An administrator has enabled Kerberos Constrained Delegation (KCD) on the SEG v2. If the administrator publishes a profile without a certificate payload and the user enters the password, everything works fine. When the user publishes the same profile with a certificate payload, the system is unable to connect and synchronize emails.

Which two troubleshooting steps need to be taken? (Choose two.)

A. KCD is not supported on SEG v2.

B. Verify if the service account is a member of the IIS user group on each CAS Exchange server.

C. Verify that the Workspace UEM Console certificate is uploaded as a client certificate chain.

D. Verify that port 88 is not blocked between the SEG and the Active Directory domain controller(s).

E. Verify that the service account is set to the service type OWA.

What are the issue severity definitions of Workspace ONE UEM when creating a support ticket?

A. Very High, High, Medium, Low

B. High, Medium, Low, Minor

C. Critical, Major, Minor, Cosmetic

D. Critical, High, Low, Cosmetic

On an SEGv2 where Kerberos Constrained Delegation (KCD) is enabled, sometimes users receive an "unable to authenticate" message. Which log file needs to be reviewed when troubleshooting the issue?

A. U_ex####.log

B. AW.EAS.Web.Log

C. AWCMservice.log

D. AirWatch.Kerberos.AuthService.log

Which hierarchical level allows the administrator to add an admin repository of the type Network Share (SAML)?

A. Local

B. It is not possible.

C. Site

D. Global

Which two statements are true about multiple Exchange Server versions in the same e-mail domain? (Choose two.)

A. All of the Exchange Servers need to be updated to the same version of Windows Server.

B. An administrator needs to install separate instances of Email Notification Services (ENS).

C. The ENS server is able to complete all the subscriptions correctly.

D. The ENS server functionality is interrupted.

E. Each Exchange server needs to have at least one Apple Push Notification Service (APNS) Certificate.

Where is the log level for the environment defined when using an on-premises Workspace ONE UEM?

A. Global

B. Local

C. Organizational unit

D. Device group

An administrator is required to manually set up VMware Identity Manager in the Workspace ONE UEM. Which type of REST API account is required? (Choose two.)

A. Application Management User

B. Console Administrator User

C. Enrollment User

D. Admin

E. Full Access User

A user is using the Apple Device Enrollment Program (DEP) to onboard devices to Workspace ONE UEM. After a period of time, new devices are no longer enrolled using DEP.

What is most likely the problem?

A. The Active Directory integration is broken.

B. The DEP token is expired.

C. The Device Exclusion Policy is set.

D. The APNs certificate is expired.

Which command needs to be executed for the Certificate Authority (CA) to use subject alternative names in certificates?

A. certutil -setreg policy\EditFlags + EDITF_ATTRIBUTESUBJECTALTNAME2

B. certutil -setattributes + SUBJECTALTERNATIVENAME

C. certutil -setreg policy\EditFlags + SUBJECTALTERNATIVENAME

D. certutil -setreg poilcy\EditFlags + EDITF_ATTRIBUTESUBJECTALTNAME

In the Email Notification Service (ENS) log file, an administrator finds the following error message:

"Insufficient service users in domain to monitor mailbox ...".

What causes this issue?

A. The wrong Exchange server version is used.

B. The certificate is not valid between ENS and EWS.

C. Values between Exchange Web Service (EWS) and ENS are not matching.

D. The administrator needs to open a VMware support case ticket because the support team needs to change values in the Cloud.