1|Page
Sophos S80 Technician Exam (2026/2027) || Most
Recent Exam Actual Complete Real Verified Exam
Questions And Correct Answers (Verified Answers)
Already Graded A+!!! Newest Exam!!!
What is the name of the log file for Sophos Central
registration events? - Answer-sophos-central.log
What is the console command that can be used to check
the IPS settings? - Answer-ips-settings
When traffic passes through Sophos Firewall, what does it
use to identify computers it has a Security Heartbeat with?
- Answer-IP address
What does Sophos Firewall share with devices it has a
Security Heartbeat with to prevent lateral movement? -
Answer-MAC address
You are reviewing the IPS log file. What does verdict 4
mean? - Answer-drop the session
,2|Page
Enter the log directory that you would check to review both
sides of an SSL site-to-site VPN connection? - Answer-
/log/sslvpn.log
When troubleshooting an SSL VPN connection issues,
where would you go if you saw the entry below in the log
viewer? - Answer-device access
Which 2 additional log files are used when troubleshooting
issues with route-based IPsec site-to-site VPN
connections? - Answer-xfrmi.log, applog.log
Which log file should be used when troubleshooting IPsec
site-to-site VPN connection problems? - Answer-
strongswan.log
What does it meant when an IPsec site-to-site VPN
connection has a yellow status? - Answer-Not all
associations could be established
In which 2 places does the captive portal need to be
enabled? - Answer-Device access, Firewall rule
, 3|Page
What method can be used to compensate for a time
difference between the firewall and the authenticator app
for multi-factor authentication? - Answer-Click on the OTP
time-offset synchronization icon for the token
Which port does the STA Agent send login details to the
STA collector on by default? - Answer-5566
You cannot login using Active Directory. The authentication
log shows 'auth_method=local'. Where would you correct
this in the WebAdmin? - Answer-Authentication > Services
Enter the command to enable debug logging for DPI web
scanning. - Answer-awarrenhttpf
Enter the name of the service that is used to categorize
URLs for both DPI scanning and the web proxy. - Answer-
nSXLd
Users are currently blocked from social networking sites.
Which 2 steps would allow some but not all users to
access these sites? - Answer-Remove Social Networking
Sophos S80 Technician Exam (2026/2027) || Most
Recent Exam Actual Complete Real Verified Exam
Questions And Correct Answers (Verified Answers)
Already Graded A+!!! Newest Exam!!!
What is the name of the log file for Sophos Central
registration events? - Answer-sophos-central.log
What is the console command that can be used to check
the IPS settings? - Answer-ips-settings
When traffic passes through Sophos Firewall, what does it
use to identify computers it has a Security Heartbeat with?
- Answer-IP address
What does Sophos Firewall share with devices it has a
Security Heartbeat with to prevent lateral movement? -
Answer-MAC address
You are reviewing the IPS log file. What does verdict 4
mean? - Answer-drop the session
,2|Page
Enter the log directory that you would check to review both
sides of an SSL site-to-site VPN connection? - Answer-
/log/sslvpn.log
When troubleshooting an SSL VPN connection issues,
where would you go if you saw the entry below in the log
viewer? - Answer-device access
Which 2 additional log files are used when troubleshooting
issues with route-based IPsec site-to-site VPN
connections? - Answer-xfrmi.log, applog.log
Which log file should be used when troubleshooting IPsec
site-to-site VPN connection problems? - Answer-
strongswan.log
What does it meant when an IPsec site-to-site VPN
connection has a yellow status? - Answer-Not all
associations could be established
In which 2 places does the captive portal need to be
enabled? - Answer-Device access, Firewall rule
, 3|Page
What method can be used to compensate for a time
difference between the firewall and the authenticator app
for multi-factor authentication? - Answer-Click on the OTP
time-offset synchronization icon for the token
Which port does the STA Agent send login details to the
STA collector on by default? - Answer-5566
You cannot login using Active Directory. The authentication
log shows 'auth_method=local'. Where would you correct
this in the WebAdmin? - Answer-Authentication > Services
Enter the command to enable debug logging for DPI web
scanning. - Answer-awarrenhttpf
Enter the name of the service that is used to categorize
URLs for both DPI scanning and the web proxy. - Answer-
nSXLd
Users are currently blocked from social networking sites.
Which 2 steps would allow some but not all users to
access these sites? - Answer-Remove Social Networking
