SOPHOS ENGINEER EXAM WITH QUESTIONS
AND CORRECT ANSWERS
Login using the Launch Sophos Central Admin button in the Partner Dashboard
- CORRECT ANSWER How do you access a managed Sophos Central account to
resolve alerts for your customer
Using the Active Directory Sync Utility and import using CSV file
- CORRECT ANSWER Which 2 of the following are the methods for bulk importing
users?
Disable tamper protection in Sophos Central
- CORRECT ANSWER What is the first step you must take when removing Sophos
Endpoint Protection from a Windows endpoint
Monitors running processes' behavior
- CORRECT ANSWER What is the function of on-access scanning
The file info tab in the self-help tool
- CORRECT ANSWER You have a suspicious file on your endpoint. Which tool do you
use to quickly scan the file
System
- CORRECT ANSWER Which section in the Self-Help tool should be checked to start
investigating an updating issue on an endpoint
Tamper Protection is enabled
- CORRECT ANSWER The option to stop the Auto Update service is greyed out in
Windows Services. What is the most likely reason for this?
Encryption
- CORRECT ANSWER Which Sophos Central manage product protects the data on a
lost or stolen laptop?
False
- CORRECT ANSWER TRUE or FALSE: The security VM installer is linked to your
Sophos Central account.
That you have the correct role assigned
- CORRECT ANSWER You are unable to edit policies in Sophos Central. What do you
check in Sophos Central?
Master Licensing, Individual Licensing
, - CORRECT ANSWER in which 2 ways can you license the Enterprise Dashboard?
Prevents a user from uninstalling the Sophos agent software
- CORRECT ANSWER What does tamper protection prevent a user from doing on their
endpoint with Sophos Central agent installed
Events report
- CORRECT ANSWER Which report will give you information across all protected
endpoints?
The Self-Service Portal
- CORRECT ANSWER How do users view quarantined emails and manage device
encryption for their protected endpoints
SUMMARY
- CORRECT ANSWER Which tab on the device details page displays the tamper
protection information
Failed to protect an endpoint
- CORRECT ANSWER Which of the following alerts is categorized as a high alert?
Failed to protect an endpoint
- CORRECT ANSWER Which of the following alerts is categorized as a high alert?
False
- CORRECT ANSWER TRUE or FALSE: All Endpoints have the same tamper
protection password.
In the sub-estate Central Admin Console, In the Enterprise Dashboard
- CORRECT ANSWER Your Enterprise Dashboard has been configured with multiple
sub-estates. In which 2 ways can you manage the licenses associated with the sub-
estates?
By Severity
- CORRECT ANSWER Which of the following is a configuration option for setting the
frequency of email alerts from the Partner Dashboard?
90 days
- CORRECT ANSWER How long are activities stored for in the Enterprise Dashboard?
POLICY BYPASSED
- CORRECT ANSWER You have created a new policy. Which tab do you select to
enable the policy?
True
AND CORRECT ANSWERS
Login using the Launch Sophos Central Admin button in the Partner Dashboard
- CORRECT ANSWER How do you access a managed Sophos Central account to
resolve alerts for your customer
Using the Active Directory Sync Utility and import using CSV file
- CORRECT ANSWER Which 2 of the following are the methods for bulk importing
users?
Disable tamper protection in Sophos Central
- CORRECT ANSWER What is the first step you must take when removing Sophos
Endpoint Protection from a Windows endpoint
Monitors running processes' behavior
- CORRECT ANSWER What is the function of on-access scanning
The file info tab in the self-help tool
- CORRECT ANSWER You have a suspicious file on your endpoint. Which tool do you
use to quickly scan the file
System
- CORRECT ANSWER Which section in the Self-Help tool should be checked to start
investigating an updating issue on an endpoint
Tamper Protection is enabled
- CORRECT ANSWER The option to stop the Auto Update service is greyed out in
Windows Services. What is the most likely reason for this?
Encryption
- CORRECT ANSWER Which Sophos Central manage product protects the data on a
lost or stolen laptop?
False
- CORRECT ANSWER TRUE or FALSE: The security VM installer is linked to your
Sophos Central account.
That you have the correct role assigned
- CORRECT ANSWER You are unable to edit policies in Sophos Central. What do you
check in Sophos Central?
Master Licensing, Individual Licensing
, - CORRECT ANSWER in which 2 ways can you license the Enterprise Dashboard?
Prevents a user from uninstalling the Sophos agent software
- CORRECT ANSWER What does tamper protection prevent a user from doing on their
endpoint with Sophos Central agent installed
Events report
- CORRECT ANSWER Which report will give you information across all protected
endpoints?
The Self-Service Portal
- CORRECT ANSWER How do users view quarantined emails and manage device
encryption for their protected endpoints
SUMMARY
- CORRECT ANSWER Which tab on the device details page displays the tamper
protection information
Failed to protect an endpoint
- CORRECT ANSWER Which of the following alerts is categorized as a high alert?
Failed to protect an endpoint
- CORRECT ANSWER Which of the following alerts is categorized as a high alert?
False
- CORRECT ANSWER TRUE or FALSE: All Endpoints have the same tamper
protection password.
In the sub-estate Central Admin Console, In the Enterprise Dashboard
- CORRECT ANSWER Your Enterprise Dashboard has been configured with multiple
sub-estates. In which 2 ways can you manage the licenses associated with the sub-
estates?
By Severity
- CORRECT ANSWER Which of the following is a configuration option for setting the
frequency of email alerts from the Partner Dashboard?
90 days
- CORRECT ANSWER How long are activities stored for in the Enterprise Dashboard?
POLICY BYPASSED
- CORRECT ANSWER You have created a new policy. Which tab do you select to
enable the policy?
True
