SOPHOS ENDPOINT
SUPPORT CERTIFICATION
PRACTICE TEST 30
QUESTIONS
Question 1: A company has 600 endpoints at one site and wants to reduce repeated internet downloads of Sophos software updates. Which Sophos Central feature should it deploy on the local network?
Choices:
1) Message Relay 2) Update Cache 3) Data Loss Prevention 4) Live Response
Correct Answer: Update Cache
Explanation: An Update Cache downloads Sophos Central updates once and makes them available to computers on the local network, reducing internet bandwidth usage.Page 1
Question 2: Several protected computers can reach an internal server but cannot
communicate directly with Sophos Central over the internet. Which role should that internal server provide?
Choices:
1) Update Cache only 2) SafeStore 3) Web Control proxy 4) Message Relay
Correct Answer: Message Relay
Explanation: A Message Relay lets protected computers communicate with Sophos Central through a server on the local network when direct communication is unavailable or undesirable.Question 3: After an administrator con�gures an Update Cache in Sophos Central, what normally happens to eligible computers on the network?
Choices:
1) Sophos Central automatically con�gures them to use an available cache 2) Each computer must be manually pointed to the cache 3) They stop receiving threat intelligence until restarted 4) They communicate only through a Message Relay Correct Answer: Sophos Central automatically con�gures them to use an available cache Explanation: Sophos Central automatically con�gures eligible computers to obtain updates from an available Update Cache; manual assignment is not normally required.Page 2
Question 4: Which default Windows Firewall port pairing is associated with Sophos Update Cache and Message Relay services?
Choices:
1) Update Cache 8190 and Message Relay 8191 2) Update Cache 443 and Message Relay 80 3) Update Cache 8191 and Message Relay 8190 4) Update Cache 8080 and Message Relay 8443
Correct Answer: Update Cache 8191 and Message Relay 8190
Explanation: Sophos documentation identi�es port 8191 for Update Cache and port 8190 for Message Relay on Windows Firewall.
Question 5: An organization removes its last Sophos Update Cache from Central.
What should protected computers do after recon�guration?
Choices:
1) Stop updating until another cache is installed 2) Update directly from Sophos 3) Use SafeStore as an update source 4) Switch automatically to a Message Relay for update �les
Correct Answer: Update directly from Sophos
Explanation: If all Update Caches are removed, Sophos Central recon�gures computers to obtain their updates directly from Sophos.Question 6: An endpoint is receiving malware protection locally, but new policies from Sophos Central are not arriving and status messages are not being reported Page 3