1|Page
Sophos Technician Exam ||Verified Exam!!|| Most
Recent Exam Actual Complete Real Exam Questions
And Correct Answers (Verified Answers) Already
Graded A+ | Guaranteed Success!! Newest Exam!!!
In which troubleshooting phase should you check the
configuration of the affected function and the log files for
additional information? - Answer-Root cause analysis
TRUE or FALSE. Any Active Directory issues will return an
error in the synchronization tool when you initiate a
manual synchronization. - Answer-FALSE
What PowerShell command can be used to test the
connection to the domain controller from a device with the
AD Sync Utility installed? (enter the name of the command
only with no additional parameters) - Answer-Test-
NetConnection
When configuring the Windows AD Sync Utility, which
LDAP operator would you use if you want two LDAP filters
to be true? - Answer-&
,2|Page
Sophos uses certificate pinning. What do you need to do
because of this? - Answer-Exclude Sophos domains from
TLS decryption
A component failed to install. When you check the log file,
what words do you search for in the log? - Answer-error
and fail
You are investigating a failed update and suspect there is
an issue with name resolution, which log file would you
check to confirm that the endpoint is able to reach the
update cache? - Answer-SophosUpdate.log
TRUE or FALSE: Sophos recommends disabling HTTPS
inspection for Sophos updating traffic. - Answer-True
TRUE or FALSE: You can pass a list of Update Caches to
the Windows installer using an install script option. -
Answer-False
Why would the 'LAST CACHE UPDATE' show a date in
the future? - Answer-the date and time is incorrect on the
Update Cache server
,3|Page
After how many days will data be purged from the Update
Cache retire folder, if not requested? - Answer-Data in the
Update Cache retire folder is typically purged after 5 days
if it is not requested.
TRUE or FALSE: Following installation of an Update
Cache, devices must be configured to use it - Answer-
False
TRUE or FALSE: All tabs are displayed for any SDU or
CTR file loaded into the SURF tool. - Answer-False
In which troubleshooting phase should you confirm the
steps required to reproduce the error or symptom? -
Answer-Define the issue
In which troubleshooting phase should you follow the
steps to reproduce the issue to confirm it is now resolved?
- Answer-Verification testing
What can be used for a device that does not have a direct
Internet connection to allow communication with Sophos
Central? - Answer-A Message Relay
, 4|Page
Type the Windows command used to test connectivity to a
specific address. - Answer-ping
What does the network test tool do when run? - Answer-
specific communication channels directly to Sophos
True or false. Base policies can be disabled. - Answer-
False
Which management communication component handles
the communication between Sophos Central and a
protected device? - Answer-MCS Client
What is the best practice when testing new features in the
threat protection policy? - Answer-create a new policy with
the new feature enabled and assign the policy to a test
user or device group.
What action should you take if a detected file cannot be
removed manually from a protected device? - Answer-
Submit the file to Sophos for analysis.
Sophos Technician Exam ||Verified Exam!!|| Most
Recent Exam Actual Complete Real Exam Questions
And Correct Answers (Verified Answers) Already
Graded A+ | Guaranteed Success!! Newest Exam!!!
In which troubleshooting phase should you check the
configuration of the affected function and the log files for
additional information? - Answer-Root cause analysis
TRUE or FALSE. Any Active Directory issues will return an
error in the synchronization tool when you initiate a
manual synchronization. - Answer-FALSE
What PowerShell command can be used to test the
connection to the domain controller from a device with the
AD Sync Utility installed? (enter the name of the command
only with no additional parameters) - Answer-Test-
NetConnection
When configuring the Windows AD Sync Utility, which
LDAP operator would you use if you want two LDAP filters
to be true? - Answer-&
,2|Page
Sophos uses certificate pinning. What do you need to do
because of this? - Answer-Exclude Sophos domains from
TLS decryption
A component failed to install. When you check the log file,
what words do you search for in the log? - Answer-error
and fail
You are investigating a failed update and suspect there is
an issue with name resolution, which log file would you
check to confirm that the endpoint is able to reach the
update cache? - Answer-SophosUpdate.log
TRUE or FALSE: Sophos recommends disabling HTTPS
inspection for Sophos updating traffic. - Answer-True
TRUE or FALSE: You can pass a list of Update Caches to
the Windows installer using an install script option. -
Answer-False
Why would the 'LAST CACHE UPDATE' show a date in
the future? - Answer-the date and time is incorrect on the
Update Cache server
,3|Page
After how many days will data be purged from the Update
Cache retire folder, if not requested? - Answer-Data in the
Update Cache retire folder is typically purged after 5 days
if it is not requested.
TRUE or FALSE: Following installation of an Update
Cache, devices must be configured to use it - Answer-
False
TRUE or FALSE: All tabs are displayed for any SDU or
CTR file loaded into the SURF tool. - Answer-False
In which troubleshooting phase should you confirm the
steps required to reproduce the error or symptom? -
Answer-Define the issue
In which troubleshooting phase should you follow the
steps to reproduce the issue to confirm it is now resolved?
- Answer-Verification testing
What can be used for a device that does not have a direct
Internet connection to allow communication with Sophos
Central? - Answer-A Message Relay
, 4|Page
Type the Windows command used to test connectivity to a
specific address. - Answer-ping
What does the network test tool do when run? - Answer-
specific communication channels directly to Sophos
True or false. Base policies can be disabled. - Answer-
False
Which management communication component handles
the communication between Sophos Central and a
protected device? - Answer-MCS Client
What is the best practice when testing new features in the
threat protection policy? - Answer-create a new policy with
the new feature enabled and assign the policy to a test
user or device group.
What action should you take if a detected file cannot be
removed manually from a protected device? - Answer-
Submit the file to Sophos for analysis.
