SOPHOS Certified Engineer Exam Test with Answers Rated A
Which TCP port is used to communicate policies to end-
8190
points?
Which Sophos Central manage product protects the data
Encryption
on a lost or stolen laptop?
The option to stop the AutoUpdate service is greyed out in
Tamper Protection is enabled
Windows Services. What is the most likely reason for this?
Complete the sentence: Signature-based file scanning re-
previously detected malware characteristics
lies on...
TRUE or FALSE: Tamper protection is enabled by default. TRUE
You are unable to edit policies in Sophos Central. What do
That you have the correct role assigned
you check in Sophos Central?
Which URL address do you use to login to Sophos Central
partnerportal.sophos.com
Partner Dashboard?
You are detecting low-reputation files and want to change
the reputation level from recommended to strict. Which Threat Protection
policy do you edit to make this change?
What is the FIRST step you must take when deploying
Check the system requirements
virtual environments?
You want to prevent users from copying database files to
USB drives without blocking the use of all USB devices. Data Loss Prevention
Which policy do you need to configure?
TRUE or FALSE: You can search for a malicious item across
TRUE
your network using EDR
Which log provides a record of all activities? Audit log
What is the function of anti-exploit technology? To detect and stop compromised vulnerable applications
Complete the sentence: The SAV32CLI clean-up tool is a... Command line tool included in Sophos Central installation
1/8
, When registering for a Sophos Central Trial, which of the You must use an email address that has not been used
following statements are TRUE? with Sophos Central before
Which tab on the device details page displays the tamper
SUMMARY
protection information?
Connects to a cloud server to check for the latest informa-
What is the function of Live Protection?
tion about a file
How long are activities stored for in the Enterprise Dash-
90 days
board?
To download updates from Sophos Central and store them
What is the function of an Update Cache?
on a dedicated server on your network
What is the function of on-access scanning? Monitors running processes' behavior
Which of the following alerts is categorized as a high alert? Failed to protect an endpoint
Which dashboard allows you to manage and apply global
The Partner Dashboard
settings to multiple Sophos Central accounts?
Which detection feature can prevent attacks on the master
WipeGuard
boot record?
To enable all devices to communicate all policy and report-
What is the function of a Message Relay?
ing data using a dedicated server on your network
True or False: Marking an alert as acknowledge will resolve
FALSE
the threat on the endpoint.
Which TCP port is used to communicate Updates on end-
8191
points?
TRUE or FALSE: The security VM installer is linked to your
FALSE
Sophos Central account.
TRUE or FALSE: You can deploy an update cache without a
TRUE
Message Relay.
In the Data Loss Prevention Rule
2/8
Which TCP port is used to communicate policies to end-
8190
points?
Which Sophos Central manage product protects the data
Encryption
on a lost or stolen laptop?
The option to stop the AutoUpdate service is greyed out in
Tamper Protection is enabled
Windows Services. What is the most likely reason for this?
Complete the sentence: Signature-based file scanning re-
previously detected malware characteristics
lies on...
TRUE or FALSE: Tamper protection is enabled by default. TRUE
You are unable to edit policies in Sophos Central. What do
That you have the correct role assigned
you check in Sophos Central?
Which URL address do you use to login to Sophos Central
partnerportal.sophos.com
Partner Dashboard?
You are detecting low-reputation files and want to change
the reputation level from recommended to strict. Which Threat Protection
policy do you edit to make this change?
What is the FIRST step you must take when deploying
Check the system requirements
virtual environments?
You want to prevent users from copying database files to
USB drives without blocking the use of all USB devices. Data Loss Prevention
Which policy do you need to configure?
TRUE or FALSE: You can search for a malicious item across
TRUE
your network using EDR
Which log provides a record of all activities? Audit log
What is the function of anti-exploit technology? To detect and stop compromised vulnerable applications
Complete the sentence: The SAV32CLI clean-up tool is a... Command line tool included in Sophos Central installation
1/8
, When registering for a Sophos Central Trial, which of the You must use an email address that has not been used
following statements are TRUE? with Sophos Central before
Which tab on the device details page displays the tamper
SUMMARY
protection information?
Connects to a cloud server to check for the latest informa-
What is the function of Live Protection?
tion about a file
How long are activities stored for in the Enterprise Dash-
90 days
board?
To download updates from Sophos Central and store them
What is the function of an Update Cache?
on a dedicated server on your network
What is the function of on-access scanning? Monitors running processes' behavior
Which of the following alerts is categorized as a high alert? Failed to protect an endpoint
Which dashboard allows you to manage and apply global
The Partner Dashboard
settings to multiple Sophos Central accounts?
Which detection feature can prevent attacks on the master
WipeGuard
boot record?
To enable all devices to communicate all policy and report-
What is the function of a Message Relay?
ing data using a dedicated server on your network
True or False: Marking an alert as acknowledge will resolve
FALSE
the threat on the endpoint.
Which TCP port is used to communicate Updates on end-
8191
points?
TRUE or FALSE: The security VM installer is linked to your
FALSE
Sophos Central account.
TRUE or FALSE: You can deploy an update cache without a
TRUE
Message Relay.
In the Data Loss Prevention Rule
2/8
