Sophos S80 Technician Exam Study Guide Questions
and Answers – Latest 2026/2027
1. In which phase of the troubleshooting do you confirm the steps required to
reproduce the error or symptom?: Define the issue
2. Which 2 archive files can be loaded into the SURF tool?: SDU, CTR
3. You are accessing log files using the Advanced Shell. What is the full path to
the directory they are located in?:
4. TRUE or FALSE. The SURF tool is only available for Sophos partners.: True
5. You have been locḳed out of your Sophos Firewall. Which command can
you run from the console that will give you access to all services on all
interfaces?: system appliance_access disable
6. Which operating system can the SURF tool be run on?: Windows 10
7. TRUE OR FALSE. All tabs are displayed for any SDU or CTR file loaded into the SURF
tool?: False
8. TRUE or FALSE: The TLS decryption limit can be adjusted via the console.: False
9. Which of the following statements are TRUE if you have a firewall log entry
that includes log_component=Appliance Access.: No firewall rule was matched
10. Which 3 of the following can be used to create exclusions for decryption?-
: Domain, Web category, Subdomain
11. Which 2 of the following determines the decryption limit for a Sophos
Firewall?: Number of CPU cores, Device memory
12. What command can you use to see the MAC address for devices with each
health status?: ipset
13. A user is able to use an application even though you have prevented it
through IPS. Which 2 of the following are possible causes of the applications
not being recognized?:
14. What is the name of the log file for Sophos Central registration events?: -
sophos-central.log
1/
10
, 15. What is the console command that can be used to checḳ the IPS settings?-
: ips-settings
16. When traffic passes through Sophos Firewall, what does it use to identify
computers it has a Security Heartbeat with?: IP address
17. What does Sophos Firewall share with devices it has a Security Heartbeat
with to prevent lateral movement?: MAC address
2/
10
and Answers – Latest 2026/2027
1. In which phase of the troubleshooting do you confirm the steps required to
reproduce the error or symptom?: Define the issue
2. Which 2 archive files can be loaded into the SURF tool?: SDU, CTR
3. You are accessing log files using the Advanced Shell. What is the full path to
the directory they are located in?:
4. TRUE or FALSE. The SURF tool is only available for Sophos partners.: True
5. You have been locḳed out of your Sophos Firewall. Which command can
you run from the console that will give you access to all services on all
interfaces?: system appliance_access disable
6. Which operating system can the SURF tool be run on?: Windows 10
7. TRUE OR FALSE. All tabs are displayed for any SDU or CTR file loaded into the SURF
tool?: False
8. TRUE or FALSE: The TLS decryption limit can be adjusted via the console.: False
9. Which of the following statements are TRUE if you have a firewall log entry
that includes log_component=Appliance Access.: No firewall rule was matched
10. Which 3 of the following can be used to create exclusions for decryption?-
: Domain, Web category, Subdomain
11. Which 2 of the following determines the decryption limit for a Sophos
Firewall?: Number of CPU cores, Device memory
12. What command can you use to see the MAC address for devices with each
health status?: ipset
13. A user is able to use an application even though you have prevented it
through IPS. Which 2 of the following are possible causes of the applications
not being recognized?:
14. What is the name of the log file for Sophos Central registration events?: -
sophos-central.log
1/
10
, 15. What is the console command that can be used to checḳ the IPS settings?-
: ips-settings
16. When traffic passes through Sophos Firewall, what does it use to identify
computers it has a Security Heartbeat with?: IP address
17. What does Sophos Firewall share with devices it has a Security Heartbeat
with to prevent lateral movement?: MAC address
2/
10
