Workspace-ONE/services/aw-vidm-ws1integration-/GUID-
59D589F7-55A4-4F96-AC04-D9A498DF3CCE.html
質問 # 59
Which of the following authentication methods is needed to be enabled/configured for an administrator to leverage Day Zero Onboarding?
- A. Verify (Intelligent Hub)
- B. FID02
- C. Certificate-based authentication
- D. Token Auth Adapter
- E. Workspace ONE UEM External Access Token
正解：D
解説：
Reference: https://docs.vmware.com/en/VMware-Workspace-
ONE/services/VMware_Workspace_ONEHub_onboarding_pre-hires/GUID-1DB5A54E-2F72-4629-
97C8-F456BBDB7F5E.html
https://docs.vmware.com/en/VMware-Workspace-
ONE/services/VMware_Workspace_ONEHub_onboarding_pre-hires/GUID-51B88155-B9AA-4B78- A6E6-7F59D74F9CED.html
質問 # 60
Which platform is responsible for securing external access to Horizon desktops and applications?
- A. Unified Access Gateway
- B. VMware: AppDefense
- C. Horizon Cloud Connector
- D. VMvware Tunnel
正解：A
質問 # 61
Which two Workspace ONE edge services on Unified Access Gateway does VMware require to use
3rd party SSL certificates? (Choose two.)
- A. Device Services
- B. Content Gateway
- C. Tunnel Per-App VPN
- D. Tunnel Proxy
- E. Secure Email Gateway
正解：B、C
解説：
Reference: https://techzone.vmware.com/configuring-vmware-tunnel-edge-service-workspace-one- operational-tutorial#_1064031
質問 # 62
......
5V0-63.23試験問題と解答：https://www.passtest.jp/VMware/5V0-63.23-shiken.html
5V0-63.23実際の問題解答PDFは100%カバー率でリアル試験問題：https://drive.google.com/open?id=1eDTx_Rk41aKd4OzjDsLpzAs--MIIkA_v