SOPHOS ENGINEER FINAL TEST 2026
QUESTIONS WITH CORRECT
ANSWERS GRADED A+
◍ Which TCP port is used to communicate policies to endpoints?.
Answer: 8190
◍ Which Sophos Central manage product protects the data on a lost or stolen
laptop?.
Answer: Encryption
◍ The option to stop the AutoUpdate service is greyed out in Windows
Services. What is the most likely reason for this?.
Answer: Tamper Protection is enabled
◍ What is Zero Trust?.
Answer: It is the mindset of don't trust anything verify everything
◍ What is ZTNA?.
Answer: Sophos's Zero Trust Network Access
◍ Complete the sentence: Signature-based file scanning relies on....
Answer: previously detected malware characteristics
◍ What is Sophos Lateral Protection?.
Answer: It is a micro segmentation solution. If device becomes infected it
will be isolated to stop the attack or regardless of the Network Topology
◍ TRUE or FALSE: Tamper protection is enabled by default..
Answer: TRUE
◍ You are unable to edit policies in Sophos Central. What do you check in
Sophos Central?.
Answer: That you have the correct role assigned
, ◍ Which URL address do you use to login to Sophos Central Partner
Dashboard?.
Answer: partnerportal.sophos.com
◍ You are detecting low-reputation files and want to change the reputation
level from recommended to strict. Which policy do you edit to make this
change?.
Answer: Threat Protection
◍ What are the three key features of Sophos Firewall?.
Answer: It is a comprehensive security device, with a zone-based firewall
and Identity-based policies at its core.It can expose hidden risk, stop
unknown threats and isolate infected systemsIt supports ZTNA by providing
network segmentation and lateral movement protection
◍ What is the FIRST step you must take when deploying virtual
environments?.
Answer: Check the system requirements
◍ You want to prevent users from copying database files to USB drives
without blocking the use of all USB devices. Which policy do you need to
configure?.
Answer: Data Loss Prevention
◍ TRUE or FALSE: You can search for a malicious item across your network
using EDR.
Answer: TRUE
◍ Which log provides a record of all activities?.
Answer: Audit log
◍ What is the function of anti-exploit technology?.
Answer: To detect and stop compromised vulnerable applications
◍ Complete the sentence: The SAV32CLI clean-up tool is a....
Answer: Command line tool included in Sophos Central installation
◍ When registering for a Sophos Central Trial, which of the following
QUESTIONS WITH CORRECT
ANSWERS GRADED A+
◍ Which TCP port is used to communicate policies to endpoints?.
Answer: 8190
◍ Which Sophos Central manage product protects the data on a lost or stolen
laptop?.
Answer: Encryption
◍ The option to stop the AutoUpdate service is greyed out in Windows
Services. What is the most likely reason for this?.
Answer: Tamper Protection is enabled
◍ What is Zero Trust?.
Answer: It is the mindset of don't trust anything verify everything
◍ What is ZTNA?.
Answer: Sophos's Zero Trust Network Access
◍ Complete the sentence: Signature-based file scanning relies on....
Answer: previously detected malware characteristics
◍ What is Sophos Lateral Protection?.
Answer: It is a micro segmentation solution. If device becomes infected it
will be isolated to stop the attack or regardless of the Network Topology
◍ TRUE or FALSE: Tamper protection is enabled by default..
Answer: TRUE
◍ You are unable to edit policies in Sophos Central. What do you check in
Sophos Central?.
Answer: That you have the correct role assigned
, ◍ Which URL address do you use to login to Sophos Central Partner
Dashboard?.
Answer: partnerportal.sophos.com
◍ You are detecting low-reputation files and want to change the reputation
level from recommended to strict. Which policy do you edit to make this
change?.
Answer: Threat Protection
◍ What are the three key features of Sophos Firewall?.
Answer: It is a comprehensive security device, with a zone-based firewall
and Identity-based policies at its core.It can expose hidden risk, stop
unknown threats and isolate infected systemsIt supports ZTNA by providing
network segmentation and lateral movement protection
◍ What is the FIRST step you must take when deploying virtual
environments?.
Answer: Check the system requirements
◍ You want to prevent users from copying database files to USB drives
without blocking the use of all USB devices. Which policy do you need to
configure?.
Answer: Data Loss Prevention
◍ TRUE or FALSE: You can search for a malicious item across your network
using EDR.
Answer: TRUE
◍ Which log provides a record of all activities?.
Answer: Audit log
◍ What is the function of anti-exploit technology?.
Answer: To detect and stop compromised vulnerable applications
◍ Complete the sentence: The SAV32CLI clean-up tool is a....
Answer: Command line tool included in Sophos Central installation
◍ When registering for a Sophos Central Trial, which of the following
