Sophos Technician Exam Questions and answers | Updated 2025

Sophos Technician Exam Questions and
answers | Updated 2025
Global Settings - Correct Answers Where can the AD Sync tool be obtained from?
I I II I IIII I I I I I I I I




The connection was blocked but the root cause has NOT been cleaned up - Correct
I I I I I I I I I I I I I I II



Answers Which of the following statements is TRUE for a C2/Generic-C detection?
I IIII I I I I I I I I I I




Update > Update configuration - Correct Answers Where in the Endpoint Self Help Tool
I I I I I II I IIII I I I I I I



I will show if an endpoint is using a proxy for updating?
I I I I I I I I I I




DC=SOPHOS,DC=LOCAL - Correct Answers When configuring AD synchronization,
I I II I IIII I I I



I what location was defined by default in filters under the User Discovery Filters tab?
I I I I I I I I I I I I I




ping 172.16.2.20 - Correct Answers Enter the command you would use to test IP network
I I I II I IIII I I I I I I I I I



connectivity to the address 172.16.2.20. _____
I I I I I I




Tamper Protection - Correct Answers Which feature would protect the Sophos installation
I I I II I IIII I I I I I I



from becoming disabled by malware?
I I I I I




389 - Correct Answers AD Sync is not working, you have successfully pinged the DC by
I I II I IIII I I I I I I I I I I I



both name and IP address. Which port do you use with telnet to confirm the LDAP port is
I I I I I I I I I I I I I I I I I I



accessible?
I




netsh winhttp reset proxy - Correct Answers Enter the command you would use to remove
I I I I I II I IIII I I I I I I I



the currently configured system proxy.
I I I I I




%ProgramData%\Sophos\CloudInstaller\Logs - Correct Answers Where is the
I I II I IIII I I



'SophosCloudInstaller_<time_and_date_stamp>.log' found?
I I




To prevent malicious behavior in software - Correct Answers What is the function of
I I I I I I I II I IIII I I I I



application lockdown in Intercept X?
I I I I I




Virus Removal tool - Correct Answers Which of these cleanup tools will scan for root kits?
I I I I II I IIII I I I I I I I I I




Domain user - Correct Answers What is the minimum type of user required to connect to
I I I II I IIII I I I I I I I I I I



AD to gather the user and group information?
I I I I I I I I




True - Correct Answers TRUE or FALSE: Sophos recommends disabling HTTPS
I I II I IIII I I I I I I



inspection for Sophos updating traffic.
I I I I I




Sophos Intercept X - Correct Answers On a Windows computer, which component logs
I I I I II I IIII I I I I I I



information to the 'Sophos.log' file?
I I I I I

, nslookup - Correct Answers The Central Admin Dashboard shows that none of your
I I II I IIII I I I I I I I I



endpoints are using one of your update caches. When pinging the update cache by name it
I I I I I I I I I I I I I I I I



fails. What command do you use to investigate this further?
I I I I I I I I I I




Resolve and verify - Correct Answers What is the third step of the troubleshooting
I I I I II I IIII I I I I I I I



process?
I




Global settings > Controlled Updates - Correct Answers By default, computers get the
I I I I I I II I IIII I I I I



latest Sophos product updates automatically, where can an admin change this to allow
I I I I I I I I I I I I I



control over updates?
I I I




SHA-256
I



The file paths I I



The certificate - Correct Answers In which 3 ways can you allow a quarantined file to be
I I II I IIII I I I I I I I I I I I



restored?
I




Windows client firewall blocking traffic - Correct Answers When investigating an updating
I I I I I I II I IIII I I I



issue on one of your endpoints, you used the telnet command to connect to
I I I I I I I I I I I I I I



dci.sophosupd.com on port 443. This confirmed that there is a problem using a direct
I I I I I I I I I I I I I I



connection. What is most likely to be causing this?
I I I I I I I I I




Ability to disable Tamper Protection
I I I I I



Administrative rights to the network and AD I I I I I I



Administrative rights to the endpoint - Correct Answers Which 3 of the following are I I I I I II I IIII I I I I I



required to perform troubleshooting on an endpoint? Choose three (3).
I I I I I I I I I I




Read - Correct Answers What permissions does the user need to connect to AD to gather
I I II I IIII I I I I I I I I I I I



the user and group information?
I I I I I




60 mins - Correct Answers AutoUpdate performs its first check 5 minutes after the service
I I I II I IIII I I I I I I I I I



starts. At what interval does AutoUpdate then check for software, threat detection data and
I I I I I I I I I I I I I I



other available updates?
I I I




True - Correct Answers TRUE or FALSE: Only PE files can be restored from SafeStore
I I II I IIII I I I I I I I I I I



through the user interface.
I I I I




- Correct Answers Enter the command you would use to resolve the IP address of
II II I IIII I I I I I I I I I I I



srv.sophos.local and test network connectivity to the server at the same time. _____
I I I I I I I I I I I I I




Date and time are incorrect on the Update Cache server - Correct Answers Why would the
I I I I I I I I I I I II I IIII I I



'Last time updated from cache' status show as 'in a year'?
I I I I I I I I I I I




The threat was found in an archive
I I I I I I I



The threat was found in a mailbox - Correct Answers Which 2 of the following are reasons
I I I I I I I II I IIII I I I I I I



why manual cleanup may be required? Choose two (2).
I I I I I I I I I