Sophos Certified Engineer Practice Exam

Does deleting an endpoint in Sophos Central remove the Endpoint agent from the associated device?

1. True

2. False

3. This action requires additional confirmation

4. Only if the device is offline

The correct answer is: False

When an endpoint is deleted in Sophos Central, it does not automatically remove the Endpoint agent from the associated device. The agent will remain installed on the device and continue to operate until it is manually uninstalled or the device is reintegrated into Sophos Central. This behavior ensures that the endpoint can retain its security posture and protections even after removal from the management console. If the agent were to be automatically uninstalled upon deletion, it could result in unmanaged devices that are still physically present but lack protection, which would not align with best security practices. Thus, simply deleting an endpoint from the management console does not affect the installed agent on the device itself.