SOPHOS CERTIFIED ENGINEER EXAM
2025 QUESTIONS AND ANSWERS
Which TCP port is used to communicate policies to endpoints? - ANS 8190
Which Sophos Central manage product protects the data on a lost or stolen laptop? -
ANS Encryption
The option to stop the AutoUpdate service is greyed out in Windows Services. What is the most
likely reason for this? - ANS Tamper Protection is enabled
Complete the sentence: Signature-based file scanning relies on... - ANS previously detected
malware characteristics
TRUE or FALSE: Tamper protection is enabled by default. - ANS TRUE
You are unable to edit policies in Sophos Central. What do you check in Sophos Central? -
ANS That you have the correct role assigned
Which URL address do you use to login to Sophos Central Partner Dashboard? -
ANS partnerportal.sophos.com
You are detecting low-reputation files and want to change the reputation level from
recommended to strict. Which policy do you edit to make this change? - ANS Threat
Protection
COPYRIGHT © 2025 BRAINBARTER ALL RIGHTS RESERVED 1
, What is the FIRST step you must take when deploying virtual environments? - ANS Check the
system requirements
You want to prevent users from copying database files to USB drives without blocking the use
of all USB devices. Which policy do you need to configure? - ANS Data Loss Prevention
TRUE or FALSE: You can search for a malicious item across your network using EDR -
ANS TRUE
Which log provides a record of all activities? - ANS Audit log
What is the function of anti-exploit technology? - ANS To detect and stop compromised
vulnerable applications
Complete the sentence: The SAV32CLI clean-up tool is a... - ANS Command line tool included
in Sophos Central installation
When registering for a Sophos Central Trial, which of the following statements are TRUE? -
ANS You must use an email address that has not been used with Sophos Central before
Which tab on the device details page displays the tamper protection information? -
ANS SUMMARY
What is the function of Live Protection? - ANS Connects to a cloud server to check for the
latest information about a file
How long are activities stored for in the Enterprise Dashboard? - ANS 90 days
COPYRIGHT © 2025 BRAINBARTER ALL RIGHTS RESERVED 2
2025 QUESTIONS AND ANSWERS
Which TCP port is used to communicate policies to endpoints? - ANS 8190
Which Sophos Central manage product protects the data on a lost or stolen laptop? -
ANS Encryption
The option to stop the AutoUpdate service is greyed out in Windows Services. What is the most
likely reason for this? - ANS Tamper Protection is enabled
Complete the sentence: Signature-based file scanning relies on... - ANS previously detected
malware characteristics
TRUE or FALSE: Tamper protection is enabled by default. - ANS TRUE
You are unable to edit policies in Sophos Central. What do you check in Sophos Central? -
ANS That you have the correct role assigned
Which URL address do you use to login to Sophos Central Partner Dashboard? -
ANS partnerportal.sophos.com
You are detecting low-reputation files and want to change the reputation level from
recommended to strict. Which policy do you edit to make this change? - ANS Threat
Protection
COPYRIGHT © 2025 BRAINBARTER ALL RIGHTS RESERVED 1
, What is the FIRST step you must take when deploying virtual environments? - ANS Check the
system requirements
You want to prevent users from copying database files to USB drives without blocking the use
of all USB devices. Which policy do you need to configure? - ANS Data Loss Prevention
TRUE or FALSE: You can search for a malicious item across your network using EDR -
ANS TRUE
Which log provides a record of all activities? - ANS Audit log
What is the function of anti-exploit technology? - ANS To detect and stop compromised
vulnerable applications
Complete the sentence: The SAV32CLI clean-up tool is a... - ANS Command line tool included
in Sophos Central installation
When registering for a Sophos Central Trial, which of the following statements are TRUE? -
ANS You must use an email address that has not been used with Sophos Central before
Which tab on the device details page displays the tamper protection information? -
ANS SUMMARY
What is the function of Live Protection? - ANS Connects to a cloud server to check for the
latest information about a file
How long are activities stored for in the Enterprise Dashboard? - ANS 90 days
COPYRIGHT © 2025 BRAINBARTER ALL RIGHTS RESERVED 2
