Sophos Engineer ET80 - Sophos Firewall
Overview Latest Update 2025-2026 Exam
Questions with 100% Verified Correct Answers
Guaranteed A+
How does Sophos Automatic Device Isolation work? - CORRECT ANSWER: Server
Protection and Intercept X are used to assign each device a health status. If a device is
compromised, the device can be automatically isolated from other areas of the network
via the firewall and communicating with other devices. This limits infection of other
devices on the network
How does Sophos Deep Learning work? - CORRECT ANSWER: Millions of samples of
both good and bad files are fed to the model, and each feature of the file is defined then
labelled, such as Size, Vendor and Printable settings. This model is then used to review
the suspicious file to recognise and predict if it is malicious or legitimate
How does Sophos Web Server Protection work? - CORRECT ANSWER: It use pre-
configured templates to protect Web Servers. It works as a reverse proxy in the DMZ for
inbound traffic. It uses a Web Application firewall to filter traffic, sign cookies and scan
for malware. It can also authenticate users before they access the web server
What are the phases of the Attack Kill Chain? - CORRECT ANSWER: 1.
Reconnaissance
2. Weaponization
3. Delivery
4. Exploitation
5. Installation
6. Command and control
7. Behaviour
Overview Latest Update 2025-2026 Exam
Questions with 100% Verified Correct Answers
Guaranteed A+
How does Sophos Automatic Device Isolation work? - CORRECT ANSWER: Server
Protection and Intercept X are used to assign each device a health status. If a device is
compromised, the device can be automatically isolated from other areas of the network
via the firewall and communicating with other devices. This limits infection of other
devices on the network
How does Sophos Deep Learning work? - CORRECT ANSWER: Millions of samples of
both good and bad files are fed to the model, and each feature of the file is defined then
labelled, such as Size, Vendor and Printable settings. This model is then used to review
the suspicious file to recognise and predict if it is malicious or legitimate
How does Sophos Web Server Protection work? - CORRECT ANSWER: It use pre-
configured templates to protect Web Servers. It works as a reverse proxy in the DMZ for
inbound traffic. It uses a Web Application firewall to filter traffic, sign cookies and scan
for malware. It can also authenticate users before they access the web server
What are the phases of the Attack Kill Chain? - CORRECT ANSWER: 1.
Reconnaissance
2. Weaponization
3. Delivery
4. Exploitation
5. Installation
6. Command and control
7. Behaviour
