Sophos Firewall v19.5 Exam Questions With Verified Answers

Which of these are defined as Admin services in Device access? - answerHTTPS and SSH You want a certificate to be signed by a third-party company. which option should you choose? - answerGenerate CSR What are the different types of traffic shaping policy you can create? - answerUsers, Web categories, Rules, Applications What do you need to configure before you can start using traffic shaping? - answerTotal WAN bandwidth True of False: NAT rules are processed in order from top to bottom - answerTrue True or False: All firewall rules are evaluated and the best match is used. - answerfalse Which 3 of the following are matching criteria Sophos Firewall uses to automatically assign firewall rules to groups? - answerDestination ZONE, Source ZONE, Rule type complete the sentence below: When creating a firewall rule for DNAT, you select the ________ destination zone. - answerPost NAT Where would you exclude a website from TLS inspection? - answerWEB -> URL Groups Where would you configure which chiper algorithms to block? - answerDecryption profile What 2 things do you need to do to use IPS policies - answerSelect an IPS policy in a firewall rule; Enable IPS using the switch Spoof Protection - answerDrops traffic that is trying to pretend to come from a different MAC of IP address to bypass protection DoS Protection - answerDrops traffic that is maliciously trying to prevent legitimate traffic from being able to accsess services. IPS Policies - answerProtectes against exploits and malfromed traffic. Which 2 actions can ATP be configured to perform when it detects traffic to a command-and- control server? - answerLog; Log and Drop You want to configure Security Heartbeat, what is the first thing you need to do? - answerRegister your Sophos Firewall with you Sophos Central account What information deas Sophos Firewall share about devices with a RED health status to prevent lateral movement protection? - answerMAC Adress What 2 way can you register Sophos Firewall with Sophos Central - answerOTP; Username and passwort Which