Page | 1
Sophos Certified Engineer Exam
Questions With Complete Solutions
Which TCP port is used to communicate policies to endpoints? -
correct answer-8190
Which Sophos Central manage product protects the data on a lost
or stolen laptop? - correct answer-Encryption
The option to stop the AutoUpdate service is greyed out in
Windows Services. What is the most likely reason for this? -
correct answer-Tamper Protection is enabled
Complete the sentence: Signature-based file scanning relies on...
- correct answer-previously detected malware characteristics
TRUE or FALSE: Tamper protection is enabled by default. -
correct answer-TRUE
, Page | 2
You are unable to edit policies in Sophos Central. What do you
check in Sophos Central? - correct answer-That you have the
correct role assigned
Which URL address do you use to login to Sophos Central
Partner Dashboard? - correct answer-partnerportal.sophos.com
You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you
edit to make this change? - correct answer-Threat Protection
What is the FIRST step you must take when deploying virtual
environments? - correct answer-Check the system requirements
You want to prevent users from copying database files to USB
drives without blocking the use of all USB devices. Which policy
do you need to configure? - correct answer-Data Loss Prevention
TRUE or FALSE: You can search for a malicious item across your
network using EDR - correct answer-TRUE
, Page | 3
Which log provides a record of all activities? - correct answer-
Audit log
What is the function of anti-exploit technology? - correct answer-
To detect and stop compromised vulnerable applications
Complete the sentence: The SAV32CLI clean-up tool is a... -
correct answer-Command line tool included in Sophos Central
installation
When registering for a Sophos Central Trial, which of the
following statements are TRUE? - correct answer-You must use
an email address that has not been used with Sophos Central
before
Which tab on the device details page displays the tamper
protection information? - correct answer-SUMMARY
Sophos Certified Engineer Exam
Questions With Complete Solutions
Which TCP port is used to communicate policies to endpoints? -
correct answer-8190
Which Sophos Central manage product protects the data on a lost
or stolen laptop? - correct answer-Encryption
The option to stop the AutoUpdate service is greyed out in
Windows Services. What is the most likely reason for this? -
correct answer-Tamper Protection is enabled
Complete the sentence: Signature-based file scanning relies on...
- correct answer-previously detected malware characteristics
TRUE or FALSE: Tamper protection is enabled by default. -
correct answer-TRUE
, Page | 2
You are unable to edit policies in Sophos Central. What do you
check in Sophos Central? - correct answer-That you have the
correct role assigned
Which URL address do you use to login to Sophos Central
Partner Dashboard? - correct answer-partnerportal.sophos.com
You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you
edit to make this change? - correct answer-Threat Protection
What is the FIRST step you must take when deploying virtual
environments? - correct answer-Check the system requirements
You want to prevent users from copying database files to USB
drives without blocking the use of all USB devices. Which policy
do you need to configure? - correct answer-Data Loss Prevention
TRUE or FALSE: You can search for a malicious item across your
network using EDR - correct answer-TRUE
, Page | 3
Which log provides a record of all activities? - correct answer-
Audit log
What is the function of anti-exploit technology? - correct answer-
To detect and stop compromised vulnerable applications
Complete the sentence: The SAV32CLI clean-up tool is a... -
correct answer-Command line tool included in Sophos Central
installation
When registering for a Sophos Central Trial, which of the
following statements are TRUE? - correct answer-You must use
an email address that has not been used with Sophos Central
before
Which tab on the device details page displays the tamper
protection information? - correct answer-SUMMARY
