Sophos Endpoint And Server Engineer
Reviewer Actual Questions with 100% Correct
Answers
You want to change an action for 'confidential' content.
Where in Sophos Central do you make this change?
In the Data Loss Prevention Rule
Two of the following that tamper protection prevent users from doing
Modifying protection settings and uninstalling the endpoint agent
An endpoint is reporting that Sophos Autoupdate is not installed.
In the Self-Help Tool which tab do you check to view whether AutoUpdate is listed as Installed?
Installed components
In which policy do you enable device isolation?
Threat Protection
What is the function of Sophos Synchronized Security?
To connect Sophos security solutions in real time
What is the minimum administrative role that will allow a user to manage user roles and role
assignments
Super Admin
Signature-based file scanning relies on....
previously detected malware characteristics
Minimum administrative role that will allow a user to scan endpoints
Help desk
Tamper protection is enabled by default
True
2 places in Sophos Central do you add exclusions for servers?
Exclusions tab and global settings
You want to mitigate exploits in vulnerable applications.
Which policy do you enable the features in?
Threat Protection
A method of deploying endpoint protection?
, Download and run the installer from Sophos Central
Is a pre-execution check performed by Intercept X?
Machine learning
Which feature of Intercept X is designed to detect malware before it can execute?
Exploit technique detection
You have created a new policy
Which tab do you select to enable the policy?
Policy Enforced
Which security threat does Intercept X protect against?
Ransomware
What is the minimum administrative role that will allow a user to create and edit policies
Admin
When protecting a Mac client, you must know the password of the administrator
True
What is the first step you must take when deploying virtual environments?
Check the system requirements
Which TCP port is used to communicate policies to endpoints?
8190
Tamper protection must be disabled before removing Endpoint Protection.
True
Two of the following are monitored when File Integrity Monitoring is enabled
Files and Registry Entries
Which endpoint protection policy do you edit to block users from visiting a specific website category
Web control
You need to give a user access to change their protection settings in an emergency
Which 2 of the following allow you to do this?
Give the user administrator rights to the endpoint and provide the user with the tamper protection
password
What is the function of Peripheral Control?
Reviewer Actual Questions with 100% Correct
Answers
You want to change an action for 'confidential' content.
Where in Sophos Central do you make this change?
In the Data Loss Prevention Rule
Two of the following that tamper protection prevent users from doing
Modifying protection settings and uninstalling the endpoint agent
An endpoint is reporting that Sophos Autoupdate is not installed.
In the Self-Help Tool which tab do you check to view whether AutoUpdate is listed as Installed?
Installed components
In which policy do you enable device isolation?
Threat Protection
What is the function of Sophos Synchronized Security?
To connect Sophos security solutions in real time
What is the minimum administrative role that will allow a user to manage user roles and role
assignments
Super Admin
Signature-based file scanning relies on....
previously detected malware characteristics
Minimum administrative role that will allow a user to scan endpoints
Help desk
Tamper protection is enabled by default
True
2 places in Sophos Central do you add exclusions for servers?
Exclusions tab and global settings
You want to mitigate exploits in vulnerable applications.
Which policy do you enable the features in?
Threat Protection
A method of deploying endpoint protection?
, Download and run the installer from Sophos Central
Is a pre-execution check performed by Intercept X?
Machine learning
Which feature of Intercept X is designed to detect malware before it can execute?
Exploit technique detection
You have created a new policy
Which tab do you select to enable the policy?
Policy Enforced
Which security threat does Intercept X protect against?
Ransomware
What is the minimum administrative role that will allow a user to create and edit policies
Admin
When protecting a Mac client, you must know the password of the administrator
True
What is the first step you must take when deploying virtual environments?
Check the system requirements
Which TCP port is used to communicate policies to endpoints?
8190
Tamper protection must be disabled before removing Endpoint Protection.
True
Two of the following are monitored when File Integrity Monitoring is enabled
Files and Registry Entries
Which endpoint protection policy do you edit to block users from visiting a specific website category
Web control
You need to give a user access to change their protection settings in an emergency
Which 2 of the following allow you to do this?
Give the user administrator rights to the endpoint and provide the user with the tamper protection
password
What is the function of Peripheral Control?
