Sophos Study guides, Class notes & Summaries

What is Rapid Response : A lightning fast service that investigates active threats in an organization which is in the throes of an active attack For brand new Sophos customers, what is the first step which they must do as part of the on boarding process? : Create a Sophos Central account True or false: MTR is a human-led service. : True What does the Advanced tier of MTR provide that Standard does not? : Deeper threat hunting Several more ways for organizations to communicate direct...

Which 4 of the following are tested and supported virtualization platforms for XG Firewall? Select one or more: a.Hyper-V b.KVM c.VMWare d.Xen e.Virtual Box f.Oracle VM g.Qemu What feature is required if you want to make use of lateral movement protection? a.Intercept X b.Advanced Threat Protection (ATP)

What is Zero Trust? : It is the mindset of don't trust anything verify everything What is ZTNA? : Sophos's Zero Trust Network Access What is Sophos Lateral Protection? : It is a micro segmentation solution. If device becomes infected it will be isolated to stop the attack or regardless of the Network Topology What are the three key features of Sophos Firewall? : It is a comprehensive security device, with a zone-based firewall and Identitybased policies at its core. It can expose hi...

Cloud based centralized management platform. It is a console for managing your Sophos products using a single interface with an intuitive dashboard. : Sophos Central A communication channel which can warn or alert centrally linked Sophos products when there has been an attack or suspected attack. : Sophos Security Heartbeat provides a detailed look into Sophos Central, it's development, deployment and maintenance as well as what data is collected, where it is stored and how data is ...

Lateral movement protection is made possible by which of the following? : Synchronized Security Which 2 of these are features of the Xstream achitecture? : TLS 1.3 Decryption und Deep packet inspection Which feature of the Sophjos Firewall helps prevent a computer infected by a trojan from transmitting personal information out of theri network? : Advanced Threat Protection Which feature of the Sophos firewall identifies unknown applications? : Synchronized App Controll What cloud platf...

What permissions does the user need to connect to AD to gather the user and group information? : Read TRUE or FALSE: Only PE files can be restored from SafeStore through the user interface. : True What is the minimum type of user required to connect to AD to gather the user and group information? : Domain user By default, computers get the latest Sophos product updates automatically, where can an admin change this to allow control over updates? : Global settings > Controlled Up...

1. Lateral movement protection is made possible by which of the following? - Synchronized Security 2. Which 2 of these are features of the Xstream architecture? - TLS 1.3 Decryption - Deep packet inspection 3. Which feature of the Sophos Firewall helps prevent a computer infected by a trojan from transmitting personal information out of their network? - Advanced Threat Protection (ATP) 4. Which feature of the Sophos Firewall identifies unknown application? ...

1. Which TCP port is used to communicate policies to endpoints?:: 8190 2. Which Sophos Central manage product protects the data on a lost or stolen correct answer laptop?:: Encryption correct answer correct answer correct 3. The option to stop the AutoUpdate service is greyed out in Windows Ser-vices. What is the most likely reason for this?:: Tamper Protection is enabled 4. TRUE or FALSE::Tamper protection is enabled by default.: answer: TRUE correct answer correct answer 5. Complete...

1. Where can the AD Sync tool be obtained from? ANS Global Settings 2. Which of the following statements is TRUE for a C2/Generic-C detection? ANS - The connection was blocked but the root cause has NOT been cleaned up 3. Where in the Endpoint Self Help Tool will show if an endpoint is using a proxy for updating? ANS Update > Update configuration 4. When configuring AD synchronization, what location was defined by default in filters under the User Discovery Filters tab? ANS DC=SOPHOS,...

1. When a RED is deployed in Standard/Unified mode, how do the computers on the remote network get their IP adresss? ANS From a DHCP server running on the XG firewall 2. You are preparing a hardware XG Firewall for installation on a remote site. The order for the license has not yet been processed. Which registration option do you select in the Initial Setup wizard? ANS I do not want to register now 3. You have created a repot that displays data that you wish to check on a daily basis. how c...