SOPHOS ENGINEER STUDY EXAMS SHEET 2025/2026
QUESTIONS WITH ANSWERS RATED A+
✔✔Which Sophos support tool do you use to find out the latest information about
security threats? - ✔✔SophosLabs
✔✔True or False: Multi-factor authentication is enabled by default for all Enterprise
Administrators. - ✔✔TRUE
✔✔Which of the following is a pre-execution check performed by Intercept X? -
✔✔Machine learning
✔✔What is the function of Web Control? - ✔✔To control access to websites based on
their category
✔✔Where in Sophos Central Admin Console can you enable remote assistance? -
✔✔Account Details
✔✔Complete the sentence: The Source of Infection clean up tool is a... - ✔✔Tool that
identified where malicious files are written from
✔✔TRUE or FALSE: All Endpoints have the same tamper protection password. -
✔✔FALSE
✔✔Which dashboard allows you to view and apply global settings to multiple Sophos
Central Accounts? - ✔✔The Enterprise Dashboard
✔✔In which policy do you enable deep learning? - ✔✔Threat Protection
✔✔What is the minimum administrative role that will allow a user to manage user roles
and role assignments? - ✔✔Super Admin
✔✔You need to give a user access to change their protection settings in an emergency.
Which 2 of the following allow you to do this? - ✔✔(1) Disable tamper protection for their
endpoint
(2) Provide the user with the tamper protection password
✔✔Complete the sentence: The Virus Removal clean up tool is a... - ✔✔Separate
download that detects and removes malware
✔✔Which feature allows you to restrict applications on a server? - ✔✔Server lockdown
, ✔✔How do you access a managed Sophos Central account to resolve alerts for your
customer? - ✔✔Login using the Launch Sophos Central Admin button in the Partner
Dashboard
✔✔Which is the minimum administrative role that will allow a user access to view and
edit policies? - ✔✔Admin
✔✔You want to check an endpoint has received the latest policy updates from Sophos
Central. Which tab do you select in the Endpoint Self-Help tool to view the last
communication date and time? - ✔✔Management Communication
✔✔Which 2 components are required for protecting virtual environments? - ✔✔(1)
Security Virtual Machine (SVM)
(2) Guest Virtual Machine (GVM)
✔✔In which policy do you enable device isolation? - ✔✔Threat Protection
✔✔Complete the sentence: Server policies are only applied to... - ✔✔Servers or server
groups
✔✔Which of the following is a method of deploying endpoint protection? - ✔✔Download
and run the installer from Sophos Central
✔✔Which URL address do you use to login to Sophos Central Admin Console? -
✔✔central.sophos.com
✔✔You have a suspicious file on your endpoint. Which tool do you use to quickly scan
the file? - ✔✔The file info tab in the self-help tool
✔✔What is the first step you must take when removing Sophos Endpoint Protection
from a Windows endpoint? - ✔✔Disable tamper protection in Sophos Central
✔✔TRUE or FALSE: All Endpoints have the same endpo password. - ✔✔FALSE
✔✔Which 2 of the following does tamper protection prevent users from doing? - ✔✔(1)
Uninstalling the endpoint agent
(2) Modifying protection settings
✔✔Which endpoint protection policy do you edit to block users from visiting a specific
website category? - ✔✔Web Control
✔✔Which of the following is a configuration option for setting the frequency of email
alerts from the Partner Dashboard? - ✔✔By Severity
QUESTIONS WITH ANSWERS RATED A+
✔✔Which Sophos support tool do you use to find out the latest information about
security threats? - ✔✔SophosLabs
✔✔True or False: Multi-factor authentication is enabled by default for all Enterprise
Administrators. - ✔✔TRUE
✔✔Which of the following is a pre-execution check performed by Intercept X? -
✔✔Machine learning
✔✔What is the function of Web Control? - ✔✔To control access to websites based on
their category
✔✔Where in Sophos Central Admin Console can you enable remote assistance? -
✔✔Account Details
✔✔Complete the sentence: The Source of Infection clean up tool is a... - ✔✔Tool that
identified where malicious files are written from
✔✔TRUE or FALSE: All Endpoints have the same tamper protection password. -
✔✔FALSE
✔✔Which dashboard allows you to view and apply global settings to multiple Sophos
Central Accounts? - ✔✔The Enterprise Dashboard
✔✔In which policy do you enable deep learning? - ✔✔Threat Protection
✔✔What is the minimum administrative role that will allow a user to manage user roles
and role assignments? - ✔✔Super Admin
✔✔You need to give a user access to change their protection settings in an emergency.
Which 2 of the following allow you to do this? - ✔✔(1) Disable tamper protection for their
endpoint
(2) Provide the user with the tamper protection password
✔✔Complete the sentence: The Virus Removal clean up tool is a... - ✔✔Separate
download that detects and removes malware
✔✔Which feature allows you to restrict applications on a server? - ✔✔Server lockdown
, ✔✔How do you access a managed Sophos Central account to resolve alerts for your
customer? - ✔✔Login using the Launch Sophos Central Admin button in the Partner
Dashboard
✔✔Which is the minimum administrative role that will allow a user access to view and
edit policies? - ✔✔Admin
✔✔You want to check an endpoint has received the latest policy updates from Sophos
Central. Which tab do you select in the Endpoint Self-Help tool to view the last
communication date and time? - ✔✔Management Communication
✔✔Which 2 components are required for protecting virtual environments? - ✔✔(1)
Security Virtual Machine (SVM)
(2) Guest Virtual Machine (GVM)
✔✔In which policy do you enable device isolation? - ✔✔Threat Protection
✔✔Complete the sentence: Server policies are only applied to... - ✔✔Servers or server
groups
✔✔Which of the following is a method of deploying endpoint protection? - ✔✔Download
and run the installer from Sophos Central
✔✔Which URL address do you use to login to Sophos Central Admin Console? -
✔✔central.sophos.com
✔✔You have a suspicious file on your endpoint. Which tool do you use to quickly scan
the file? - ✔✔The file info tab in the self-help tool
✔✔What is the first step you must take when removing Sophos Endpoint Protection
from a Windows endpoint? - ✔✔Disable tamper protection in Sophos Central
✔✔TRUE or FALSE: All Endpoints have the same endpo password. - ✔✔FALSE
✔✔Which 2 of the following does tamper protection prevent users from doing? - ✔✔(1)
Uninstalling the endpoint agent
(2) Modifying protection settings
✔✔Which endpoint protection policy do you edit to block users from visiting a specific
website category? - ✔✔Web Control
✔✔Which of the following is a configuration option for setting the frequency of email
alerts from the Partner Dashboard? - ✔✔By Severity
