By default, computers get the latest Sophos product updates automatically, where can an admin change this to allow control over updates?

The ability for administrators to manage and control the update settings for Sophos products is found specifically in the Global settings under Controlled Updates. This area allows the admin to configure how updates are handled, providing options to customize when and how updates are downloaded and installed. By enabling Controlled Updates, an administrator can ensure that updates do not occur automatically without oversight, which can be crucial in environments where controlled changes are necessary for security, compliance, or operational reasons.

In contrast, the other options either do not correspond to the correct setting or refer to different contexts within the Sophos management framework. For instance, Global settings > Automatic Updates would imply fully automatic updates without the necessary administrative control that Controlled Updates offers. Local settings tend to apply only to individual machines rather than a holistic approach for all devices within the network, and Server settings > Update Management pertains to a different set of configurations for server updates rather than general product updates for client machines. Each of these alternatives lacks the specific emphasis on control that the correct answer provides.