Free OCE-W sample questions

Correct answer: Monitor > Events and Logs > Console Events

Console events record actions taken in the Workspace ONE UEM console, including login sessions, failed logins, admin actions and system settings changes. A change to a device setting therefore appears there with the admin who made it. The path is Monitor > Events and Logs > Console Events. Device events record MDM commands and device responses.

Correct answer: Managed applications, profiles, and certificates pushed by UEM.

An Enterprise Wipe only removes corporate data (managed apps, profiles, certs, email) leaving personal photos, contacts, and unmanaged apps intact. A Device Wipe (Factory Reset) removes everything.

Correct answer: To cache query results in memory so UEM servers can avoid repeated database queries, reducing database workload.

Memcached is a third-party distributed data caching application for Workspace ONE UEM. Before querying the database, UEM checks Memcached for stored results, which reduces the database workload. It is aimed at installations with 5,000+ devices, is available for SaaS and on-premises, and is configured at Groups & Settings > All Settings > Installation > Cache Settings (port 11211). It is not a form of backup or redundancy.

Correct answers: Certificate (Cloud Deployment); Mobile SSO (for iOS)

Certificate (Cloud Deployment) signs users in with a client certificate on the device. It is a built-in method that can be chained with Device Compliance (with Workspace ONE UEM), placed before the compliance check.

Mobile SSO (for iOS) signs users in on managed iOS devices without a password. It is a built-in method that can be chained with Device Compliance (with Workspace ONE UEM), placed before the compliance check.

Correct answer: Update the default Access Policy (or relevant app policies) to include the new Third-Party IDP authentication method in the policy rules.

Simply adding the Identity Provider makes it available, but not active. You must update the Access Policies to use this new authentication method (e.g., 'Okta Auth') as the primary or fallback method for the relevant network ranges or apps.

Correct answer: Workspace ONE Intelligence

Workspace ONE Intelligence aggregates data from UEM, Access, and Trust Network partners to calculate User and Device Risk Scores. Omnissa Access then consumes these scores to make conditional access decisions.

Correct answer: Add v2.0 to the existing app record with Add Version, which upgrades in place. For a clean install, first remove v1.0 from the devices (unassign it or send a removal command), then deploy v2.0.

Use Add Version on the existing internal app record so UEM manages v2.0 as an update of the same app (iOS upgrades in place). If a clean install is required, first remove v1.0 from the devices (for example by removing its assignment or sending a removal command), then deploy v2.0.

Correct answer: SEG V2 can transform content inline, for example encrypting attachments of selected file types with a key unique to the device and user so they open only in Workspace ONE Content (Content Locker).

SEG V2 sits in the ActiveSync path and applies email security policies inline. Its content-transformation feature can encrypt attachments of selected file types with a key unique to the device and user, so they can be opened only in Workspace ONE Content (Content Locker), and it can transform hyperlinks. It does not send attachments to the UEM console, and it encrypts at the gateway, not on the Exchange server.