SOPHOS CERTIFIED ENGINEER EXAM QUESTIONS
WITH 100 % CORRECT ANSWERS
QUESTION; Which 2 of the following does tamper protection prevent users from doing? - ANSWER-(1)
Uninstalling the endpoint agent
(2) Modifying protection settings
QUESTION; Which endpoint protection policy do you edit to block users from visiting a specific website
category? - ANSWER-Web Control
QUESTION; Which of the following is a configuration option for setting the frequency of email alerts from
the Partner Dashboard? - ANSWER-By Severity
Which TCP port is used to communicate policies to endpoints? - ANSWER-8190
QUESTION; Which Sophos Central manage product protects the data on a lost or stolen laptop? -
ANSWER-Encryption
QUESTION; The option to stop the AutoUpdate service is greyed out in Windows Services. What is the
most likely reason for this? - ANSWER-Tamper Protection is enabled
QUESTION; Complete the sentence: Signature-based file scanning relies on... - ANSWER-previously
detected malware characteristics
QUESTION; TRUE or FALSE: Tamper protection is enabled by default. - ANSWER-TRUE
QUESTION; You are unable to edit policies in Sophos Central. What do you check in Sophos Central? -
ANSWER-That you have the correct role assigned
QUESTION; Which URL address do you use to login to Sophos Central Partner Dashboard? - ANSWER-
partnerportal.sophos.com
, QUESTION; You are detecting low-reputation files and want to change the reputation level from
recommended to strict. Which policy do you edit to make this change? - ANSWER-Threat Protection
QUESTION; What is the FIRST step you must take when deploying virtual environments? - ANSWER-
Check the system requirements
QUESTION; You want to prevent users from copying database files to USB drives without blocking the use
of all USB devices. Which policy do you need to configure? - ANSWER-Data Loss Prevention
QUESTION; TRUE or FALSE: You can search for a malicious item across your network using EDR -
ANSWER-TRUE
QUESTION; Which log provides a record of all activities? - ANSWER-Audit log
QUESTION; What is the function of anti-exploit technology? - ANSWER-To detect and stop compromised
vulnerable applications
QUESTION; Complete the sentence: The SAV32CLI clean-up tool is a... - ANSWER-Command line tool
included in Sophos Central installation
QUESTION; When registering for a Sophos Central Trial, which of the following statements are TRUE? -
ANSWER-You must use an email address that has not been used with Sophos Central before
QUESTION; Which tab on the device details page displays the tamper protection information? - ANSWER-
SUMMARY
QUESTION; What is the function of Live Protection? - ANSWER-Connects to a cloud server to check for
the latest information about a file
QUESTION; How long are activities stored for in the Enterprise Dashboard? - ANSWER-90 days
WITH 100 % CORRECT ANSWERS
QUESTION; Which 2 of the following does tamper protection prevent users from doing? - ANSWER-(1)
Uninstalling the endpoint agent
(2) Modifying protection settings
QUESTION; Which endpoint protection policy do you edit to block users from visiting a specific website
category? - ANSWER-Web Control
QUESTION; Which of the following is a configuration option for setting the frequency of email alerts from
the Partner Dashboard? - ANSWER-By Severity
Which TCP port is used to communicate policies to endpoints? - ANSWER-8190
QUESTION; Which Sophos Central manage product protects the data on a lost or stolen laptop? -
ANSWER-Encryption
QUESTION; The option to stop the AutoUpdate service is greyed out in Windows Services. What is the
most likely reason for this? - ANSWER-Tamper Protection is enabled
QUESTION; Complete the sentence: Signature-based file scanning relies on... - ANSWER-previously
detected malware characteristics
QUESTION; TRUE or FALSE: Tamper protection is enabled by default. - ANSWER-TRUE
QUESTION; You are unable to edit policies in Sophos Central. What do you check in Sophos Central? -
ANSWER-That you have the correct role assigned
QUESTION; Which URL address do you use to login to Sophos Central Partner Dashboard? - ANSWER-
partnerportal.sophos.com
, QUESTION; You are detecting low-reputation files and want to change the reputation level from
recommended to strict. Which policy do you edit to make this change? - ANSWER-Threat Protection
QUESTION; What is the FIRST step you must take when deploying virtual environments? - ANSWER-
Check the system requirements
QUESTION; You want to prevent users from copying database files to USB drives without blocking the use
of all USB devices. Which policy do you need to configure? - ANSWER-Data Loss Prevention
QUESTION; TRUE or FALSE: You can search for a malicious item across your network using EDR -
ANSWER-TRUE
QUESTION; Which log provides a record of all activities? - ANSWER-Audit log
QUESTION; What is the function of anti-exploit technology? - ANSWER-To detect and stop compromised
vulnerable applications
QUESTION; Complete the sentence: The SAV32CLI clean-up tool is a... - ANSWER-Command line tool
included in Sophos Central installation
QUESTION; When registering for a Sophos Central Trial, which of the following statements are TRUE? -
ANSWER-You must use an email address that has not been used with Sophos Central before
QUESTION; Which tab on the device details page displays the tamper protection information? - ANSWER-
SUMMARY
QUESTION; What is the function of Live Protection? - ANSWER-Connects to a cloud server to check for
the latest information about a file
QUESTION; How long are activities stored for in the Enterprise Dashboard? - ANSWER-90 days
