Sophos administrator v19.5 2025 Questions
And Answers 100% correct
How many servers does Sophos Firewall support for static DNS? - ANSWER- 3
Which 2 actions can ATP be configured to perform when it detects traffic to a command-
and-control server? - ANSWER- Log , Log and drop
Which 3 of the following cloud platforms is Sophos Firewall supported on? - ANSWER-
Nutanix , Microsoft Azure , Amazon Web Services (AWS)
Which firewall icon shown represents a disabled user rule? - ANSWER- C
Which of the following best describes the Bridge to AP LAN security mode for wireless
networks? - ANSWER- Wireless traffic is routed from the AP directly onto the LAN
Which of the following DoS and spoof protection modes will drop packets if the source
MAC address is not configured as a trusted MAC? - ANSWER- MAC filter
What are the two routing strategies that can be used in SD-WAN profiles? - ANSWER-
First available gateway , Load balancing
Which 2 of the following are requirements for the secret when creating a multi-factor
authentication token manually? - ANSWER- Minimum of 32 characters , HEX
TRUE or FALSE. You must have an additional Sophos Central license to use Central
Firewall Management. - ANSWER- FALSE
TRUE or FALSE. The option to create loopback and reflexive NAT rules is only
available when adding a NEW NAT rule, not when editing an existing NAT rule. -
ANSWER- TRUE
Which zone is for providing security for wireless networks? - ANSWER- WIFI
When creating a NAT rule which option allows you to select different source NATs
based on the outbound interface within a single rule? - ANSWER- Override source
translation (SNAT)
TRUE or FALSE. The Sophos Firewall's lite implementation of Cloud Access Security
Broker blocks all cloud applications by default. - ANSWER- FALSE
Which 3 of the following are the default decryption profiles available in Sophos Firewall?
- ANSWER- Block insecure , Maximum compatibility , Strict compliance
And Answers 100% correct
How many servers does Sophos Firewall support for static DNS? - ANSWER- 3
Which 2 actions can ATP be configured to perform when it detects traffic to a command-
and-control server? - ANSWER- Log , Log and drop
Which 3 of the following cloud platforms is Sophos Firewall supported on? - ANSWER-
Nutanix , Microsoft Azure , Amazon Web Services (AWS)
Which firewall icon shown represents a disabled user rule? - ANSWER- C
Which of the following best describes the Bridge to AP LAN security mode for wireless
networks? - ANSWER- Wireless traffic is routed from the AP directly onto the LAN
Which of the following DoS and spoof protection modes will drop packets if the source
MAC address is not configured as a trusted MAC? - ANSWER- MAC filter
What are the two routing strategies that can be used in SD-WAN profiles? - ANSWER-
First available gateway , Load balancing
Which 2 of the following are requirements for the secret when creating a multi-factor
authentication token manually? - ANSWER- Minimum of 32 characters , HEX
TRUE or FALSE. You must have an additional Sophos Central license to use Central
Firewall Management. - ANSWER- FALSE
TRUE or FALSE. The option to create loopback and reflexive NAT rules is only
available when adding a NEW NAT rule, not when editing an existing NAT rule. -
ANSWER- TRUE
Which zone is for providing security for wireless networks? - ANSWER- WIFI
When creating a NAT rule which option allows you to select different source NATs
based on the outbound interface within a single rule? - ANSWER- Override source
translation (SNAT)
TRUE or FALSE. The Sophos Firewall's lite implementation of Cloud Access Security
Broker blocks all cloud applications by default. - ANSWER- FALSE
Which 3 of the following are the default decryption profiles available in Sophos Firewall?
- ANSWER- Block insecure , Maximum compatibility , Strict compliance
