SOPHOS ENGINEER EXAM SCRIPT 2026 TEST
PAPER QUESTIONS AND SOLUTIONS GRADED
A+
◉ Which Sophos Central manage product protects the data on a lost or
stolen laptop? Answer: Encryption
◉ The option to stop the AutoUpdate service is greyed out in Windows
Services. What is the most likely reason for this? Answer: Tamper
Protection is enabled
◉ Complete the sentence: Signature-based file scanning relies on...
Answer: previously detected malware characteristics
◉ TRUE or FALSE: Tamper protection is enabled by default. Answer:
TRUE
◉ You are unable to edit policies in Sophos Central. What do you check
in Sophos Central? Answer: That you have the correct role assigned
◉ Which URL address do you use to login to Sophos Central Partner
Dashboard? Answer: partnerportal.sophos.com
◉ You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you edit
to make this change? Answer: Threat Protection
, ◉ What is the FIRST step you must take when deploying virtual
environments? Answer: Check the system requirements
◉ You want to prevent users from copying database files to USB drives
without blocking the use of all USB devices. Which policy do you need
to configure? Answer: Data Loss Prevention
◉ TRUE or FALSE: You can search for a malicious item across your
network using EDR Answer: TRUE
◉ Which log provides a record of all activities? Answer: Audit log
◉ What is the function of anti-exploit technology? Answer: To detect
and stop compromised vulnerable applications
◉ Complete the sentence: The SAV32CLI clean-up tool is a... Answer:
Command line tool included in Sophos Central installation
◉ When registering for a Sophos Central Trial, which of the following
statements are TRUE? Answer: You must use an email address that has
not been used with Sophos Central before
◉ Which tab on the device details page displays the tamper protection
information? Answer: SUMMARY
PAPER QUESTIONS AND SOLUTIONS GRADED
A+
◉ Which Sophos Central manage product protects the data on a lost or
stolen laptop? Answer: Encryption
◉ The option to stop the AutoUpdate service is greyed out in Windows
Services. What is the most likely reason for this? Answer: Tamper
Protection is enabled
◉ Complete the sentence: Signature-based file scanning relies on...
Answer: previously detected malware characteristics
◉ TRUE or FALSE: Tamper protection is enabled by default. Answer:
TRUE
◉ You are unable to edit policies in Sophos Central. What do you check
in Sophos Central? Answer: That you have the correct role assigned
◉ Which URL address do you use to login to Sophos Central Partner
Dashboard? Answer: partnerportal.sophos.com
◉ You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you edit
to make this change? Answer: Threat Protection
, ◉ What is the FIRST step you must take when deploying virtual
environments? Answer: Check the system requirements
◉ You want to prevent users from copying database files to USB drives
without blocking the use of all USB devices. Which policy do you need
to configure? Answer: Data Loss Prevention
◉ TRUE or FALSE: You can search for a malicious item across your
network using EDR Answer: TRUE
◉ Which log provides a record of all activities? Answer: Audit log
◉ What is the function of anti-exploit technology? Answer: To detect
and stop compromised vulnerable applications
◉ Complete the sentence: The SAV32CLI clean-up tool is a... Answer:
Command line tool included in Sophos Central installation
◉ When registering for a Sophos Central Trial, which of the following
statements are TRUE? Answer: You must use an email address that has
not been used with Sophos Central before
◉ Which tab on the device details page displays the tamper protection
information? Answer: SUMMARY
