Sophos Certified Engineer Practice Exam

What does tamper protection prevent users from doing?

1. Installing updates

2. Uninstalling the endpoint agent

3. Reviewing logs

4. Adjusting network settings

The correct answer is: Uninstalling the endpoint agent

Tamper protection is a security feature designed to prevent unauthorized changes to critical security components of an endpoint protection solution, such as the endpoint agent. It specifically prevents users from uninstalling the endpoint agent, ensuring that the protection remains active and effective against potential threats. By prohibiting the removal of the security software, tamper protection helps maintain the integrity of the security posture, preventing users who may not be aware of the risks from disabling essential protection mechanisms. The other options, while related to the functionality of the system, do not fall under the primary purpose of tamper protection. For instance, users generally retain the ability to install updates, review logs, and adjust network settings as part of the standard operational capabilities of their systems or administrative privileges, as these actions do not compromise the core protection measures put in place by tamper protection.