Drag and Drop Question Match the Workspace ONE Service on the left to its Service Port on the right. Answer:

Question

Exhibit

Answer Area

Explanation

Workspace ONE Service Port Mappings

The Correct Matches

Why Each Pairing Is Correct

VMware Tunnel → 8443 VMware Tunnel (formerly Per-App Tunnel) provides secure per-app VPN connectivity for managed devices. Port 8443 is its default frontend port - the side that device traffic hits first. It's the lowest-numbered port of the three, reflecting its role as a general-purpose traffic relay layer. This is the most commonly tested port in Workspace ONE exams.

Content Gateway → 10443 Content Gateway brokers access to internal content repositories (SharePoint, network file shares, etc.) without a full VPN. It uses port 10443. Think of it as the "middle" service numerically (between 8443 and 11443), handling structured content access.

Secure Email Gateway → 11443 SEG acts as a proxy between mobile email clients and Exchange/Office 365, enforcing compliance before delivering mail. It uses port 11443 - the highest of the three, and specific to email traffic filtering.

Common Mistakes to Avoid

• Confusing 8443 with a generic HTTPS port: 8443 is often associated with general HTTPS alternatives, leading candidates to assign it to SEG or Content Gateway. In Workspace ONE, 8443 belongs specifically to VMware Tunnel.
• Swapping 10443 and 11443: Content Gateway and SEG are frequently mixed up because both proxy internal resources. Remember: Content = 10443, Email = 11443 (E comes after C alphabetically, 11443 > 10443).
• Assuming standard port 443: These services don't use 443 directly - they operate on distinct high-numbered ports to coexist on the same DMZ infrastructure without conflict.

No community discussion yet for this question.