Sophos 2 UPDATED ACTUAL Exam
Questions and CORRECT Answers
An XG can be deployed in the following ways (choose all that apply) - CORRECT
ANSWER - Select one or more:
a.
As a storage appliance
b.
As a virtual appliance
c.
As a software appliance
d.
As a hardware appliance
e.
As a firewall in the cloud
What are ways that a network can be protected against attacks using zero trust? (Choose all that
apply.) - CORRECT ANSWER - Select one or more:
a.
Micro-segmentation
b.
Identity-based policies
c.
Time-based policies
d.
Server-to-server authentication policies
e.
Device health policies
,True or false: XG and other UTM firewalls can only help to stop attacks before a network is
breached. - CORRECT ANSWER - Select one:
True
False
Which 4 virtualization platforms can XG firewall be deployed to? (Choose all that apply.) -
CORRECT ANSWER - Select one or more:
a.
QEMU
b.
KVM
c.
XenServer
d.
VMware
e.Hyper-V
Select the correct description of Sophos Heartbeat. - CORRECT ANSWER - Select one:
a.
Heartbeat connects cryptographically secured endpoints and Sophos XG Firewall via Sophos
Central
b.
Heartbeat exchanges information, like health status, between XG Firewall and endpoints
c.
Heartbeat synchronizes the health status between XG Firewall and Sophos Central
Identify the correct order of route processing methods. - CORRECT ANSWER - a.
Static Routes > VPN Routes > SD-WAN Policy Routes > Default Route
b.
, Static Routes > SD-WAN Policy Routes > VPN Routes > Default Route
c.
SD-WAN Policy Routes > VPN Routes > Static Routes > Default Route
d.
VPN Routes > SD-WAN Policy Routes > Static Routes > Default Route
e.
SD-WAN Policy Routes > Static Routes > Default Route > VPN Route
True or false: When creating a host object, you can reference that objecti either through IP, MAC
or FQDN. - CORRECT ANSWER - Select one:
True
False
Name the possible deployment scenarios for the XG Firewall. (Choose all that apply.) -
CORRECT ANSWER - Select one or more:
a.
Offensive Mode
b.
Web Application Firewall
c.
Bridge Mode
d.
Gateway Mode
e.
Discover Mode
An is the name for an interface type that allows you to add an additional IP address to an
interface. (Fill in the blank.) - CORRECT ANSWER - ALIAS
Questions and CORRECT Answers
An XG can be deployed in the following ways (choose all that apply) - CORRECT
ANSWER - Select one or more:
a.
As a storage appliance
b.
As a virtual appliance
c.
As a software appliance
d.
As a hardware appliance
e.
As a firewall in the cloud
What are ways that a network can be protected against attacks using zero trust? (Choose all that
apply.) - CORRECT ANSWER - Select one or more:
a.
Micro-segmentation
b.
Identity-based policies
c.
Time-based policies
d.
Server-to-server authentication policies
e.
Device health policies
,True or false: XG and other UTM firewalls can only help to stop attacks before a network is
breached. - CORRECT ANSWER - Select one:
True
False
Which 4 virtualization platforms can XG firewall be deployed to? (Choose all that apply.) -
CORRECT ANSWER - Select one or more:
a.
QEMU
b.
KVM
c.
XenServer
d.
VMware
e.Hyper-V
Select the correct description of Sophos Heartbeat. - CORRECT ANSWER - Select one:
a.
Heartbeat connects cryptographically secured endpoints and Sophos XG Firewall via Sophos
Central
b.
Heartbeat exchanges information, like health status, between XG Firewall and endpoints
c.
Heartbeat synchronizes the health status between XG Firewall and Sophos Central
Identify the correct order of route processing methods. - CORRECT ANSWER - a.
Static Routes > VPN Routes > SD-WAN Policy Routes > Default Route
b.
, Static Routes > SD-WAN Policy Routes > VPN Routes > Default Route
c.
SD-WAN Policy Routes > VPN Routes > Static Routes > Default Route
d.
VPN Routes > SD-WAN Policy Routes > Static Routes > Default Route
e.
SD-WAN Policy Routes > Static Routes > Default Route > VPN Route
True or false: When creating a host object, you can reference that objecti either through IP, MAC
or FQDN. - CORRECT ANSWER - Select one:
True
False
Name the possible deployment scenarios for the XG Firewall. (Choose all that apply.) -
CORRECT ANSWER - Select one or more:
a.
Offensive Mode
b.
Web Application Firewall
c.
Bridge Mode
d.
Gateway Mode
e.
Discover Mode
An is the name for an interface type that allows you to add an additional IP address to an
interface. (Fill in the blank.) - CORRECT ANSWER - ALIAS
