SOPHOS CERTIFIED ENGINEER EXAM 2026
MASTER STUDY EXAM
◉ Which Sophos Central manage product protects the data on a lost
or stolen laptop? Answer: Encryption
◉ The option to stop the AutoUpdate service is greyed out in
Windows Services. What is the most likely reason for this? Answer:
Tamper Protection is enabled
◉ Complete the sentence: Signature-based file scanning relies on...
Answer: previously detected malware characteristics
◉ TRUE or FALSE: Tamper protection is enabled by default. Answer:
TRUE
◉ You are unable to edit policies in Sophos Central. What do you
check in Sophos Central? Answer: That you have the correct role
assigned
◉ Which URL address do you use to login to Sophos Central Partner
Dashboard? Answer: partnerportal.sophos.com
, ◉ You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you
edit to make this change? Answer: Threat Protection
◉ What is the FIRST step you must take when deploying virtual
environments? Answer: Check the system requirements
◉ You want to prevent users from copying database files to USB
drives without blocking the use of all USB devices. Which policy do
you need to configure? Answer: Data Loss Prevention
◉ TRUE or FALSE: You can search for a malicious item across your
network using EDR Answer: TRUE
◉ Which log provides a record of all activities? Answer: Audit log
◉ What is the function of anti-exploit technology? Answer: To detect
and stop compromised vulnerable applications
◉ Complete the sentence: The SAV32CLI clean-up tool is a... Answer:
Command line tool included in Sophos Central installation
MASTER STUDY EXAM
◉ Which Sophos Central manage product protects the data on a lost
or stolen laptop? Answer: Encryption
◉ The option to stop the AutoUpdate service is greyed out in
Windows Services. What is the most likely reason for this? Answer:
Tamper Protection is enabled
◉ Complete the sentence: Signature-based file scanning relies on...
Answer: previously detected malware characteristics
◉ TRUE or FALSE: Tamper protection is enabled by default. Answer:
TRUE
◉ You are unable to edit policies in Sophos Central. What do you
check in Sophos Central? Answer: That you have the correct role
assigned
◉ Which URL address do you use to login to Sophos Central Partner
Dashboard? Answer: partnerportal.sophos.com
, ◉ You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you
edit to make this change? Answer: Threat Protection
◉ What is the FIRST step you must take when deploying virtual
environments? Answer: Check the system requirements
◉ You want to prevent users from copying database files to USB
drives without blocking the use of all USB devices. Which policy do
you need to configure? Answer: Data Loss Prevention
◉ TRUE or FALSE: You can search for a malicious item across your
network using EDR Answer: TRUE
◉ Which log provides a record of all activities? Answer: Audit log
◉ What is the function of anti-exploit technology? Answer: To detect
and stop compromised vulnerable applications
◉ Complete the sentence: The SAV32CLI clean-up tool is a... Answer:
Command line tool included in Sophos Central installation
