Skip to exam content
← All Exams
Techclick Infosec

SCAX Practice Test

Sophos Firewall Architect · XGS · SFOS 20 · HA · ZTNA · Sandstorm

60 questions · 90 min · 80% Techclick practice target

60
Questions
90
Minutes
80%
Techclick Practice Target

⚠️ Exam Rules

  • Once started, the timer cannot be paused
  • You can navigate freely — use Previous or the Navigator panel to revisit any question
  • Tab-switching triggers warnings (3 strikes = auto-submit)
  • Right-click and copy disabled during exam
  • If you fail, retry — questions and options reshuffle
Powered by Techclick Infosec Pvt Ltd

SCAX practice test: what's covered

Questions in this Techclick bank60
Timer90 min
Techclick practice target80%
Official exam codeSCAX

Free SCAX sample questions

  1. A mid-size enterprise needs an XGS firewall sized for 5 Gbps "Threat Protection" throughput with full DPI-SSL. Which Sophos resource is authoritative for selecting the right XGS model?

    • A. Random reseller blog
    • B. The Sophos XGS Datasheet + Sizing Tool — Threat Protection throughput already accounts for IPS + AV + App Control enabled; further check DPI-SSL throughput as a separate row
    • C. OSPF route count
    • D. A guess based on RAM size
    Show answer

    Correct: B. XGS datasheet publishes Firewall / IPS / Threat-Protection / DPI-SSL throughput separately. Always size for the worst case (Threat-Protection + DPI-SSL) plus 30% headroom for growth and Sandstorm spikes.

  2. Sophos Firewall can be deployed in:

    • A. Hardware only
    • B. Hardware (XGS), virtual (VMware/Hyper-V/KVM/AWS/Azure/GCP), and software (SFOS as a VM)
    • C. Mobile phones
    • D. Mainframes only
    Show answer

    Correct: B. SFOS runs on XGS hardware, all major hypervisors, and major public clouds with BYOL or PAYG. Architectural choice depends on environment — physical for branch/edge, virtual/cloud for DC/cloud landing zone.

  3. A "Bridge" interface in SFOS is BEST used to:

    • A. Replace a router
    • B. Insert the firewall transparently between two L2 segments without changing IP topology — useful for drop-in inspection
    • C. Provide VLAN trunking
    • D. Run BGP
    Show answer

    Correct: B. Bridge mode allows L2 transparency — same broadcast domain, no IP/MAC change required on neighbours. Full firewall, IPS, App Control still apply. Routing modes (Layer 3) are for full gateway role.

  4. Which TWO are valid licensing components for SFOS subscriptions? (Choose 2)

    • A. Base Firewall license
    • B. Xstream Protection bundle (covers Network Protection + Web Protection + Sandstorm + Zero-Day Protection + Central management)
    • C. A printer driver
    • D. A separate fax license
    Show answer

    Correct: A and B. Sophos licensing has Base + Xstream Protection bundle (most popular) or Standard Protection (lighter). Each unlocks specific feature sets — IPS, ATP, Sandstorm, ZTNA Gateway, etc.

  5. Initial out-of-box deployment via "Network Deployment Wizard" lets you choose between:

    • A. Only Gateway mode
    • B. Gateway, Bridge, or Mixed mode — selects default zones / rules / NAT scaffolding accordingly
    • C. BGP-only mode
    • D. Email-server mode
    Show answer

    Correct: B. The wizard scaffolds zones (LAN/WAN/DMZ), NAT, base firewall rules. Picking Gateway adds full L3 + NAT; Bridge adds L2 transparency; Mixed allows both on the same box (per-interface).

Last updated:

SCAX practice test FAQ

Is this SCAX practice test free?

Yes. You can start, finish and score it for free, and download the Techclick practice certificate.

How many questions are in the Techclick SCAX practice test?

This bank has 60 original scenario-based questions with a 90-minute timer and a 80% Techclick practice target.

What is the official exam code and format?

SCAX is the label Techclick uses for this practice set. Check the official Sophos certification page for the current exam code.

Are these real SCAX exam questions or dumps?

No. They are original practice questions written by Techclick. This is not the vendor's official exam and not leaked dumps.

Do I get a certificate?

Score 80% or higher to get a Techclick practice certificate and LinkedIn badge. It is not an official Sophos certification.

What should I take after SCAX?

Use the Sophos practice exams page (linked above) to pick the next practice test in the same track.

Techclick Infosec
TECHCLICK INFOSEC
CYBERSECURITY · PRACTICE ASSESSMENT
🦈
PRACTICE ASSESSMENT
Sophos SCAX
Sophos Firewall Architect · XGS · SFOS 20 · HA · ZTNA · Sandstorm
AWARDED TO
{NAME}
SCORE
0%
DATE
--
TC-SCAX-XXX
Practice certificate · not independently verified · Techclick Infosec Pvt Ltd · +91 92772 29456