SOPHOS TECHNICIAN ACTUAL
CERTIFICATION PAPER 2026 QUESTIONS
WITH SOLUTIONS GRADED A+
●● Which 2 archive files can be loaded into the SURF tool?.
Answer: SDU, CTR
●● You are accessing log files using the Advanced Shell. What is the full
path to the directory they are located in?.
Answer:
●● TRUE or FALSE. The SURF tool is only available for Sophos
partners..
Answer: True
●● You have been locked out of your Sophos Firewall. Which command
can you run from the console that will give you access to all services on
all interfaces?.
Answer: system appliance_access disable
●● Which operating system can the SURF tool be run on?.
Answer: Windows 10
, ●● TRUE OR FALSE. All tabs are displayed for any SDU or CTR file
loaded into the SURF tool?.
Answer: False
●● TRUE or FALSE: The TLS decryption limit can be adjusted via the
console..
Answer: False
●● Which of the following statements are TRUE if you have a firewall
log entry that includes log_component=Appliance Access..
Answer: No firewall rule was matched
●● Which 3 of the following can be used to create exclusions for
decryption?.
Answer: Domain, Web category, Subdomain
●● Which 2 of the following determines the decryption limit for a
Sophos Firewall?.
Answer: Number of CPU cores, Device memory
●● What command can you use to see the MAC address for devices
with each health status?.
Answer: ipset
CERTIFICATION PAPER 2026 QUESTIONS
WITH SOLUTIONS GRADED A+
●● Which 2 archive files can be loaded into the SURF tool?.
Answer: SDU, CTR
●● You are accessing log files using the Advanced Shell. What is the full
path to the directory they are located in?.
Answer:
●● TRUE or FALSE. The SURF tool is only available for Sophos
partners..
Answer: True
●● You have been locked out of your Sophos Firewall. Which command
can you run from the console that will give you access to all services on
all interfaces?.
Answer: system appliance_access disable
●● Which operating system can the SURF tool be run on?.
Answer: Windows 10
, ●● TRUE OR FALSE. All tabs are displayed for any SDU or CTR file
loaded into the SURF tool?.
Answer: False
●● TRUE or FALSE: The TLS decryption limit can be adjusted via the
console..
Answer: False
●● Which of the following statements are TRUE if you have a firewall
log entry that includes log_component=Appliance Access..
Answer: No firewall rule was matched
●● Which 3 of the following can be used to create exclusions for
decryption?.
Answer: Domain, Web category, Subdomain
●● Which 2 of the following determines the decryption limit for a
Sophos Firewall?.
Answer: Number of CPU cores, Device memory
●● What command can you use to see the MAC address for devices
with each health status?.
Answer: ipset