SOPHOS ENGINEER PRACTICE EXAM 2026
CYBERSECURITY SCENARIOS AND
SOLUTIONS GRADED A+
●● Which Sophos Central manage product protects the data on a lost or
stolen laptop?
Answer: Encryption
●● The option to stop the AutoUpdate service is greyed out in Windows
Services. What is the most likely reason for this?
Answer: Tamper Protection is enabled
●● Complete the sentence: Signature-based file scanning relies on...
Answer: previously detected malware characteristics
●● TRUE or FALSE: Tamper protection is enabled by default.
Answer: TRUE
●● You are unable to edit policies in Sophos Central. What do you check
in Sophos Central?
Answer: That you have the correct role assigned
,●● Which URL address do you use to login to Sophos Central Partner
Dashboard?
Answer: partnerportal.sophos.com
●● You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you edit
to make this change?
Answer: Threat Protection
●● What is the FIRST step you must take when deploying virtual
environments?
Answer: Check the system requirements
●● You want to prevent users from copying database files to USB drives
without blocking the use of all USB devices. Which policy do you need
to configure?
Answer: Data Loss Prevention
●● TRUE or FALSE: You can search for a malicious item across your
network using EDR
Answer: TRUE
●● Which log provides a record of all activities?
Answer: Audit log
, ●● What is the function of anti-exploit technology?
Answer: To detect and stop compromised vulnerable applications
●● Complete the sentence: The SAV32CLI clean-up tool is a...
Answer: Command line tool included in Sophos Central installation
●● When registering for a Sophos Central Trial, which of the following
statements are TRUE?
Answer: You must use an email address that has not been used with
Sophos Central before
●● Which tab on the device details page displays the tamper protection
information?
Answer: SUMMARY
●● What is the function of Live Protection?
Answer: Connects to a cloud server to check for the latest information
about a file
●● How long are activities stored for in the Enterprise Dashboard?
Answer: 90 days
CYBERSECURITY SCENARIOS AND
SOLUTIONS GRADED A+
●● Which Sophos Central manage product protects the data on a lost or
stolen laptop?
Answer: Encryption
●● The option to stop the AutoUpdate service is greyed out in Windows
Services. What is the most likely reason for this?
Answer: Tamper Protection is enabled
●● Complete the sentence: Signature-based file scanning relies on...
Answer: previously detected malware characteristics
●● TRUE or FALSE: Tamper protection is enabled by default.
Answer: TRUE
●● You are unable to edit policies in Sophos Central. What do you check
in Sophos Central?
Answer: That you have the correct role assigned
,●● Which URL address do you use to login to Sophos Central Partner
Dashboard?
Answer: partnerportal.sophos.com
●● You are detecting low-reputation files and want to change the
reputation level from recommended to strict. Which policy do you edit
to make this change?
Answer: Threat Protection
●● What is the FIRST step you must take when deploying virtual
environments?
Answer: Check the system requirements
●● You want to prevent users from copying database files to USB drives
without blocking the use of all USB devices. Which policy do you need
to configure?
Answer: Data Loss Prevention
●● TRUE or FALSE: You can search for a malicious item across your
network using EDR
Answer: TRUE
●● Which log provides a record of all activities?
Answer: Audit log
, ●● What is the function of anti-exploit technology?
Answer: To detect and stop compromised vulnerable applications
●● Complete the sentence: The SAV32CLI clean-up tool is a...
Answer: Command line tool included in Sophos Central installation
●● When registering for a Sophos Central Trial, which of the following
statements are TRUE?
Answer: You must use an email address that has not been used with
Sophos Central before
●● Which tab on the device details page displays the tamper protection
information?
Answer: SUMMARY
●● What is the function of Live Protection?
Answer: Connects to a cloud server to check for the latest information
about a file
●● How long are activities stored for in the Enterprise Dashboard?
Answer: 90 days
