SOPHOS ENGINEER ET80 LATEST EXAM TEST QUESTIONS
AND ANSWERS SURE A+
✔✔What is the most common deployment scenario for a Sophos firewall and also the
default mode? - ✔✔Gateway Mode
✔✔Which feature can harden forms, sign cookies, and prevent SQL injection? -
✔✔Web Server Protection
✔✔True or False, Sophos firewall devices come pre-loaded with software. - ✔✔True
✔✔What makes lateral movement protection possible? - ✔✔Server or Endpoint
protection
✔✔When configuring SD-WAN profiles for load balancing, what two methods can be
used? - ✔✔Session persistence and Round Robin
✔✔What are local services? - ✔✔Local services are management services specific to
the internal functioning of Sophos firewall, such as the web admin and CLI consoles,
and authentication services.
✔✔What is the name of the default ticket provide by Sophos? -
✔✔Appliance_Certificate_SERIAL-NUMBER
✔✔What are the four methods of adding a certificate? - ✔✔Upload a certificate signed
by a trusted CA, Create a self-signed certificate, Create a certificate signing request
(CSR) that will be signed by a trusted CA, Create a free certificate using Let's Encrypt.
✔✔What MUST be configured before using traffic shaping? - ✔✔The total WAN
bandwidth must be configured.
✔✔What protects against exploits and malformed traffic? - ✔✔IPS Policies
✔✔Which three authentication types can be used for IPsec site-to-site VPNs? - ✔✔Pre-
shared keys, digital certificates, and RSA signatures.
✔✔When configuring Azure AD SSO, where can you find the redirect URL that needs to
be added to the app registration in Azure AD? - ✔✔Authentication Servers.
✔✔Which directory service is supported by STAS when used with a Sophos firewall? -
✔✔Microsoft Active Directory
✔✔What port number is used by Captive portal? - ✔✔8090 (443)
AND ANSWERS SURE A+
✔✔What is the most common deployment scenario for a Sophos firewall and also the
default mode? - ✔✔Gateway Mode
✔✔Which feature can harden forms, sign cookies, and prevent SQL injection? -
✔✔Web Server Protection
✔✔True or False, Sophos firewall devices come pre-loaded with software. - ✔✔True
✔✔What makes lateral movement protection possible? - ✔✔Server or Endpoint
protection
✔✔When configuring SD-WAN profiles for load balancing, what two methods can be
used? - ✔✔Session persistence and Round Robin
✔✔What are local services? - ✔✔Local services are management services specific to
the internal functioning of Sophos firewall, such as the web admin and CLI consoles,
and authentication services.
✔✔What is the name of the default ticket provide by Sophos? -
✔✔Appliance_Certificate_SERIAL-NUMBER
✔✔What are the four methods of adding a certificate? - ✔✔Upload a certificate signed
by a trusted CA, Create a self-signed certificate, Create a certificate signing request
(CSR) that will be signed by a trusted CA, Create a free certificate using Let's Encrypt.
✔✔What MUST be configured before using traffic shaping? - ✔✔The total WAN
bandwidth must be configured.
✔✔What protects against exploits and malformed traffic? - ✔✔IPS Policies
✔✔Which three authentication types can be used for IPsec site-to-site VPNs? - ✔✔Pre-
shared keys, digital certificates, and RSA signatures.
✔✔When configuring Azure AD SSO, where can you find the redirect URL that needs to
be added to the app registration in Azure AD? - ✔✔Authentication Servers.
✔✔Which directory service is supported by STAS when used with a Sophos firewall? -
✔✔Microsoft Active Directory
✔✔What port number is used by Captive portal? - ✔✔8090 (443)
