MILESTONE CERTIFIED DESIGN ENGINEER
MCDE EXAM 2026 FINAL EXAM PAPER
COMPLETE QUESTIONS AND SOLUTIONS
◉ Which is the minimum administrative role that will allow a user to
view alerts and logs? Answer: Read Only
◉ What is the minimum administrative role that will allow a user to
scan endpoints? Answer: Help Desk
◉ TRUE or FALSE: Base policies can be disabled in Sophos Central.
Answer: FALSE
◉ Which is the function of Application Control? Answer: To block
specific applications from running on protected endpoints
◉ Which 2 of the following are monitored when File Integrity
Monitoring is enabled? Answer: (1) Files
(2) Registry Entries
◉ Which report will give you information across all protected
endpoints? Answer: Events report
, ◉ Where can an administrator view the license management types
in the Enterprise Dashboard? Answer: Licensing
◉ Which Sophos support tool do you use to find out the latest
information about security threats? Answer: SophosLabs
◉ True or False: Multi-factor authentication is enabled by default for
all Enterprise Administrators. Answer: TRUE
◉ Which of the following is a pre-execution check performed by
Intercept X? Answer: Machine learning
◉ What is the function of Web Control? Answer: To control access to
websites based on their category
◉ Where in Sophos Central Admin Console can you enable remote
assistance? Answer: Account Details
◉ Complete the sentence: The Source of Infection clean up tool is a...
Answer: Tool that identified where malicious files are written from
◉ TRUE or FALSE: All Endpoints have the same tamper protection
password. Answer: FALSE
MCDE EXAM 2026 FINAL EXAM PAPER
COMPLETE QUESTIONS AND SOLUTIONS
◉ Which is the minimum administrative role that will allow a user to
view alerts and logs? Answer: Read Only
◉ What is the minimum administrative role that will allow a user to
scan endpoints? Answer: Help Desk
◉ TRUE or FALSE: Base policies can be disabled in Sophos Central.
Answer: FALSE
◉ Which is the function of Application Control? Answer: To block
specific applications from running on protected endpoints
◉ Which 2 of the following are monitored when File Integrity
Monitoring is enabled? Answer: (1) Files
(2) Registry Entries
◉ Which report will give you information across all protected
endpoints? Answer: Events report
, ◉ Where can an administrator view the license management types
in the Enterprise Dashboard? Answer: Licensing
◉ Which Sophos support tool do you use to find out the latest
information about security threats? Answer: SophosLabs
◉ True or False: Multi-factor authentication is enabled by default for
all Enterprise Administrators. Answer: TRUE
◉ Which of the following is a pre-execution check performed by
Intercept X? Answer: Machine learning
◉ What is the function of Web Control? Answer: To control access to
websites based on their category
◉ Where in Sophos Central Admin Console can you enable remote
assistance? Answer: Account Details
◉ Complete the sentence: The Source of Infection clean up tool is a...
Answer: Tool that identified where malicious files are written from
◉ TRUE or FALSE: All Endpoints have the same tamper protection
password. Answer: FALSE
