V19.5 SOPHOS FIREWALL| SOPHOS
FIREWALL V19.5 EXAM QUESTIONS WITH
CORRECT ANSWERS TESTED AND
APPROVED!!!
True of False: RED connections are alway automatically added to the VPN
Zone -- ANSWER--false
Lateral movement protection is made possible by which of the following? --
ANSWER--Synchronized Security
Which 2 of these are features of the Xstream achitecture? -- ANSWER--TLS
1.3 Decryption und Deep packet inspection
Which feature of the Sophjos Firewall helps prevent a computer infected by a
trojan from transmitting personal information out of theri network? --
ANSWER--Advanced Threat Protection
Which feature of the Sophos firewall identifies unknown applications? --
ANSWER--Synchronized App Controll
,Page 2 of 27
What cloud platfroms is Sophos Firewall supported on? -- ANSWER--AWS,
Azure und Nutanix
How many radios do the wireless XGS series models have? -- ANSWER--1
True or False: The number of ports can be expanded using additional modules. -
- ANSWER--True
You have received a new hardware Sophos Firewall. What is the default IP
addres and port that is used to access the device? -- ANSWER--
172.16.16.16:4444
What are the different types of traffic shaping policy you can create? --
ANSWER--Users, Web categories, Rules, Applications
What 2 things do you need to do to use IPS policies -- ANSWER--Select an IPS
policy in a firewall rule; Enable IPS using the switch
Spoof Protection -- ANSWER--Drops traffic that is trying to pretend to come
from a different MAC of IP address to bypass protection
DoS Protection -- ANSWER--Drops traffic that is maliciously trying to prevent
legitimate traffic from being able to accsess services.
, Page 3 of 27
IPS Policies -- ANSWER--Protectes against exploits and malfromed traffic.
Which 2 actions can ATP be configured to perform when it detects traffic to a
command-and-control server? -- ANSWER--Log; Log and Drop
You want to configure Security Heartbeat, what is the first thing you need to
do? -- ANSWER--Register your Sophos Firewall with you Sophos Central
account
What information deas Sophos Firewall share about devices with a RED health
status to prevent lateral movement protection? -- ANSWER--MAC Adress
What do you need to configure before you can start using traffic shaping? --
ANSWER--Total WAN bandwidth
True of False: NAT rules are processed in order from top to bottom --
ANSWER--True
True or False: All firewall rules are evaluated and the best match is used. --
ANSWER--false