1125 お客様のコメント
質問 1：
Refer to the ACME Financials design use case.
ACME Financials Design Use Case
1. Introduction
1.1 Business Overview
ACME Financials is an investment firm that has established itself as a leader in USA's fast-moving financial asset management market and has around 1000 employees.
ACME plans to transform its end-user computing resources to the digital workspace. ACME wants a secure platform that is available from any device and from anywhere, as well as a solution that reduces operating costs.
ACME's major business driver for the digital workplace is to enable employees to work remotely, and to enable the secure access to all of its resources from anywhere and any device while enhancing security with multi-factor authentication. The solution should support its BYOD strategy and let remote employees use their own laptop, desktop, or mobile device to access the resources from any location.
ACME also wants to remove the need to supply and manage desktop hardware to external contractors.
Because financial data is highly sensitive, the firm needs a technology that would protect customer and other critical information - even when accessed on a mobile device. ACME is looking to improve the security of the desktop and application platforms across the enterprise. In addition to using endpoint security tools and multi-factor authentication, ACME insists on using additional security and controls to provide the highest level of security and protection to services and applications.
ACME currently uses a VPN-based remote access solution. ACME would like to remove additional components that add support or management complexity, and device dependence for remote access users.
ACME is looking to achieve the same access to virtual desktops and Windows 10 or mobile applications, both inside and outside of the ACME enterprise network.
ACME is very keen on enforcing standardization to keep the IT infrastructure as consistent as possible. IT wants to use standardized versions of Windows (Windows 10), consistent configurations, and application delivery from a central source. All while maintaining the compliance of every device that requires encryption, password and PIN protection, as well as update -and anti-virus control.
To simplify and standardize desktop and application delivery, ACME wants to offer a service catalog based approach based on ACME IT standards. This will allow ACME to effectively deliver and manage resources, allowing IT to deliver device and application services that meet business and technical needs, while maximizing the use of shared IT computing resources.
Additional Facts
* Speaking to the developers revealed that most apps are standardized apps from public app-stores, but ACME uses some their in-house developed, critical mobile apps, where some of the developers have already left the company, so that they cannot be rewritten in a short amount of time.
* To reduce operating costs, ACME has already moved to Office 365 and is currently running a few migrations from on-premises to the cloud for other applications.
* ACME's IT says that it is a Microsoft Windows only shop, but the assessment shows that currently most of the managers are using Apple devices.
* ACME currently uses directory services and two-factor authentication mechanisms (Radius) for internal and external access. ACME requires to support Single Sign-On (SSO) integration with their current authentication solutions. They also require to use SSO whenever possible, as they do not believe in having multiple user accounts and passwords for their end users.
* ACME wants the solution to provide mechanisms to provide a secure e-mail solution to any device that complies to global security standards even for BYO devices.
1.2 High Level User Classification
* 680 Office workers (call center, corporate and office administrators) use standardized PCs or Thin-Clients to access ACME's core apps and tools.
* 240 Remote-office workers use the company's CYOD initiative and use these devices (Notebooks, Convertibles, Tablets, Android phones) to access their apps and tools from remote.
* 30 Executives use Apple Mac Books as well as iPhones and iPads to work on- and off-premises.
* 80 IT -admins and software developers are using high-end workstations with administrative access.
1.3 High Level Application Assessment
* ACME currently has 261 applications, of which 186 are based on Microsoft Windows.
* Today, users are allocated applications via AD group membership.
* 75 applications are either web-based or SaaS-based, including Office 365.
* A major incident recently meant sales workers were disappearing suddenly along with their data and laptops on some new colonies.
* Any external access should require multi-factor authentication. Access from the internal network should work seamlessly with SSO for the core applications. High-security applications also require MFA from internal access.
The address ranges of the HQ datacenter are as follows:
172.16.0.0/16 internal
80.34.57.20/21 external
2. Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
* The design must use the F5 Loadbalancer and should be as redundant as possible.
* Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
* ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
Which three are physical design requirements in the Workspace ONE UEM design for ACME (Choose three.)
A. SAAS apps
B. vSphere ESXi hosts
C. Switches and router
D. Microsoft Storage Spaces
E. Devices
F. WEB apps
正解：C,D,E
質問 2：
An administrator receives the following error message:
"404.idp.not.found"
Which authentication method change needs to be completed?
A. Okta has to be configured as a third-party IDP.
B. Navigate to the access policy rule setting, then select an authentication method that is active and current.
C. Navigate to the access policy rule settings, then select an authentication method that is passive.
D. AD FS has to be configured as a third-party IDP.
正解：B
質問 3：
What are three requirements for a device that is already joined to Azure AD to enroll into Workspace ONE UEM? (Choose three.)
A. Windows Update services not started.
B. No MDM managed.
C. KB update 3176934 installed.
D. Windows 10 OS build 14393.82 and above.
E. User must be a member of the Console Admin Group.
F. No Azure AD account configured on the device.
正解：B,C,D
質問 4：
Refer to the ACME Financials design use case.
ACME Financials Design Use Case
1. Introduction
1.1 Business Overview
ACME Financials is an investment firm that has established itself as a leader in USA's fast-moving financial asset management market and has around 1000 employees.
ACME plans to transform its end-user computing resources to the digital workspace. ACME wants a secure platform that is available from any device and from anywhere, as well as a solution that reduces operating costs.
ACME's major business driver for the digital workplace is to enable employees to work remotely, and to enable the secure access to all of its resources from anywhere and any device while enhancing security with multi-factor authentication. The solution should support its BYOD strategy and let remote employees use their own laptop, desktop, or mobile device to access the resources from any location.
ACME also wants to remove the need to supply and manage desktop hardware to external contractors.
Because financial data is highly sensitive, the firm needs a technology that would protect customer and other critical information - even when accessed on a mobile device. ACME is looking to improve the security of the desktop and application platforms across the enterprise. In addition to using endpoint security tools and multi-factor authentication, ACME insists on using additional security and controls to provide the highest level of security and protection to services and applications.
ACME currently uses a VPN-based remote access solution. ACME would like to remove additional components that add support or management complexity, and device dependence for remote access users.
ACME is looking to achieve the same access to virtual desktops and Windows 10 or mobile applications, both inside and outside of the ACME enterprise network.
ACME is very keen on enforcing standardization to keep the IT infrastructure as consistent as possible. IT wants to use standardized versions of Windows (Windows 10), consistent configurations, and application delivery from a central source. All while maintaining the compliance of every device that requires encryption, password and PIN protection, as well as update -and anti-virus control.
To simplify and standardize desktop and application delivery, ACME wants to offer a service catalog based approach based on ACME IT standards. This will allow ACME to effectively deliver and manage resources, allowing IT to deliver device and application services that meet business and technical needs, while maximizing the use of shared IT computing resources.
Additional Facts
* Speaking to the developers revealed that most apps are standardized apps from public app-stores, but ACME uses some their in-house developed, critical mobile apps, where some of the developers have already left the company, so that they cannot be rewritten in a short amount of time.
* To reduce operating costs, ACME has already moved to Office 365 and is currently running a few migrations from on-premises to the cloud for other applications.
* ACME's IT says that it is a Microsoft Windows only shop, but the assessment shows that currently most of the managers are using Apple devices.
* ACME currently uses directory services and two-factor authentication mechanisms (Radius) for internal and external access. ACME requires to support Single Sign-On (SSO) integration with their current authentication solutions. They also require to use SSO whenever possible, as they do not believe in having multiple user accounts and passwords for their end users.
* ACME wants the solution to provide mechanisms to provide a secure e-mail solution to any device that complies to global security standards even for BYO devices.
1.2 High Level User Classification
* 680 Office workers (call center, corporate and office administrators) use standardized PCs or Thin-Clients to access ACME's core apps and tools.
* 240 Remote-office workers use the company's CYOD initiative and use these devices (Notebooks, Convertibles, Tablets, Android phones) to access their apps and tools from remote.
* 30 Executives use Apple Mac Books as well as iPhones and iPads to work on- and off-premises.
* 80 IT -admins and software developers are using high-end workstations with administrative access.
1.3 High Level Application Assessment
* ACME currently has 261 applications, of which 186 are based on Microsoft Windows.
* Today, users are allocated applications via AD group membership.
* 75 applications are either web-based or SaaS-based, including Office 365.
* A major incident recently meant sales workers were disappearing suddenly along with their data and laptops on some new colonies.
* Any external access should require multi-factor authentication. Access from the internal network should work seamlessly with SSO for the core applications. High-security applications also require MFA from internal access.
* The address ranges of the HQ datacenter are as follows:
172.16.0.0/16 internal
80.34.57.20/21 external
2. Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
* The design must use the F5 Loadbalancer and should be as redundant as possible.
* Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
* ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
What are three required components in the logical design? (Choose three.)
A. VMware Universal Access Gateways (UAG)
B. Airwatch Cloud Connector
C. Microsoft Exchange Server
D. Microsoft System Center Virtual Machine Manager
E. Secure e-mail gateway
正解：A,B,C
質問 5：
Refer to the ACME Financials design use case.
ACME Financials Design Use Case
1. Introduction
1.1 Business Overview
ACME Financials is an investment firm that has established itself as a leader in USA's fast-moving financial asset management market and has around 1000 employees.
ACME plans to transform its end-user computing resources to the digital workspace. ACME wants a secure platform that is available from any device and from anywhere, as well as a solution that reduces operating costs.
ACME's major business driver for the digital workplace is to enable employees to work remotely, and to enable the secure access to all of its resources from anywhere and any device while enhancing security with multi-factor authentication. The solution should support its BYOD strategy and let remote employees use their own laptop, desktop, or mobile device to access the resources from any location.
ACME also wants to remove the need to supply and manage desktop hardware to external contractors.
Because financial data is highly sensitive, the firm needs a technology that would protect customer and other critical information - even when accessed on a mobile device. ACME is looking to improve the security of the desktop and application platforms across the enterprise. In addition to using endpoint security tools and multi-factor authentication, ACME insists on using additional security and controls to provide the highest level of security and protection to services and applications.
ACME currently uses a VPN-based remote access solution. ACME would like to remove additional components that add support or management complexity, and device dependence for remote access users.
ACME is looking to achieve the same access to virtual desktops and Windows 10 or mobile applications, both inside and outside of the ACME enterprise network.
ACME is very keen on enforcing standardization to keep the IT infrastructure as consistent as possible. IT wants to use standardized versions of Windows (Windows 10), consistent configurations, and application delivery from a central source. All while maintaining the compliance of every device that requires encryption, password and PIN protection, as well as update -and anti-virus control.
To simplify and standardize desktop and application delivery, ACME wants to offer a service catalog based approach based on ACME IT standards. This will allow ACME to effectively deliver and manage resources, allowing IT to deliver device and application services that meet business and technical needs, while maximizing the use of shared IT computing resources.
Additional Facts
* Speaking to the developers revealed that most apps are standardized apps from public app-stores, but ACME uses some their in-house developed, critical mobile apps, where some of the developers have already left the company, so that they cannot be rewritten in a short amount of time.
* To reduce operating costs, ACME has already moved to Office 365 and is currently running a few migrations from on-premises to the cloud for other applications.
* ACME's IT says that it is a Microsoft Windows only shop, but the assessment shows that currently most of the managers are using Apple devices.
* ACME currently uses directory services and two-factor authentication mechanisms (Radius) for internal and external access. ACME requires to support Single Sign-On (SSO) integration with their current authentication solutions. They also require to use SSO whenever possible, as they do not believe in having multiple user accounts and passwords for their end users.
* ACME wants the solution to provide mechanisms to provide a secure e-mail solution to any device that complies to global security standards even for BYO devices.
1.2 High Level User Classification
* 680 Office workers (call center, corporate and office administrators) use standardized PCs or Thin-Clients to access ACME's core apps and tools.
* 240 Remote-office workers use the company's CYOD initiative and use these devices (Notebooks, Convertibles, Tablets, Android phones) to access their apps and tools from remote.
* 30 Executives use Apple Mac Books as well as iPhones and iPads to work on- and off-premises.
* 80 IT -admins and software developers are using high-end workstations with administrative access.
1.3 High Level Application Assessment
* ACME currently has 261 applications, of which 186 are based on Microsoft Windows.
* Today, users are allocated applications via AD group membership.
* 75 applications are either web-based or SaaS-based, including Office 365.
* A major incident recently meant sales workers were disappearing suddenly along with their data and laptops on some new colonies.
* Any external access should require multi-factor authentication. Access from the internal network should work seamlessly with SSO for the core applications. High-security applications also require MFA from internal access.
* The address ranges of the HQ datacenter are as follows:
172.16.0.0/16 internal
80.34.57.20/21 external
2. Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
* The design must use the F5 Loadbalancer and should be as redundant as possible.
* Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
* ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
ACME requires multi-factor authentication for application access from external networks. This has been established with a default access policy that incorporates multi-factor authentication. However, some users complain that they do not want to enter the multi-factor authentication when accessing the applications from within the company network.
How can the user experience be improved?
A. Create an access policy with a network range of 80.34.57.20/21 that does not require multi-factor authentication.
B. Create an access policy that excludes internal users.
C. Create an access policy that does not require multi-factor authentication when accessing from LAN.
D. Create an access policy with a network range of 172.16.0.0/16 that does not require multi-factor authentication.
正解：B
質問 6：
An administrator wants to migrate a System Center Configuration Manager (SCCM) collection into a
-managed stage in Workspace One UEM. Workspace ONE AirLift does not display the collection as mapped.
What is most likely the issue?
A. The collection has at least one Windows 10 device.
B. The collection mapping is busy or the migration is failed.
C. The collection is mapped to the wrong API.
D. The collection mapping is removed or the migration is completed and the ConfigMgr collection is no longer used.
正解：D
Refer to the ACME Financials design use case.
ACME Financials Design Use Case
1. Introduction
1.1 Business Overview
ACME Financials is an investment firm that has established itself as a leader in USA's fast-moving financial asset management market and has around 1000 employees.
ACME plans to transform its end-user computing resources to the digital workspace. ACME wants a secure platform that is available from any device and from anywhere, as well as a solution that reduces operating costs.
ACME's major business driver for the digital workplace is to enable employees to work remotely, and to enable the secure access to all of its resources from anywhere and any device while enhancing security with multi-factor authentication. The solution should support its BYOD strategy and let remote employees use their own laptop, desktop, or mobile device to access the resources from any location.
ACME also wants to remove the need to supply and manage desktop hardware to external contractors.
Because financial data is highly sensitive, the firm needs a technology that would protect customer and other critical information - even when accessed on a mobile device. ACME is looking to improve the security of the desktop and application platforms across the enterprise. In addition to using endpoint security tools and multi-factor authentication, ACME insists on using additional security and controls to provide the highest level of security and protection to services and applications.
ACME currently uses a VPN-based remote access solution. ACME would like to remove additional components that add support or management complexity, and device dependence for remote access users.
ACME is looking to achieve the same access to virtual desktops and Windows 10 or mobile applications, both inside and outside of the ACME enterprise network.
ACME is very keen on enforcing standardization to keep the IT infrastructure as consistent as possible. IT wants to use standardized versions of Windows (Windows 10), consistent configurations, and application delivery from a central source. All while maintaining the compliance of every device that requires encryption, password and PIN protection, as well as update -and anti-virus control.
To simplify and standardize desktop and application delivery, ACME wants to offer a service catalog based approach based on ACME IT standards. This will allow ACME to effectively deliver and manage resources, allowing IT to deliver device and application services that meet business and technical needs, while maximizing the use of shared IT computing resources.
Additional Facts
* Speaking to the developers revealed that most apps are standardized apps from public app-stores, but ACME uses some their in-house developed, critical mobile apps, where some of the developers have already left the company, so that they cannot be rewritten in a short amount of time.
* To reduce operating costs, ACME has already moved to Office 365 and is currently running a few migrations from on-premises to the cloud for other applications.
* ACME's IT says that it is a Microsoft Windows only shop, but the assessment shows that currently most of the managers are using Apple devices.
* ACME currently uses directory services and two-factor authentication mechanisms (Radius) for internal and external access. ACME requires to support Single Sign-On (SSO) integration with their current authentication solutions. They also require to use SSO whenever possible, as they do not believe in having multiple user accounts and passwords for their end users.
* ACME wants the solution to provide mechanisms to provide a secure e-mail solution to any device that complies to global security standards even for BYO devices.
1.2 High Level User Classification
* 680 Office workers (call center, corporate and office administrators) use standardized PCs or Thin-Clients to access ACME's core apps and tools.
* 240 Remote-office workers use the company's CYOD initiative and use these devices (Notebooks, Convertibles, Tablets, Android phones) to access their apps and tools from remote.
* 30 Executives use Apple Mac Books as well as iPhones and iPads to work on- and off-premises.
* 80 IT -admins and software developers are using high-end workstations with administrative access.
1.3 High Level Application Assessment
* ACME currently has 261 applications, of which 186 are based on Microsoft Windows.
* Today, users are allocated applications via AD group membership.
* 75 applications are either web-based or SaaS-based, including Office 365.
* A major incident recently meant sales workers were disappearing suddenly along with their data and laptops on some new colonies.
* Any external access should require multi-factor authentication. Access from the internal network should work seamlessly with SSO for the core applications. High-security applications also require MFA from internal access.
The address ranges of the HQ datacenter are as follows:
172.16.0.0/16 internal
80.34.57.20/21 external
2. Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
* The design must use the F5 Loadbalancer and should be as redundant as possible.
* Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
* ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
Which three are physical design requirements in the Workspace ONE UEM design for ACME (Choose three.)
A. SAAS apps
B. vSphere ESXi hosts
C. Switches and router
D. Microsoft Storage Spaces
E. Devices
F. WEB apps
正解：C,D,E
質問 2：
An administrator receives the following error message:
"404.idp.not.found"
Which authentication method change needs to be completed?
A. Okta has to be configured as a third-party IDP.
B. Navigate to the access policy rule setting, then select an authentication method that is active and current.
C. Navigate to the access policy rule settings, then select an authentication method that is passive.
D. AD FS has to be configured as a third-party IDP.
正解：B
質問 3：
What are three requirements for a device that is already joined to Azure AD to enroll into Workspace ONE UEM? (Choose three.)
A. Windows Update services not started.
B. No MDM managed.
C. KB update 3176934 installed.
D. Windows 10 OS build 14393.82 and above.
E. User must be a member of the Console Admin Group.
F. No Azure AD account configured on the device.
正解：B,C,D
質問 4：
Refer to the ACME Financials design use case.
ACME Financials Design Use Case
1. Introduction
1.1 Business Overview
ACME Financials is an investment firm that has established itself as a leader in USA's fast-moving financial asset management market and has around 1000 employees.
ACME plans to transform its end-user computing resources to the digital workspace. ACME wants a secure platform that is available from any device and from anywhere, as well as a solution that reduces operating costs.
ACME's major business driver for the digital workplace is to enable employees to work remotely, and to enable the secure access to all of its resources from anywhere and any device while enhancing security with multi-factor authentication. The solution should support its BYOD strategy and let remote employees use their own laptop, desktop, or mobile device to access the resources from any location.
ACME also wants to remove the need to supply and manage desktop hardware to external contractors.
Because financial data is highly sensitive, the firm needs a technology that would protect customer and other critical information - even when accessed on a mobile device. ACME is looking to improve the security of the desktop and application platforms across the enterprise. In addition to using endpoint security tools and multi-factor authentication, ACME insists on using additional security and controls to provide the highest level of security and protection to services and applications.
ACME currently uses a VPN-based remote access solution. ACME would like to remove additional components that add support or management complexity, and device dependence for remote access users.
ACME is looking to achieve the same access to virtual desktops and Windows 10 or mobile applications, both inside and outside of the ACME enterprise network.
ACME is very keen on enforcing standardization to keep the IT infrastructure as consistent as possible. IT wants to use standardized versions of Windows (Windows 10), consistent configurations, and application delivery from a central source. All while maintaining the compliance of every device that requires encryption, password and PIN protection, as well as update -and anti-virus control.
To simplify and standardize desktop and application delivery, ACME wants to offer a service catalog based approach based on ACME IT standards. This will allow ACME to effectively deliver and manage resources, allowing IT to deliver device and application services that meet business and technical needs, while maximizing the use of shared IT computing resources.
Additional Facts
* Speaking to the developers revealed that most apps are standardized apps from public app-stores, but ACME uses some their in-house developed, critical mobile apps, where some of the developers have already left the company, so that they cannot be rewritten in a short amount of time.
* To reduce operating costs, ACME has already moved to Office 365 and is currently running a few migrations from on-premises to the cloud for other applications.
* ACME's IT says that it is a Microsoft Windows only shop, but the assessment shows that currently most of the managers are using Apple devices.
* ACME currently uses directory services and two-factor authentication mechanisms (Radius) for internal and external access. ACME requires to support Single Sign-On (SSO) integration with their current authentication solutions. They also require to use SSO whenever possible, as they do not believe in having multiple user accounts and passwords for their end users.
* ACME wants the solution to provide mechanisms to provide a secure e-mail solution to any device that complies to global security standards even for BYO devices.
1.2 High Level User Classification
* 680 Office workers (call center, corporate and office administrators) use standardized PCs or Thin-Clients to access ACME's core apps and tools.
* 240 Remote-office workers use the company's CYOD initiative and use these devices (Notebooks, Convertibles, Tablets, Android phones) to access their apps and tools from remote.
* 30 Executives use Apple Mac Books as well as iPhones and iPads to work on- and off-premises.
* 80 IT -admins and software developers are using high-end workstations with administrative access.
1.3 High Level Application Assessment
* ACME currently has 261 applications, of which 186 are based on Microsoft Windows.
* Today, users are allocated applications via AD group membership.
* 75 applications are either web-based or SaaS-based, including Office 365.
* A major incident recently meant sales workers were disappearing suddenly along with their data and laptops on some new colonies.
* Any external access should require multi-factor authentication. Access from the internal network should work seamlessly with SSO for the core applications. High-security applications also require MFA from internal access.
* The address ranges of the HQ datacenter are as follows:
172.16.0.0/16 internal
80.34.57.20/21 external
2. Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
* The design must use the F5 Loadbalancer and should be as redundant as possible.
* Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
* ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
What are three required components in the logical design? (Choose three.)
A. VMware Universal Access Gateways (UAG)
B. Airwatch Cloud Connector
C. Microsoft Exchange Server
D. Microsoft System Center Virtual Machine Manager
E. Secure e-mail gateway
正解：A,B,C
質問 5：
Refer to the ACME Financials design use case.
ACME Financials Design Use Case
1. Introduction
1.1 Business Overview
ACME Financials is an investment firm that has established itself as a leader in USA's fast-moving financial asset management market and has around 1000 employees.
ACME plans to transform its end-user computing resources to the digital workspace. ACME wants a secure platform that is available from any device and from anywhere, as well as a solution that reduces operating costs.
ACME's major business driver for the digital workplace is to enable employees to work remotely, and to enable the secure access to all of its resources from anywhere and any device while enhancing security with multi-factor authentication. The solution should support its BYOD strategy and let remote employees use their own laptop, desktop, or mobile device to access the resources from any location.
ACME also wants to remove the need to supply and manage desktop hardware to external contractors.
Because financial data is highly sensitive, the firm needs a technology that would protect customer and other critical information - even when accessed on a mobile device. ACME is looking to improve the security of the desktop and application platforms across the enterprise. In addition to using endpoint security tools and multi-factor authentication, ACME insists on using additional security and controls to provide the highest level of security and protection to services and applications.
ACME currently uses a VPN-based remote access solution. ACME would like to remove additional components that add support or management complexity, and device dependence for remote access users.
ACME is looking to achieve the same access to virtual desktops and Windows 10 or mobile applications, both inside and outside of the ACME enterprise network.
ACME is very keen on enforcing standardization to keep the IT infrastructure as consistent as possible. IT wants to use standardized versions of Windows (Windows 10), consistent configurations, and application delivery from a central source. All while maintaining the compliance of every device that requires encryption, password and PIN protection, as well as update -and anti-virus control.
To simplify and standardize desktop and application delivery, ACME wants to offer a service catalog based approach based on ACME IT standards. This will allow ACME to effectively deliver and manage resources, allowing IT to deliver device and application services that meet business and technical needs, while maximizing the use of shared IT computing resources.
Additional Facts
* Speaking to the developers revealed that most apps are standardized apps from public app-stores, but ACME uses some their in-house developed, critical mobile apps, where some of the developers have already left the company, so that they cannot be rewritten in a short amount of time.
* To reduce operating costs, ACME has already moved to Office 365 and is currently running a few migrations from on-premises to the cloud for other applications.
* ACME's IT says that it is a Microsoft Windows only shop, but the assessment shows that currently most of the managers are using Apple devices.
* ACME currently uses directory services and two-factor authentication mechanisms (Radius) for internal and external access. ACME requires to support Single Sign-On (SSO) integration with their current authentication solutions. They also require to use SSO whenever possible, as they do not believe in having multiple user accounts and passwords for their end users.
* ACME wants the solution to provide mechanisms to provide a secure e-mail solution to any device that complies to global security standards even for BYO devices.
1.2 High Level User Classification
* 680 Office workers (call center, corporate and office administrators) use standardized PCs or Thin-Clients to access ACME's core apps and tools.
* 240 Remote-office workers use the company's CYOD initiative and use these devices (Notebooks, Convertibles, Tablets, Android phones) to access their apps and tools from remote.
* 30 Executives use Apple Mac Books as well as iPhones and iPads to work on- and off-premises.
* 80 IT -admins and software developers are using high-end workstations with administrative access.
1.3 High Level Application Assessment
* ACME currently has 261 applications, of which 186 are based on Microsoft Windows.
* Today, users are allocated applications via AD group membership.
* 75 applications are either web-based or SaaS-based, including Office 365.
* A major incident recently meant sales workers were disappearing suddenly along with their data and laptops on some new colonies.
* Any external access should require multi-factor authentication. Access from the internal network should work seamlessly with SSO for the core applications. High-security applications also require MFA from internal access.
* The address ranges of the HQ datacenter are as follows:
172.16.0.0/16 internal
80.34.57.20/21 external
2. Initial Stakeholder Interview Findings
In addition to the goals summarized in the previous section, the following are findings from initial interviews with the key stakeholders and an analysis of their service level agreements.
* The design must use the F5 Loadbalancer and should be as redundant as possible.
* Qualified IT personal is hard to find these days. If possible, reduce operational costs and try to automate or outsource basic IT-tasks.
* ACME is very particular about meeting the go-live date. If there are unforeseen delays, the project may not be delivered for the required go-live date.
ACME requires multi-factor authentication for application access from external networks. This has been established with a default access policy that incorporates multi-factor authentication. However, some users complain that they do not want to enter the multi-factor authentication when accessing the applications from within the company network.
How can the user experience be improved?
A. Create an access policy with a network range of 80.34.57.20/21 that does not require multi-factor authentication.
B. Create an access policy that excludes internal users.
C. Create an access policy that does not require multi-factor authentication when accessing from LAN.
D. Create an access policy with a network range of 172.16.0.0/16 that does not require multi-factor authentication.
正解：B
質問 6：
An administrator wants to migrate a System Center Configuration Manager (SCCM) collection into a
-managed stage in Workspace One UEM. Workspace ONE AirLift does not display the collection as mapped.
What is most likely the issue?
A. The collection has at least one Windows 10 device.
B. The collection mapping is busy or the migration is failed.
C. The collection is mapped to the wrong API.
D. The collection mapping is removed or the migration is completed and the ConfigMgr collection is no longer used.
正解：D
さと** -
5V0-62.19の知識としてもこの本を真面目に勉強すれば合格点を取れると思い、余裕で5V0-62.19に受かりました！！