SOPHOS CERTIFIED TECHNICIAN 3.0 WITH 100% CORRECT ANSWERS

True TRUE or FALSE: Sophos recommends disabling HTTPS inspection for MCS traffic. 1. The certificate 2. SHA-256 3. The file paths In which 3 ways can you allow a quarantined file to be restored? Choose three (3). --crtcatalogpath Which switch can be used with SophosS to point to the name and location of a custom catalog file? POLICY ENFORCED You have added a new Threat Protection policy that will apply to all Windows endpoints but want to disable it until you can test the settings. Which tab should you use to disable it? False TRUE or FALSE: The Sophos Diagnostic Utility is available for Windows endpoints only. Date and time are incorrect on the Update Cache server Why would the 'Last time updated from cache' status show as 'in a year'? 1. Isolate an endpoint 2. Clean and block 3. Generate a threat case Which 3 of the following actions are available following a threat search? Domain user What is the minimum type of user required to connect to AD to gather the user and group information? /private/var/log Where is the '' found on a Mac OS X endpoint? DC=SOPHOS,DC=LOCAL When configuring AD synchronization, what location was defined by default in filters under the User Discovery Filters tab? 8190 Enter the port number that a Message Relay will use. _____ True TRUE or FALSE: C:TEMP should never be whitelisted in Sophos Central. True TRUE or FALSE: All quarantined data is encrypted in SafeStore. Tamper Protection is enabled The option to stop the AutoUpdate service is greyed out in Windows Services. What is the most likely reason for this? Root Cause Analysis What is the second step of the troubleshooting process? False TRUE or FALSE: All the default policies in Sophos Central can be disabled. Read What permissions does the user need to connect to AD to gather the user and group information? True TRUE or FALSE: You can deploy an update cache without a Message Relay. Telnet Which of the following Windows tools do you use to test connectivity to a specific port or service? Sophos Anti-Virus Which Windows service must be disabled when recovering a tamper protected endpoint? To detect malicious file encryption by ransomware What is the function of CryptoGuard? False TRUE or FALSE: The default Update Cache TCP port of 8191 can be modified. To protect against vulnerabilities in software Why is it important to apply updates and patches to all applications and operating systems across your network? Devices and device groups When creating a server policy for Threat Protection in Sophos Central, what can it be assigned to? 1. To remove malware and PUA's 2. To move all detected items to SafeStore What are the 2 primary functions of Sophos Clean? Choose two (2).