Sophos Certified Engineer Practice Exam

True or False: Marking an alert as acknowledged will resolve the threat on the endpoint.

1. True

2. False

3. It depends on the severity of the alert

4. Only if the device is rebooted

The correct answer is: False

Marking an alert as acknowledged does not resolve the threat on the endpoint. Acknowledging an alert typically serves to inform the system and the administrators that the alert has been seen and reviewed, but it does not take any action to mitigate or remediate the underlying issue. The threat remains present until appropriate measures, such as remediation actions or updates to the endpoint's security posture, are taken. In this context, acknowledging an alert is more about the management process rather than about resolving the actual security threat. It's important for administrators to actively address threats rather than relying solely on acknowledgment to handle them.