SOPHOS TECHNICIAN EXAM 2025 QUESTIONS AND ANSWERS
Global Settings - (answer)Where can the AD Sync tool be obtained from?
The connection was blocked but the root cause has NOT been cleaned up - (answer)Which of the
following statements is TRUE for a C2/Generic-C detection?
Update > Update configuration - (answer)Where in the Endpoint Self Help Tool will show if an
endpoint is using a proxy for updating?
DC=SOPHOS,DC=LOCAL - (answer)When configuring AD synchronization, what location was defined by
default in filters under the User Discovery Filters tab?
ping 172.16.2.20 - (answer)Enter the command you would use to test IP network connectivity to the
address 172.16.2.20. _____
Tamper Protection - (answer)Which feature would protect the Sophos installation from becoming
disabled by malware?
389 - (answer)AD Sync is not working, you have successfully pinged the DC by both name and IP
address. Which port do you use with telnet to confirm the LDAP port is accessible?
netsh winhttp reset proxy - (answer)Enter the command you would use to remove the currently
configured system proxy.
%ProgramData%\Sophos\CloudInstaller\Logs - (answer)Where is the
'SophosCloudInstaller_<time_and_date_stamp>.log' found?
To prevent malicious behavior in software - (answer)What is the function of application lockdown in
Intercept X?
Virus Removal tool - (answer)Which of these cleanup tools will scan for root kits?
, SOPHOS TECHNICIAN EXAM 2025 QUESTIONS AND ANSWERS
Domain user - (answer)What is the minimum type of user required to connect to AD to gather the
user and group information?
True - (answer)TRUE or FALSE: Sophos recommends disabling HTTPS inspection for Sophos updating
traffic.
Sophos Intercept X - (answer)On a Windows computer, which component logs information to the
'Sophos.log' file?
nslookup - (answer)The Central Admin Dashboard shows that none of your endpoints are using one of
your update caches. When pinging the update cache by name it fails. What command do you use to
investigate this further?
Resolve and verify - (answer)What is the third step of the troubleshooting process?
Global settings > Controlled Updates - (answer)By default, computers get the latest Sophos product
updates automatically, where can an admin change this to allow control over updates?
SHA-256
The file paths
The certificate - (answer)In which 3 ways can you allow a quarantined file to be restored?
Windows client firewall blocking traffic - (answer)When investigating an updating issue on one of your
endpoints, you used the telnet command to connect to dci.sophosupd.com on port 443. This
confirmed that there is a problem using a direct connection. What is most likely to be causing this?
Ability to disable Tamper Protection
Administrative rights to the network and AD
Global Settings - (answer)Where can the AD Sync tool be obtained from?
The connection was blocked but the root cause has NOT been cleaned up - (answer)Which of the
following statements is TRUE for a C2/Generic-C detection?
Update > Update configuration - (answer)Where in the Endpoint Self Help Tool will show if an
endpoint is using a proxy for updating?
DC=SOPHOS,DC=LOCAL - (answer)When configuring AD synchronization, what location was defined by
default in filters under the User Discovery Filters tab?
ping 172.16.2.20 - (answer)Enter the command you would use to test IP network connectivity to the
address 172.16.2.20. _____
Tamper Protection - (answer)Which feature would protect the Sophos installation from becoming
disabled by malware?
389 - (answer)AD Sync is not working, you have successfully pinged the DC by both name and IP
address. Which port do you use with telnet to confirm the LDAP port is accessible?
netsh winhttp reset proxy - (answer)Enter the command you would use to remove the currently
configured system proxy.
%ProgramData%\Sophos\CloudInstaller\Logs - (answer)Where is the
'SophosCloudInstaller_<time_and_date_stamp>.log' found?
To prevent malicious behavior in software - (answer)What is the function of application lockdown in
Intercept X?
Virus Removal tool - (answer)Which of these cleanup tools will scan for root kits?
, SOPHOS TECHNICIAN EXAM 2025 QUESTIONS AND ANSWERS
Domain user - (answer)What is the minimum type of user required to connect to AD to gather the
user and group information?
True - (answer)TRUE or FALSE: Sophos recommends disabling HTTPS inspection for Sophos updating
traffic.
Sophos Intercept X - (answer)On a Windows computer, which component logs information to the
'Sophos.log' file?
nslookup - (answer)The Central Admin Dashboard shows that none of your endpoints are using one of
your update caches. When pinging the update cache by name it fails. What command do you use to
investigate this further?
Resolve and verify - (answer)What is the third step of the troubleshooting process?
Global settings > Controlled Updates - (answer)By default, computers get the latest Sophos product
updates automatically, where can an admin change this to allow control over updates?
SHA-256
The file paths
The certificate - (answer)In which 3 ways can you allow a quarantined file to be restored?
Windows client firewall blocking traffic - (answer)When investigating an updating issue on one of your
endpoints, you used the telnet command to connect to dci.sophosupd.com on port 443. This
confirmed that there is a problem using a direct connection. What is most likely to be causing this?
Ability to disable Tamper Protection
Administrative rights to the network and AD
