ACTUAL EXAM 170 QUESTIONS AND
CORRECT DETAILED ANSWERS WITH
RATIONALES
When a RED is deployed in Standard/Unified
mode, how do the computers on the remote
network get their IP adresss? -
(ANSWER)From a DHCP server running on
the XG firewall
You are preparing a hardware XG Firewall
for installation on a remote site. The order
for the license has not yet been processed.
Which registration option do you select in the
Initial Setup wizard? - (ANSWER)I do not
want to register now
You have created a repot that displays data
that you wish to check on a daily basis. how
,can you make this data easily available in the
WebAdmin interface?? - (ANSWER)Create a
bookmark for the report
Which of the following best describes
greylisting? - (ANSWER)The first attempt to
deliver a message is temporarily denied.
One computer has a red health status. ON
which 2 of the networks can the endpoints be
protected from the computer with a a red
health status? - (ANSWER)A. C
Sophos XG hardware devices come pre-
loaded with software. - (ANSWER)True
Which 2 features are required if you want to
make use of lateral movement protection? -
,(ANSWER)Server or endpoint protection.
Intercept X
Which XG firewall feature is able to block
access to command and control servers? -
(ANSWER)Advanced Threat Protection
Which 2 methods are supported for logoff
detection when using STAS -
(ANSWER)PING, Workstation Polling
Type the name of the only zone that cannot
have a physical port or interface assigned to
it - (ANSWER)vpn
DHCP can be used to override the magic IP if
the XG Firewall is not the default gateway. -
(ANSWER)False
, Which web filtering method can offload
traffic to the FastPath? - (ANSWER)DPI
Which interface type is a virtual LAN
created on an existing XG interface -
(ANSWER)VLAN
Which of the following statements about
zero-touch deployment are TRUE -
(ANSWER)Zero-touch configuration rules
can only be created for unregistered
hardware serial numbers
What is the clientless Access portal used for?
- (ANSWER)To provide access to internal
resources without the need for a VPN client
to be installed