Sophos Firewall v19.5 Exam (Version A)
with 150 Verified Questions and Correct
Answers + Expert Feedback (New Update)
1. Lateral movement protection is made possible by Synchronized Security
which of the following?
2. Which 2 of these are features of the Xstream achitec- TLS 1.3 Decryption und
ture? Deep packet inspection
3. Which feature of the Sophjos Firewall helps prevent Advanced Threat Protec-
a computer infected by a trojan from transmitting tion
personal information out of theri network?
4. Which feature of the Sophos �rewall identi�es un- Synchronized App Controll
known applications?
5. What cloud platfroms is Sophos Firewall supported AWS, Azure und Nutanix
on?
6. How many radios do the wireless XGS series models 1
have?
7. True or False: The number of ports can be expanded True
using additional modules.
8. You have received a new hardware Sophos Firewall. 172.16.16.16:4444
What is the default IP addres and port that is used to
access the device?
9. You are preparing a Sophos Firewall for installation on I do not want to register
a remote site. The order for the license hat not yet now.
been processed. Which device registration oprion do
you select in the Initial Suetup wizard?
10. Servic objects can be created for which of the follow-
ing?
, TCP/UDP Ports, IP Proto-
col Number, ICMP Type
and Code
11. In which of these zones is an interface con gured WAN
with a gateway?
12. How many gateways can you include in an SD-WAN 8
pro�le?
13. Place the route types in the correct default order of 1. Static; 2. SD-WAN; 3.
precedence VPN; 4. Default
14. How many servers does Sophos Firewall suport for 3
static DNS?
15. You have an existing DHCP server. What con�guration Relay
allows Sophos �rewall to forward lease requests to
this?
16. Which of these are de�ned as Admin services in Device HTTPS and SSH
access?
17. You want a certi�cate to be signed by a third-party Generate CSR
company. which option should you choose?
18. What are the di erent types of tra c shaping policy Users, Web categories,
you can create? Rules, Applications
19. What do you need to con�gure before you can start Total WAN bandwidth
using tra c shaping?
20. True
, True of False: NAT rules are processed in order from
top to bottom
True or False: All �rewall rules are evaluated and the false
21. best match is used.
22. Which 3 of the following are matching criteria Sophos Destination ZONE, Source
Firewall uses to automatically assign �rewall rules to ZONE, Rule type
groups?
23. complete the sentence below: Post NAT
When creating a �rewall rule for DNAT, you select the
________ destination zone.
24. Where would you exclude a website from TLS inspec- WEB -> URL Groups
tion?
25. Where would you con�gure which chiper algorithms Decryption pro�le
to block?
26. What 2 things do you need to do to use IPS policies Select an IPS policy in a
�rewall rule; Enable IPS
using the switch
27. Spoof Protection Drops tra c that is trying
to pretend to come from
a di erent MAC of IP ad-
dress to bypass protection
28. DoS Protection Drops tra c that is ma-
liciously trying to prevent
legitimate tra c from be-
with 150 Verified Questions and Correct
Answers + Expert Feedback (New Update)
1. Lateral movement protection is made possible by Synchronized Security
which of the following?
2. Which 2 of these are features of the Xstream achitec- TLS 1.3 Decryption und
ture? Deep packet inspection
3. Which feature of the Sophjos Firewall helps prevent Advanced Threat Protec-
a computer infected by a trojan from transmitting tion
personal information out of theri network?
4. Which feature of the Sophos �rewall identi�es un- Synchronized App Controll
known applications?
5. What cloud platfroms is Sophos Firewall supported AWS, Azure und Nutanix
on?
6. How many radios do the wireless XGS series models 1
have?
7. True or False: The number of ports can be expanded True
using additional modules.
8. You have received a new hardware Sophos Firewall. 172.16.16.16:4444
What is the default IP addres and port that is used to
access the device?
9. You are preparing a Sophos Firewall for installation on I do not want to register
a remote site. The order for the license hat not yet now.
been processed. Which device registration oprion do
you select in the Initial Suetup wizard?
10. Servic objects can be created for which of the follow-
ing?
, TCP/UDP Ports, IP Proto-
col Number, ICMP Type
and Code
11. In which of these zones is an interface con gured WAN
with a gateway?
12. How many gateways can you include in an SD-WAN 8
pro�le?
13. Place the route types in the correct default order of 1. Static; 2. SD-WAN; 3.
precedence VPN; 4. Default
14. How many servers does Sophos Firewall suport for 3
static DNS?
15. You have an existing DHCP server. What con�guration Relay
allows Sophos �rewall to forward lease requests to
this?
16. Which of these are de�ned as Admin services in Device HTTPS and SSH
access?
17. You want a certi�cate to be signed by a third-party Generate CSR
company. which option should you choose?
18. What are the di erent types of tra c shaping policy Users, Web categories,
you can create? Rules, Applications
19. What do you need to con�gure before you can start Total WAN bandwidth
using tra c shaping?
20. True
, True of False: NAT rules are processed in order from
top to bottom
True or False: All �rewall rules are evaluated and the false
21. best match is used.
22. Which 3 of the following are matching criteria Sophos Destination ZONE, Source
Firewall uses to automatically assign �rewall rules to ZONE, Rule type
groups?
23. complete the sentence below: Post NAT
When creating a �rewall rule for DNAT, you select the
________ destination zone.
24. Where would you exclude a website from TLS inspec- WEB -> URL Groups
tion?
25. Where would you con�gure which chiper algorithms Decryption pro�le
to block?
26. What 2 things do you need to do to use IPS policies Select an IPS policy in a
�rewall rule; Enable IPS
using the switch
27. Spoof Protection Drops tra c that is trying
to pretend to come from
a di erent MAC of IP ad-
dress to bypass protection
28. DoS Protection Drops tra c that is ma-
liciously trying to prevent
legitimate tra c from be-
