Sophos Firewall v19.5 Exam 2026
Questions and Answers 100% Pass
Guaranteed
Lateral movement protection is made possible by which of the following? - Correct
answer-Synchronized Security
Which 2 of these are features of the Xstream achitecture? - Correct answer-TLS
1.3 Decryption und Deep packet inspection
Which feature of the Sophjos Firewall helps prevent a computer infected by a
trojan from transmitting personal information out of theri network? - Correct
answer-Advanced Threat Protection
Which feature of the Sophos firewall identifies unknown applications? - Correct
answer-Synchronized App Controll
What cloud platfroms is Sophos Firewall supported on? - Correct answer-AWS,
Azure und Nutanix
How many radios do the wireless XGS series models have? - Correct answer-1
©COPYRIGHT 2025, ALL RIGHTS RESERVE 1
,True or False: The number of ports can be expanded using additional modules. -
Correct answer-True
You have received a new hardware Sophos Firewall. What is the default IP addres
and port that is used to access the device? - Correct answer-172.16.16.16:4444
You are preparing a Sophos Firewall for installation on a remote site. The order for
the license hat not yet been processed. Which device registration oprion do you
select in the Initial Suetup wizard? - Correct answer-I do not want to register now.
Servic objects can be created for which of the following? - Correct answer-
TCP/UDP Ports, IP Protocol Number, ICMP Type and Code
In which of these zones is an interface conffigured with a gateway? - Correct
answer-WAN
How many gateways can you include in an SD-WAN profile? - Correct answer-8
Place the route types in the correct default order of precedence - Correct answer-1.
Static; 2. SD-WAN; 3. VPN; 4. Default
How many servers does Sophos Firewall suport for static DNS? - Correct answer-3
You have an existing DHCP server. What configuration allows Sophos firewall to
forward lease requests to this? - Correct answer-Relay
©COPYRIGHT 2025, ALL RIGHTS RESERVE 2
, Which of these are defined as Admin services in Device access? - Correct answer-
HTTPS and SSH
You want a certificate to be signed by a third-party company. which option should
you choose? - Correct answer-Generate CSR
What are the different types of traffic shaping policy you can create? - Correct
answer-Users, Web categories, Rules, Applications
What do you need to configure before you can start using traffic shaping? - Correct
answer-Total WAN bandwidth
True of False: NAT rules are processed in order from top to bottom - Correct
answer-True
True or False: All firewall rules are evaluated and the best match is used. - Correct
answer-false
Which 3 of the following are matching criteria Sophos Firewall uses to
automatically assign firewall rules to groups? - Correct answer-Destination ZONE,
Source ZONE, Rule type
complete the sentence below:
When creating a firewall rule for DNAT, you select the ________ destination zone.
- Correct answer-Post NAT
©COPYRIGHT 2025, ALL RIGHTS RESERVE 3
Questions and Answers 100% Pass
Guaranteed
Lateral movement protection is made possible by which of the following? - Correct
answer-Synchronized Security
Which 2 of these are features of the Xstream achitecture? - Correct answer-TLS
1.3 Decryption und Deep packet inspection
Which feature of the Sophjos Firewall helps prevent a computer infected by a
trojan from transmitting personal information out of theri network? - Correct
answer-Advanced Threat Protection
Which feature of the Sophos firewall identifies unknown applications? - Correct
answer-Synchronized App Controll
What cloud platfroms is Sophos Firewall supported on? - Correct answer-AWS,
Azure und Nutanix
How many radios do the wireless XGS series models have? - Correct answer-1
©COPYRIGHT 2025, ALL RIGHTS RESERVE 1
,True or False: The number of ports can be expanded using additional modules. -
Correct answer-True
You have received a new hardware Sophos Firewall. What is the default IP addres
and port that is used to access the device? - Correct answer-172.16.16.16:4444
You are preparing a Sophos Firewall for installation on a remote site. The order for
the license hat not yet been processed. Which device registration oprion do you
select in the Initial Suetup wizard? - Correct answer-I do not want to register now.
Servic objects can be created for which of the following? - Correct answer-
TCP/UDP Ports, IP Protocol Number, ICMP Type and Code
In which of these zones is an interface conffigured with a gateway? - Correct
answer-WAN
How many gateways can you include in an SD-WAN profile? - Correct answer-8
Place the route types in the correct default order of precedence - Correct answer-1.
Static; 2. SD-WAN; 3. VPN; 4. Default
How many servers does Sophos Firewall suport for static DNS? - Correct answer-3
You have an existing DHCP server. What configuration allows Sophos firewall to
forward lease requests to this? - Correct answer-Relay
©COPYRIGHT 2025, ALL RIGHTS RESERVE 2
, Which of these are defined as Admin services in Device access? - Correct answer-
HTTPS and SSH
You want a certificate to be signed by a third-party company. which option should
you choose? - Correct answer-Generate CSR
What are the different types of traffic shaping policy you can create? - Correct
answer-Users, Web categories, Rules, Applications
What do you need to configure before you can start using traffic shaping? - Correct
answer-Total WAN bandwidth
True of False: NAT rules are processed in order from top to bottom - Correct
answer-True
True or False: All firewall rules are evaluated and the best match is used. - Correct
answer-false
Which 3 of the following are matching criteria Sophos Firewall uses to
automatically assign firewall rules to groups? - Correct answer-Destination ZONE,
Source ZONE, Rule type
complete the sentence below:
When creating a firewall rule for DNAT, you select the ________ destination zone.
- Correct answer-Post NAT
©COPYRIGHT 2025, ALL RIGHTS RESERVE 3
