Sophos Certified Engineer Practice Exam

What detection feature can prevent attacks on the master boot record?

1. WipeGuard

2. Web Filtering

3. Threat Intelligence

4. Sandboxing

The correct answer is: WipeGuard

WipeGuard is specifically designed to protect against attacks that target the master boot record (MBR). It works by monitoring for unauthorized activities or changes to the MBR, which is crucial for the booting process of an operating system. When WipeGuard detects any suspicious modifications, it can take action to prevent these changes, thereby safeguarding the integrity of the system. Other options, while useful in different contexts, do not address MBR attacks directly. Web Filtering is primarily aimed at controlling internet-based threats through real-time blocking of malicious web content. Threat Intelligence enhances overall security posture by providing updated information about known threats but does not focus on MBR protection specifically. Sandboxing is a method to run suspicious code in a controlled environment but does not specifically target MBR attacks. Thus, WipeGuard is the most appropriate feature for preventing MBR-related attacks.