SOPHOS TECHNICIAN question and
answers graded A+ 2023
Read - correct answer What permissions does the user need to connect to AD to gather the user and
group information?
True - correct answer TRUE or FALSE: Only PE files can be restored from SafeStore through the user
interface.
Domain user - correct answer What is the minimum type of user required to connect to AD to gather the
user and group information?
Global settings > Controlled Updates - correct answer By default, computers get the latest Sophos
product updates automatically, where can an admin change this to allow control over updates?
telnet dc.sophos.local 636 - correct answer You want to test the default SSL LDAP port for Active
Directory synchronization. Enter the command you would use to verify connectivity to a domain
controller named dc.sophos.local. _____
%ProgramData%\sophos\sophos cloud AD sync\logs - correct answer Where is the AD sync log location?
nslookup - correct answer The Central Admin Dashboard shows that none of your endpoints are using
one of your update caches. When pinging the update cache by name it fails. What command do you use
to investigate this further?
True - correct answer TRUE or FALSE: Tamper Protection is enabled by default in Sophos Central.
(1) Sophos Endpoint Self Help
(2) Sophos Central - correct answer Which 2 methods does Sophos provide that will display the status of
all Sophos services on Windows computers? Choose two (2).
, The connection was blocked but the root cause has NOT been cleaned up - correct answer Which of the
following statements is TRUE for a C2/Generic-C detection?
Active Directory Sync Utility - correct answer Where do you check to see if the AD sync schedule has
been configured correctly?
Global Settings - correct answer Where can the AD Sync tool be obtained from?
To detect man-in-the-middle attacks - correct answer What is the function of Safe Browsing in Intercept
X?
(1) Program Data\Sophos\SafeStore
(2) Program Data\Sophos\Sophos Anti-Virus\SafeStore - correct answer Where can you find the
SafeStore quarantine folders on a Windows Endpoint? Choose two (2).
Resolve and verify - correct answer What is the third step of the troubleshooting process?
(1) The threat was found in an archive
(2) The threat was found in a mailbox - correct answer Which 2 of the following are reasons why manual
cleanup may be required? Choose two (2).
True - correct answer TRUE or FALSE: You can recover the Tamper Protection password for a deleted
endpoint in Sophos Central.
True - correct answer TRUE or FALSE: Sophos recommends disabling HTTPS inspection for Sophos
updating traffic.
389 - correct answer AD Sync is not working, you have successfully pinged the DC by both name and IP
address. Which port do you use with telnet to confirm the LDAP port is accessible?
answers graded A+ 2023
Read - correct answer What permissions does the user need to connect to AD to gather the user and
group information?
True - correct answer TRUE or FALSE: Only PE files can be restored from SafeStore through the user
interface.
Domain user - correct answer What is the minimum type of user required to connect to AD to gather the
user and group information?
Global settings > Controlled Updates - correct answer By default, computers get the latest Sophos
product updates automatically, where can an admin change this to allow control over updates?
telnet dc.sophos.local 636 - correct answer You want to test the default SSL LDAP port for Active
Directory synchronization. Enter the command you would use to verify connectivity to a domain
controller named dc.sophos.local. _____
%ProgramData%\sophos\sophos cloud AD sync\logs - correct answer Where is the AD sync log location?
nslookup - correct answer The Central Admin Dashboard shows that none of your endpoints are using
one of your update caches. When pinging the update cache by name it fails. What command do you use
to investigate this further?
True - correct answer TRUE or FALSE: Tamper Protection is enabled by default in Sophos Central.
(1) Sophos Endpoint Self Help
(2) Sophos Central - correct answer Which 2 methods does Sophos provide that will display the status of
all Sophos services on Windows computers? Choose two (2).
, The connection was blocked but the root cause has NOT been cleaned up - correct answer Which of the
following statements is TRUE for a C2/Generic-C detection?
Active Directory Sync Utility - correct answer Where do you check to see if the AD sync schedule has
been configured correctly?
Global Settings - correct answer Where can the AD Sync tool be obtained from?
To detect man-in-the-middle attacks - correct answer What is the function of Safe Browsing in Intercept
X?
(1) Program Data\Sophos\SafeStore
(2) Program Data\Sophos\Sophos Anti-Virus\SafeStore - correct answer Where can you find the
SafeStore quarantine folders on a Windows Endpoint? Choose two (2).
Resolve and verify - correct answer What is the third step of the troubleshooting process?
(1) The threat was found in an archive
(2) The threat was found in a mailbox - correct answer Which 2 of the following are reasons why manual
cleanup may be required? Choose two (2).
True - correct answer TRUE or FALSE: You can recover the Tamper Protection password for a deleted
endpoint in Sophos Central.
True - correct answer TRUE or FALSE: Sophos recommends disabling HTTPS inspection for Sophos
updating traffic.
389 - correct answer AD Sync is not working, you have successfully pinged the DC by both name and IP
address. Which port do you use with telnet to confirm the LDAP port is accessible?
