Sophos Certified Engineer Practice Exam

What functionality does tamper protection provide on an endpoint with the Sophos Central agent?

1. Allows users to uninstall outdated software

2. Prevents users from uninstalling the Sophos agent software

3. Enables users to modify agent settings

4. Restricts access to the internet

The correct answer is: Prevents users from uninstalling the Sophos agent software

Tamper protection is a critical security feature implemented by the Sophos Central agent that serves to safeguard the integrity of the endpoint's security configuration. When tamper protection is enabled, it effectively prevents users, including potential attackers with administrative rights, from uninstalling or disabling the Sophos agent software. This ensures that the endpoint remains protected against threats and retains its defenses even in situations where a user may try to circumvent security measures. The other functionalities do not correctly describe tamper protection. For instance, allowing users to uninstall outdated software or modifying agent settings can lead to vulnerabilities. Restricting access to the internet is a different aspect of network security and is not related to the tamper protection feature that specifically focuses on maintaining the operational state of the Sophos agent.