Free OCE-W sample questions

Correct answer: To securely publish S/MIME certificates to the Workspace ONE Boxer app from an internal CA without exposing the CA directly.

The Escrow Gateway is a specific component (often hosted on UAG or separate) used to retrieve S/MIME private keys/certs from an internal source and deliver them securely to the Boxer mail client for email encryption/signing.

Correct answer: False

In a SaaS (Cloud) environment, Omnissa (the vendor) manages all backend infrastructure updates, including the database schema. The customer is only responsible for updating their on-prem connectors (ACC, UAG).

Correct answer: Monitor > Events and Logs > Console Events

Console events record actions taken in the Workspace ONE UEM console, including login sessions, failed logins, admin actions and system settings changes. A change to a device setting therefore appears there with the admin who made it. The path is Monitor > Events and Logs > Console Events. Device events record MDM commands and device responses.

Correct answer: Managed applications, profiles, and certificates pushed by UEM.

An Enterprise Wipe only removes corporate data (managed apps, profiles, certs, email) leaving personal photos, contacts, and unmanaged apps intact. A Device Wipe (Factory Reset) removes everything.

Correct answer: To cache query results in memory so UEM servers can avoid repeated database queries, reducing database workload.

Memcached is a third-party distributed data caching application for Workspace ONE UEM. Before querying the database, UEM checks Memcached for stored results, which reduces the database workload. It is aimed at installations with 5,000+ devices, is available for SaaS and on-premises, and is configured at Groups & Settings > All Settings > Installation > Cache Settings (port 11211). It is not a form of backup or redundancy.

Correct answers: Mobile SSO (for iOS); Certificate (Cloud Deployment)

The built-in identity provider authentication methods that can be chained with Device Compliance (with Workspace ONE UEM) are Mobile SSO (for iOS), Mobile SSO (for Android), and Certificate (Cloud Deployment). The authentication method must come before the device compliance method in the rule.

The built-in identity provider authentication methods that can be chained with Device Compliance (with Workspace ONE UEM) are Mobile SSO (for iOS), Mobile SSO (for Android), and Certificate (Cloud Deployment). The authentication method must come before the device compliance method in the rule.

Correct answer: Update the default Access Policy (or relevant app policies) to include the new Third-Party IDP authentication method in the policy rules.

Simply adding the Identity Provider makes it available, but not active. You must update the Access Policies to use this new authentication method (e.g., 'Okta Auth') as the primary or fallback method for the relevant network ranges or apps.

Correct answer: Workspace ONE Intelligence

Workspace ONE Intelligence aggregates data from UEM, Access, and Trust Network partners to calculate User and Device Risk Scores. Omnissa Access then consumes these scores to make conditional access decisions.