QUESTIONS AND CORRECTLY WELL DEFINED ANSWERS LATEST
ALREADY GRADED A+
In which phase of the troubleshooting do you confirm the steps required to reproduce
the error or symptom? - ANSWER-Define the issue
Which 2 archive files can be loaded into the SURF tool? - ANSWER-SDU, CTR
You are accessing log files using the Advanced Shell. What is the full path to the
directory they are located in? - ANSWER-
TRUE or FALSE. The SURF tool is only available for Sophos partners. - ANSWER-True
You have been locked out of your Sophos Firewall. Which command can you run from
the console that will give you access to all services on all interfaces? - ANSWER-system
appliance_access disable
Which operating system can the SURF tool be run on? - ANSWER-Windows 10
TRUE OR FALSE. All tabs are displayed for any SDU or CTR file loaded into the SURF
tool? - ANSWER-False
TRUE or FALSE: The TLS decryption limit can be adjusted via the console. - ANSWER-
False
Which of the following statements are TRUE if you have a firewall log entry that includes
log_component=Appliance Access. - ANSWER-No firewall rule was matched
Which 3 of the following can be used to create exclusions for decryption? - ANSWER-
Domain, Web category, Subdomain
, Which 2 of the following determines the decryption limit for a Sophos Firewall? -
ANSWER-Number of CPU cores, Device memory
What command can you use to see the MAC address for devices with each health
status? - ANSWER-ipset
A user is able to use an application even though you have prevented it through IPS.
Which 2 of the following are possible causes of the applications not being recognized? -
ANSWER-
What is the name of the log file for Sophos Central registration events? - ANSWER-
sophos-central.log
What is the console command that can be used to check the IPS settings? - ANSWER-
ips-settings
When traffic passes through Sophos Firewall, what does it use to identify computers it
has a Security Heartbeat with? - ANSWER-IP address
What does Sophos Firewall share with devices it has a Security Heartbeat with to prevent
lateral movement? - ANSWER-MAC address
You are reviewing the IPS log file. What does verdict 4 mean? - ANSWER-drop the
session
Enter the log directory that you would check to review both sides of an SSL site-to-site
VPN connection? - ANSWER-/log/sslvpn.log
When troubleshooting an SSL VPN connection issues, where would you go if you saw
the entry below in the log viewer? - ANSWER-device access
Which 2 additional log files are used when troubleshooting issues with route-based
IPsec site-to-site VPN connections? - ANSWER-xfrmi.log, applog.log