Which minimum rights on a Certificate Authority (CA) should be assigned for the account specified in the CA definition in the UEM Console?

A. Local admin on the CA server with the privileges: read, issue and manage certificates, manage CA, request certificates permissions.

B. Local admin on the CA server with the privileges: read, issue and manage certificates, request certificates permissions.

C. Local admin on the CA server with the privileges: full access.

D. Local admin on the CA server with the privileges: read, manage certificates, manage CA, request certificates permissions.

What are the minimum requirements for the PowerShell Mail integration with Microsoft Exchange service account when only iOS and Android devices are in use? (Choose two.)

A. Mail Recipients role.

B. Recipient Policies role.

C. PowerShell 2.0.

D. Port 80 between device server and Exchange server opened.

E. Organization Client Access role.

An administrator has enabled Kerberos Constrained Delegation (KCD) on the SEG v2. If the administrator publishes a profile without a certificate payload and the user enters the password, everything works fine. When the user publishes the same profile with a certificate payload, the system is unable to connect and synchronize emails.

Which two troubleshooting steps need to be taken? (Choose two.)

A. KCD is not supported on SEG v2.

B. Verify if the service account is a member of the IIS user group on each CAS Exchange server.

C. Verify that the Workspace UEM Console certificate is uploaded as a client certificate chain.

D. Verify that port 88 is not blocked between the SEG and the Active Directory domain controller(s).

E. Verify that the service account is set to the service type OWA.

An administrator is trying to add a second Active Directory domain to an already configured directory integration. When the administrator tries to add a user from the newly added domain, the system cannot find the user.

What are two possible causes? (Choose two.)

A. The service account specified does not have any rights in the added domain.

B. The second domain is not a member of Global Catalog.

C. The newly added domain is not in the same forest.

D. There is a trust relationship established between the domain.

E. The administrator is using a service account with the Domain User Role assigned.

Which three items are Device Event categories for filtering? (Choose three.)

A. Administration: command, device, profiles

B. Security; authentication, certificate pinning, custom

C. Enrollment: authentication

D. Enrollment: authentication, device

E. Security: authentication, certificate pinning, compliance status

F. Administration: command, device, profiles, application