GIS-only staff must have Workspace ONE Tunnel without waiting for them to tap Install. What assignment choice makes the app actually install?
Select an answer to reveal the explanation.
Short Explanation
On-demand is a brochure in the lobby; required is the badge printer that runs by itself. Pick required assignment to the GIS group so Tunnel lands. A Horizon desktop or an NSX partner VM is not that mobile install.
Full Explanation
GIS-only staff who must receive Workspace ONE Tunnel without waiting to tap Install need a Required (automatic) UEM app assignment so Tunnel installs on the GIS smart group. Required pushes installation for must-have civic VPN access; on-demand leaves adoption optional. On-demand catalog-only assignment fails the must-have requirement because users may ignore the app indefinitely in the field. Horizon Cloud entitlement of a published desktop delivers a cloud desktop, not the Tunnel mobile app on phones. NSX service insertion of Tunnel as a partner service virtual machine is an incorrect networking redesign for this UEM app assignment task. Exam caveat: Required versus On-Demand is a frequent exam discriminator—read carefully whether installation must be automatic. Operational check: set Tunnel assignment to Required for the GIS smart group, force device check-in on a sample phone, confirm Tunnel installs without a user tap, and verify companion per-app VPN profile settings if the design uses them. In municipal EUC operations, record the console path and the rejected alternatives in the change ticket so the next on-call technician repeats the same evidence-first workflow for city staff.