Sophos

What is Rapid Response A lightning fast service that investigates active threats in an organization which is in the throes of an active attack For brand new Sophos customers, what is the first step which they must do as part of the on boarding process? Create a Sophos Central account True or false: MTR is a human-led service. True What does the Advanced tier of MTR provide that Standard does not? Deeper threat hunting Several more ways for organizations to communicate dire...

In the Data Loss Prevention Rule You want to change an action for 'confidential' content. Where in Sophos Central do you make this change? Modifying protection settings and uninstalling the endpoint agent Two of the following that tamper protection prevent users from doing Installed components An endpoint is reporting that Sophos Autoupdate is not installed. In the Self-Help Tool which tab do you check to view whether AutoUpdate is listed as Installed? Threat Protection...

Cloud based centralized management platform. It is a console for managing your Sophos products using a single interface with an intuitive dashboard. correct answer: Sophos Central A communication channel which can warn or alert centrally linked Sophos products when there has been an attack or suspected attack. correct answer: Sophos Security Heartbeat provides a detailed look into Sophos Central, it's development, deployment and maintenance as well as what data is collected, where it is...

Which TCP port is used to communicate policies to endpoints? 8190 Which Sophos Central manage product protects the data on a lost or stolen laptop? Encryption The option to stop the AutoUpdate service is greyed out in Windows Services. What is the most likely reason for this? Tamper Protection is enabled Complete the sentence: Signature-based file scanning relies on... previously detected malware characteristics TRUE or FALSE: Tamper protection is enabled by default. T...

You have cloned the threat protection base policy, applied the policy to a group and saved it. When checking the endpoint, the policy changes have not taken effect. What do you check in the policy CORRECT ANSWERS: That the cloned policy has been enforced Which TCP port is used to communicate policies to endpoint? CORRECT ANSWERS: 8190 What is the function of an update cache? CORRECT ANSWERS: To download updates from Sophos Central and store them on a dedicated server on your network ...

Sophos Central CORRECT ANSWERS: Cloud based centralized management platform. It is a console for managing your Sophos products using a single interface with an intuitive dashboard. Sophos Security Heartbeat CORRECT ANSWERS: A communication channel which can warn or alert centrally linked Sophos products when there has been an attack or suspected attack. Sophos Central Security Framework CORRECT ANSWERS: provides a detailed look into Sophos Central, it's development, deployment and main...

Cloud based centralized management platform. It is a console for managing your Sophos products using a single interface with an intuitive dashboard. CORRECT ANSWERS: Sophos Central A communication channel which can warn or alert centrally linked Sophos products when there has been an attack or suspected attack. CORRECT ANSWERS: Sophos Security Heartbeat provides a detailed look into Sophos Central, it's development, deployment and maintenance as well as what data is collected, where it ...

What is Rapid Response CORRECT ANSWERS: A lightning fast service that investigates active threats in an organization which is in the throes of an active attack For brand new Sophos customers, what is the first step which they must do as part of the on boarding process? CORRECT ANSWERS: Create a Sophos Central account True or false: MTR is a human-led service. CORRECT ANSWERS: True What does the Advanced tier of MTR provide that Standard does not? CORRECT ANSWERS: Deeper threat hunti...

In the Data Loss Prevention Rule CORRECT ANSWERS: You want to change an action for 'confidential' content. Where in Sophos Central do you make this change? Modifying protection settings and uninstalling the endpoint agent CORRECT ANSWERS: Two of the following that tamper protection prevent users from doing Installed components CORRECT ANSWERS: An endpoint is reporting that Sophos Autoupdate is not installed. In the Self-Help Tool which tab do you check to view whether AutoUpdate...

Which TCP port is used to communicate policies to endpoints? CORRECT ANSWERS: 8190 Which Sophos Central manage product protects the data on a lost or stolen laptop? CORRECT ANSWERS: Encryption The option to stop the AutoUpdate service is greyed out in Windows Services. What is the most likely reason for this? CORRECT ANSWERS: Tamper Protection is enabled Complete the sentence: Signature-based file scanning relies on... CORRECT ANSWERS: previously detected malware characteristics ...