SOPHOS CERTIFIED ENGINEER EXAM
ACTUAL QUESTIONS AND ANSWERS 2023
CERTIFICATION EVALUATION 2026
SOLVED QUESTIONS AND SOLUTIONS
GRADED A+
⩥ The connection was blocked but the root cause has NOT been cleaned
up. Answer: Which of the following statements is TRUE for a
C2/Generic-C detection?
⩥ Update > Update configuration. Answer: Where in the Endpoint Self
Help Tool will show if an endpoint is using a proxy for updating?
⩥ DC=SOPHOS,DC=LOCAL. Answer: When configuring AD
synchronization, what location was defined by default in filters under the
User Discovery Filters tab?
⩥ ping 172.16.2.20. Answer: Enter the command you would use to test
IP network connectivity to the address 172.16.2.20. _____
⩥ Tamper Protection. Answer: Which feature would protect the Sophos
installation from becoming disabled by malware?
, ⩥ 389. Answer: AD Sync is not working, you have successfully pinged
the DC by both name and IP address. Which port do you use with telnet
to confirm the LDAP port is accessible?
⩥ netsh winhttp reset proxy. Answer: Enter the command you would use
to remove the currently configured system proxy.
⩥ %ProgramData%\Sophos\CloudInstaller\Logs. Answer: Where is the
'SophosCloudInstaller_<time_and_date_stamp>.log' found?
⩥ To prevent malicious behavior in software. Answer: What is the
function of application lockdown in Intercept X?
⩥ Virus Removal tool. Answer: Which of these cleanup tools will scan
for root kits?
⩥ Domain user. Answer: What is the minimum type of user required to
connect to AD to gather the user and group information?
⩥ True. Answer: TRUE or FALSE: Sophos recommends disabling
HTTPS inspection for Sophos updating traffic.
⩥ Sophos Intercept X. Answer: On a Windows computer, which
component logs information to the 'Sophos.log' file?
ACTUAL QUESTIONS AND ANSWERS 2023
CERTIFICATION EVALUATION 2026
SOLVED QUESTIONS AND SOLUTIONS
GRADED A+
⩥ The connection was blocked but the root cause has NOT been cleaned
up. Answer: Which of the following statements is TRUE for a
C2/Generic-C detection?
⩥ Update > Update configuration. Answer: Where in the Endpoint Self
Help Tool will show if an endpoint is using a proxy for updating?
⩥ DC=SOPHOS,DC=LOCAL. Answer: When configuring AD
synchronization, what location was defined by default in filters under the
User Discovery Filters tab?
⩥ ping 172.16.2.20. Answer: Enter the command you would use to test
IP network connectivity to the address 172.16.2.20. _____
⩥ Tamper Protection. Answer: Which feature would protect the Sophos
installation from becoming disabled by malware?
, ⩥ 389. Answer: AD Sync is not working, you have successfully pinged
the DC by both name and IP address. Which port do you use with telnet
to confirm the LDAP port is accessible?
⩥ netsh winhttp reset proxy. Answer: Enter the command you would use
to remove the currently configured system proxy.
⩥ %ProgramData%\Sophos\CloudInstaller\Logs. Answer: Where is the
'SophosCloudInstaller_<time_and_date_stamp>.log' found?
⩥ To prevent malicious behavior in software. Answer: What is the
function of application lockdown in Intercept X?
⩥ Virus Removal tool. Answer: Which of these cleanup tools will scan
for root kits?
⩥ Domain user. Answer: What is the minimum type of user required to
connect to AD to gather the user and group information?
⩥ True. Answer: TRUE or FALSE: Sophos recommends disabling
HTTPS inspection for Sophos updating traffic.
⩥ Sophos Intercept X. Answer: On a Windows computer, which
component logs information to the 'Sophos.log' file?
