SOPHOS FIREWALL EXAM WITH COMPLETE 200
QUESTIONS AND DETAILED SOLUTIONS LATEST
UPDATE THIS YEAR
CONTENTS
Sophos Firewall v19.5
QUESTION: You have received a new hardware Sophos Firewall. What is the default IP addres
and port that is used to access the device? - ANSWER-172.16.16.16:4444
QUESTION: You are preparing a Sophos Firewall for installation on a remote site. The order for
the license hat not yet been processed. Which device registration oprion do you select in the
Initial Suetup wizard? - ANSWER-I do not want to register now.
QUESTION: Servic objects can be created for which of the following? - ANSWER-TCP/UDP Ports,
IP Protocol Number, ICMP Type and Code
QUESTION: In which of these zones is an interface conffigured with a gateway? - ANSWER-WAN
QUESTION: How many gateways can you include in an SD-WAN profile? - ANSWER-8
Lateral movement protection is made possible by which of the following? - ANSWER-
Synchronized Security
1
,Page 2 of 35
QUESTION: Which 2 of these are features of the Xstream achitecture? - ANSWER-TLS 1.3
Decryption und Deep packet inspection
QUESTION: Which feature of the Sophjos Firewall helps prevent a computer infected by a trojan
from transmitting personal information out of theri network? - ANSWER-Advanced Threat
Protection
QUESTION: Which feature of the Sophos firewall identifies unknown applications? - ANSWER-
Synchronized App Controll
QUESTION: What cloud platfroms is Sophos Firewall supported on? - ANSWER-AWS, Azure und
Nutanix
QUESTION: How many radios do the wireless XGS series models have? - ANSWER-1
QUESTION: True or False: The number of ports can be expanded using additional modules. -
ANSWER-True
2
,Page 3 of 35
QUESTION: Place the route types in the correct default order of precedence - ANSWER-1. Static;
2. SD-WAN; 3. VPN; 4. Default
QUESTION: How many servers does Sophos Firewall suport for static DNS? - ANSWER-3
QUESTION: You have an existing DHCP server. What configuration allows Sophos firewall to
forward lease requests to this? - ANSWER-Relay
QUESTION: Which of these are defined as Admin services in Device access? - ANSWER-HTTPS
and SSH
QUESTION: You want a certificate to be signed by a third-party company. which option should
you choose? - ANSWER-Generate CSR
QUESTION: What are the different types of traffic shaping policy you can create? - ANSWER-
Users, Web categories, Rules, Applications
QUESTION: What do you need to configure before you can start using traffic shaping? -
ANSWER-Total WAN bandwidth
QUESTION: True of False: NAT rules are processed in order from top to bottom - ANSWER-True
3
, Page 4 of 35
QUESTION: True or False: All firewall rules are evaluated and the best match is used. - ANSWER-
false
QUESTION: Which 3 of the following are matching criteria Sophos Firewall uses to automatically
assign firewall rules to groups? - ANSWER-Destination ZONE, Source ZONE, Rule type
QUESTION: complete the sentence below:
When creating a firewall rule for DNAT, you select the ________ destination zone. - ANSWER-
Post NAT
QUESTION: Where would you exclude a website from TLS inspection? - ANSWER-WEB -> URL
Groups
QUESTION: Where would you configure which chiper algorithms to block? - ANSWER-
Decryption profile
QUESTION: What 2 things do you need to do to use IPS policies - ANSWER-Select an IPS policy in
a firewall rule; Enable IPS using the switch
4
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller eddietaylor. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $27.99. You're not tied to anything after your purchase.
