Sophos Firewall Administrator 2025 – 400 Free Practice Questions to Pass the Exam

When utilizing the Sophos Transparent Authentication Suite (STAS) for log detection, supported methods include PING and Workstation Polling. PING involves sending Internet Control Message Protocol (ICMP) packets to determine if a workstation is reachable, thus helping to confirm the online status of devices. This is a simple yet effective method for maintaining awareness of the network's real-time status.

Workstation Polling complements PING by actively querying workstations to collect authentication and log data. This polling mechanism allows for continuous monitoring of user activity and facilitates the collection of log information directly from the endpoints. By employing both of these methods, STAS can accurately track user logins and associate those logins with specific IP addresses, which is essential for network security management and auditing.

The other options—HTTP, HTTPS; SSH, FTP; and TCP, UDP—do not pertain to log detection methods supported in STAS. Instead, they relate to different aspects of network protocol communications and data transfer methods, which are not appropriate in the context of log detection within STAS.