{"id":117518,"date":"2023-08-28T22:48:32","date_gmt":"2023-08-28T22:48:32","guid":{"rendered":"https:\/\/learnexams.com\/blog\/?p=117518"},"modified":"2023-08-28T22:48:34","modified_gmt":"2023-08-28T22:48:34","slug":"sophos-certified-engineer-bundle-package","status":"publish","type":"post","link":"https:\/\/www.learnexams.com\/blog\/2023\/08\/28\/sophos-certified-engineer-bundle-package\/","title":{"rendered":"SOPHOS CERTIFIED ENGINEER |Bundle Package"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">SOPHOS CERTIFIED ENGINEER EXAM QUESTIONS WITH<br>CORRECT ANSWERS<br>Which TCP port is used to communicate policies to endpoints? Correct Answer 8190<br>Which Sophos Central manage product protects the data on a lost or stolen laptop?<br>Correct Answer Encryption<br>The option to stop the Auto Update service is greyed out in Windows Services. What is<br>the most likely reason for this? Correct Answer Tamper Protection is enabled<br>Complete the sentence: Signature-based file scanning relies on\u2026 Correct Answer<br>previously detected malware characteristics<br>TRUE or FALSE: Tamper protection is enabled by default. Correct Answer TRUE<br>You are unable to edit policies in Sophos Central. What do you check in Sophos<br>Central? Correct Answer That you have the correct role assigned<br>Which URL address do you use to login to Sophos Central Partner Dashboard? Correct<br>Answer partnerportal.sophos.com<br>You are detecting low-reputation files and want to change the reputation level from<br>recommended to strict. Which policy do you edit to make this change? Correct Answer<br>Threat Protection<br>What is the FIRST step you must take when deploying virtual environments? Correct<br>Answer Check the system requirements<br>You want to prevent users from copying database files to USB drives without blocking<br>the use of all USB devices. Which policy do you need to configure? Correct Answer<br>Data Loss Prevention<br>TRUE or FALSE: You can search for a malicious item across your network using EDR<br>Correct Answer TRUE<br>Which log provides a record of all activities? Correct Answer Audit log<br>What is the function of anti-exploit technology? Correct Answer To detect and stop<br>compromised vulnerable applications<br>Complete the sentence: The SAV32CLI clean-up tool is a\u2026 Correct Answer Command<br>line tool included in Sophos Central installation<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When registering for a Sophos Central Trial, which of the following statements are<br>TRUE? Correct Answer You must use an email address that has not been used with<br>Sophos Central before<br>Which tab on the device details page displays the tamper protection information?<br>Correct Answer SUMMARY<br>What is the function of Live Protection? Correct Answer Connects to a cloud server to<br>check for the latest information about a file<br>How long are activities stored for in the Enterprise Dashboard? Correct Answer 90 days<br>What is the function of an Update Cache? Correct Answer To download updates from<br>Sophos Central and store them on a dedicated server on your network<br>What is the function of on-access scanning? Correct Answer Monitors running<br>processes&#8217; behavior<br>Which of the following alerts is categorized as a high alert? Correct Answer Failed to<br>protect an endpoint<br>Which dashboard allows you to manage and apply global settings to multiple Sophos<br>Central accounts? Correct Answer The Partner Dashboard<br>Which detection feature can prevent attacks on the master boot record? Correct Answer<br>Wipe Guard<br>What is the function of a Message Relay? Correct Answer To enable all devices to<br>communicate all policy and reporting data using a dedicated server on your network<br>True or False: Marking an alert as acknowledge will resolve the threat on the endpoint.<br>Correct Answer FALSE<br>Which TCP port is used to communicate Updates on endpoints? Correct Answer 8191<br>TRUE or FALSE: The security VM installer is linked to your Sophos Central account.<br>Correct Answer FALSE<br>TRUE or FALSE: You can deploy an update cache without a Message Relay. Correct<br>Answer TRUE<br>You want to change an action for &#8216;confidential&#8217; content. Where in Sophos Central do you<br>make this change? Correct Answer In the Data Loss Prevention Rule<br>What does HIPS do on a protected endpoint? Correct Answer Scans for potentially<br>malicious behavior<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sophos Endpoint and Server &#8211; engineer reviewer<br>questions with correct answers<br>In the Data Loss Prevention Rule CORRECT ANSWER You want to change an action for<br>&#8216;confidential&#8217; content. Where in Sophos Central do you make this change?<br>Modifying protection settings and uninstalling the endpoint agent CORRECT ANSWER Two of<br>the following that tamper protection prevent users from doing<br>Installed components CORRECT ANSWER An endpoint is reporting that Sophos Autoupdate is<br>not installed. In the Self-Help Tool which tab do you check to view whether AutoUpdate is listed<br>as Installed?<br>Threat Protection CORRECT ANSWER In which policy do you enable device isolation?<br>To connect Sophos security solutions in real time CORRECT ANSWER What is the function of<br>Sophos Synchronized Security?<br>Super Admin CORRECT ANSWER What is the minimum administrative role that will allow a user<br>to manage user roles and role assignments<br>previously detected malware characteristics CORRECT ANSWER Signature-based file scanning<br>relies on\u2026.<br>Help desk CORRECT ANSWER Minimum administrative role that will allow a user to scan<br>endpoints<br>True CORRECT ANSWER Tamper protection is enabled by default<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Exclusions tab and global settings CORRECT ANSWER 2 places in Sophos Central do you add<br>exclusions for servers?<br>Threat Protection CORRECT ANSWER You want to mitigate exploits in vulnerable applications.<br>Which policy do you enable the features in?<br>Download and run the installer from Sophos Central CORRECT ANSWER A method of deploying<br>endpoint protection?<br>Machine learning CORRECT ANSWER Is a pre-execution check performed by Intercept X?<br>Exploit technique detection CORRECT ANSWER Which feature of Intercept X is designed to<br>detect malware before it can execute?<br>Policy Enforced CORRECT ANSWER You have created a new policy Which tab do you select to<br>enable the policy?<br>Ransomware CORRECT ANSWER Which security threat does Intercept X protect against?<br>Admin CORRECT ANSWER What is the minimum administrative role that will allow a user to<br>create and edit policies<br>True CORRECT ANSWER When protecting a Mac client, you must know the password of the<br>administrator<br>Check the system requirements CORRECT ANSWER What is the first step you must take when<br>deploying virtual environments?<br>8190 CORRECT ANSWER Which TCP port is used to communicate policies to endpoints?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sophos Technician questions with correct answers<br>Global Settings CORRECT ANSWER Where can the AD Sync tool be obtained from?<br>The connection was blocked but the root cause has NOT been cleaned up CORRECT ANSWER<br>Which of the following statements is TRUE for a C2\/Generic-C detection?<br>Update &gt; Update configuration CORRECT ANSWER Where in the Endpoint Self Help Tool will<br>show if an endpoint is using a proxy for updating?<br>DC=SOPHOS,DC=LOCAL CORRECT ANSWER When configuring AD synchronization, what location<br>was defined by default in filters under the User Discovery Filters tab?<br>ping 172.16.2.20 CORRECT ANSWER Enter the command you would use to test IP network<br>connectivity to the address 172.16.2.20. <em><br>Tamper Protection CORRECT ANSWER Which feature would protect the Sophos installation<br>from becoming disabled by malware?<br>389 CORRECT ANSWER AD Sync is not working, you have successfully pinged the DC by both<br>name and IP address. Which port do you use with telnet to confirm the LDAP port is accessible?<br>netsh winhttp reset proxy CORRECT ANSWER Enter the command you would use to remove the<br>currently configured system proxy.<br>%ProgramData%\\Sophos\\CloudInstaller\\Logs CORRECT ANSWER Where is the<br>&#8216;SophosCloudInstaller<\/em>.log&#8217; found?<br>To prevent malicious behavior in software CORRECT ANSWER What is the function of<br>application lockdown in Intercept X?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Virus Removal tool CORRECT ANSWER Which of these cleanup tools will scan for root kits?<br>Domain user CORRECT ANSWER What is the minimum type of user required to connect to AD<br>to gather the user and group information?<br>True CORRECT ANSWER TRUE or FALSE: Sophos recommends disabling HTTPS inspection for<br>Sophos updating traffic.<br>Sophos Intercept X CORRECT ANSWER On a Windows computer, which component logs<br>information to the &#8216;Sophos.log&#8217; file?<br>nslookup CORRECT ANSWER The Central Admin Dashboard shows that none of your endpoints<br>are using one of your update caches. When pinging the update cache by name it fails. What<br>command do you use to investigate this further?<br>Resolve and verify CORRECT ANSWER What is the third step of the troubleshooting process?<br>Global settings > Controlled Updates CORRECT ANSWER By default, computers get the latest<br>Sophos product updates automatically, where can an admin change this to allow control over<br>updates?<br>SHA-256<br>The file paths<br>The certificate CORRECT ANSWER In which 3 ways can you allow a quarantined file to be<br>restored?<br>Windows client firewall blocking traffic CORRECT ANSWER When investigating an updating issue<br>on one of your endpoints, you used the telnet command to connect to dci.sophosupd.com on<br>port 443. This confirmed that there is a problem using a direct connection. What is most likely<br>to be causing this?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sophos Firewall questions with correct answers<br>When a RED is deployed in Standard\/Unified mode, how do the computers on the remote<br>network get their IP address? CORRECT ANSWER From a DHCP server running on the XG firewall<br>You are preparing a hardware XG Firewall for installation on a remote site. The order for the<br>license has not yet been processed. Which registration option do you select in the Initial Setup<br>wizard? CORRECT ANSWER I do not want to register now<br>You have created a report that displays data that you wish to check on a daily basis. how can<br>you make this data easily available in the WebAdmin interface?? CORRECT ANSWER Create a<br>bookmark for the report<br>Which of the following best describes greylisting? CORRECT ANSWER The first attempt to<br>deliver a message is temporarily denied.<br>One computer has a red health status. ON which 2 of the networks can the endpoints be<br>protected from the computer with a red health status? CORRECT ANSWER A. C<br>Sophos XG hardware devices come pre-loaded with software. CORRECT ANSWER True<br>Which 2 features are required if you want to make use of lateral movement protection?<br>CORRECT ANSWER Server or endpoint protection. Intercept X<br>Which XG firewall feature is able to block access to command and control servers? CORRECT<br>ANSWER Advanced Threat Protection<br>Which 2 methods are supported for logoff detection when using STAS CORRECT ANSWER PING,<br>Workstation Polling<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sophos Central Overview questions with correct<br>answers<br>Cloud based centralized management platform. It is a console for managing your Sophos<br>products using a single interface with an intuitive dashboard. CORRECT ANSWER Sophos Central<br>A communication channel which can warn or alert centrally linked Sophos products when there<br>has been an attack or suspected attack. CORRECT ANSWER Sophos Security Heartbeat<br>provides a detailed look into Sophos Central, it&#8217;s development, deployment and maintenance as<br>well as what data is collected, where it is stored and how data is protected. CORRECT ANSWER<br>Sophos Central Security Framework<br>integrates anti-ransomware, application whitelisting, server lockdown and provides centralized<br>management and security of your servers. CORRECT ANSWER Server protection<br>provides anti-malware protection to your endpoints across your network. It uses Intercept X.<br>CORRECT ANSWER Endpoint protection<br>Endpoint three layers of security CORRECT ANSWER Control, Pre-execution, Code execution<br>is a unified endpoint management (UEM) and security solution that helps businesses spend less<br>time and effort managing and securing traditional endpoint and mobile endpoints CORRECT<br>ANSWER Sophos mobile<br>encrypts the data on the hard disk of an endpoint so that when the endpoint is stolen, the thief<br>will not be able to access the data on the device. CORRECT ANSWER Sophos data protection<br>provides security and manageability for public cloud. CORRECT ANSWER Sophos Cloud Optix<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7 Full disk encryption<br>\u00b7 Prevent data loss<br>\u00b7 Configure encryption policy CORRECT ANSWER Sophos Encryption<br>allows you to see which traffic is using your bandwidth to optimize the performance of your WiFi and alert you to potential unwanted use of your resources. CORRECT ANSWER Sophos<br>Wireless<br>is an advanced and comprehensive network security device that helps expose hidden risks,<br>block unknown threats and will automatically respond to incidents.<br>\u00b7 Provides visibility of activities on your network<br>\u00b7 Detects risky activities and suspicious traffic CORRECT ANSWER XG Firewall<br>protects devices from malicious attacks that re able to bypass traditional anti-virus solutions.<br>Typically, these threats are zero-day and ransomware. CORRECT ANSWER Intercept X<br>educates and test your end users through automated attack simulations, quality security<br>awareness training and actionable reporting metrics. CORRECT ANSWER Sophos Phish Threat<br>keeps your users and business safe with instant protection from advanced threats. Our default<br>setting provides anti-spam and anti-malware protection. CORRECT ANSWER Sophos Email<br>Gateway<br>display info. For user and endpoints, detailing whether they have the Sophos agent installed or<br>the user is associated with a protected endpoint. CORRECT ANSWER Devices and users:<br>summary<br>provides an overview of your web control statistics. Split into four categories of Web threats<br>blocked, Policy violations blocked, Policy warnings issued and Policy warnings proceeded<br>CORRECT ANSWER Endpoint and server web control<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SOPHOS ENGINEER exam questions with<br>correct answers<br>That the cloned policy has been enforced CORRECT ANSWER You have cloned the threat<br>protection base policy, applied the policy to a group and saved it. When checking the endpoint,<br>the policy changes have not taken effect. What do you check in the policy<br>8190 CORRECT ANSWER Which TCP port is used to communicate policies to endpoint?<br>To download updates from Sophos Central and store them on a dedicated server on your<br>network CORRECT ANSWER What is the function of an update cache?<br>Download and run the installer from Sophos Central CORRECT ANSWER Which of the following<br>is a method of deploying endpoint protection?<br>8191 CORRECT ANSWER Which TCP port is used to communicate Updates on endpoint?<br>False CORRECT ANSWER A message relay can be configured on a Server without an Update<br>Cache.<br>True CORRECT ANSWER When protecting a MAC client, you must know the password of the<br>administrator.<br>Connects to a cloud server to check for the latest information about a file CORRECT ANSWER<br>What is the function of live protection?<br>To block specific applications from running on protected endpoints CORRECT ANSWER Which is<br>the function of Application control?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To connect Sophos security solutions in real time CORRECT ANSWER What is the function of<br>Sophos Synchronized Security?<br>Control access to websites based on their category CORRECT ANSWER What is the function of<br>Web Control?<br>To detect and stop compromised vulnerable applications CORRECT ANSWER What is the<br>function of anti-exploit technology?<br>Exploit technique detection CORRECT ANSWER Which feature of intercept X is designed to<br>detect malware before it can execute?<br>Data loss prevention rule CORRECT ANSWER You want to change an action for &#8216;confidential&#8217;<br>content. Where in Sophos Central do you make this change<br>False CORRECT ANSWER Base policies can be disabled in Sophos Central.<br>Threat Protection CORRECT ANSWER You are detecting low-reputation files and want to change<br>the reputation level from recommended to strict. Which policy do you edit to make this<br>change?<br>Threat protection CORRECT ANSWER Which endpoint protection policy protects users against<br>malicious network traffic?<br>True CORRECT ANSWER TRUE or FALSE: Tamper protection must be disabled before removing<br>Endpoint protection.<br>Web Control CORRECT ANSWER Which endpoint protection policy do you edit to block users<br>from visiting a specific website category?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SOPHOS CERTIFIED ENGINEER EXAM QUESTIONS WITHCORRECT ANSWERSWhich TCP port is used to communicate policies to endpoints? Correct Answer 8190Which Sophos Central manage product protects the data on a lost or stolen laptop?Correct Answer EncryptionThe option to stop the Auto Update service is greyed out in Windows Services. What isthe most likely reason for this? Correct [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[25],"tags":[],"class_list":["post-117518","post","type-post","status-publish","format-standard","hentry","category-exams-certification"],"_links":{"self":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts\/117518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/comments?post=117518"}],"version-history":[{"count":0,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts\/117518\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/media?parent=117518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/categories?post=117518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/tags?post=117518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}