Unified Access Gateway appears in two exam contexts. Field tablets use per-app Tunnel to an internal permitting API, not a VDI session. Which UAG role applies?
Select an answer to reveal the explanation.
Short Explanation
Same mailbox, two hats on the coat rack. Tablets talking Tunnel to a permitting API need the UEM hat, not the Horizon Blast hat. UAG is not NSX T0 and not Cloud Connector.
Full Explanation
Unified Access Gateway appears in two exam contexts. When field tablets use per-app Tunnel to an internal permitting API and are not starting a VDI session, the UAG role that applies is UEM edge services such as Tunnel or content gateway for managed mobile traffic. Name the UEM hat on UAG for that municipal tablet scenario rather than the Horizon broker gateway hat used for remote desktops. Horizon Blast, PCoIP, and XML-API gateway functions for desktop brokers are the other common UAG role and do not match Tunnel-to-API tablet traffic. UAG does not replace NSX Edge T0 in every civic DMZ as a general networking substitute for routing and edge services. AirWatch Cloud Connector directory sync is not hosted inside UAG; Cloud Connector remains the on-premises UEM directory and enterprise-systems bridge. Exam caveat: one civic DMZ may host UAG appliances configured for Horizon, UEM edge, or both—read the traffic type in the question before choosing the role. Operational check: for tablet Tunnel tests, verify UAG Tunnel edge counters and logs increment when the permitting API is called; for a Horizon session test on another profile, verify Blast or XML-API edge behavior separately; keep Cloud Connector off the UAG role diagram.