We're so confident of our products that we provide no hassle product exchange.
CheckPoint 156-590 Exam Overview:
| Certification Vendor: | Check Point |
| Exam Name: | Check Point Certified Threat Prevention Specialist (CTPS) |
| Exam Number: | 156-590 |
| Available Languages: | English |
| Exam Price: | $250 USD |
| Related Certifications: | CCSA (Check Point Certified Security Administrator) CCSE (Check Point Certified Security Expert) |
| Exam Format: | Multiple Choice |
| Certificate Validity Period: | 2 years |
| Passing Score: | 70% |
| Real Exam Qty: | 100 |
| Exam Duration: | 90 minutes |
| Sample Questions: | CheckPoint 156-590 Sample Questions |
| Exam Way: | Online proctored or at authorized Pearson VUE testing centers |
| Pre Condition: | Recommended: CCSA (156-215.80) certification and working knowledge of Check Point Security Gateway and SmartConsole |
| Official Syllabus URL: | https://www.checkpoint.com/services/education/certification-exam-156-590.html |
CheckPoint 156-590 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Threat Prevention Policy | 20% | - Creating and configuring Threat Prevention profiles - Profile-based vs. rule-based configurations - Threat Prevention action settings - Applying Threat Prevention policy layers |
| IPS (Intrusion Prevention System) | 20% | - IPS logging and alerts - IPS exceptions and whitelisting - IPS policy configuration and tuning - IPS signatures and protections - IPS architecture and deployment modes |
| Threat Prevention Dashboard and Monitoring | 10% | - Using SmartConsole for monitoring - Threat Prevention logs and reporting - Troubleshooting Threat Prevention issues - Threat Prevention statistics and trends |
| Anti-Bot and Anti-Virus | 15% | - Bot and malware signature updates - Bot detection mechanisms - Configuring Anti-Bot and Anti-Virus policies - Anti-Virus scanning methods (streamed vs. traditional) |
| Threat Prevention Overview and Architecture | 10% | - Check Point Threat Prevention solution overview - Security Gateway integration with Threat Prevention - Threat Prevention architecture and components |
| Threat Extraction | 10% | - Threat Extraction (Sanboxing) concepts - Threat Extraction policy configuration - PDF, Office document, and archive sanitization |
| Threat Emulation (SandBlast) | 15% | - Zero-day threat protection - File emulation process and verdicts - Threat Emulation architecture and deployment - Threat Emulation policy configuration |
CheckPoint Check Point Certified Threat Prevention Specialist (CTPS) Sample Questions:
1. What is an advantage of SmartEvent Reports over Views?
A) Reports have access to more detail than Views.
B) Reports are live and interactive.
C) Reports are customizable and Views are not.
D) Reports can be delivered to users who are not Check Point administrators.
2. You have to issue a Log filter to view IPS logs generated for user John Doe.
Which of the following is the correct filter?
A) user:'John Doe' AND (action:drop OR action:reject OR action:block)
B) user:"John-Doe" AND (action:drop OR action:reject OR action:block)
C) user:"John Doe" AND (action:drop OR action:reject OR action:block)
D) user:John Doe AND (action:drop OR action:reject OR action:block)
3. Which of the following is NOT a valid Blade bundle?
A) SandBlast
B) Next Generation Firewall
C) Next Generation Full Protection
D) Next Generation Threat Prevention
4. What are the three IPS update options?
A) Manual Update, Scheduled Update, Auto Update
B) Auto Update, Policy Update, Update Now
C) Update Now, Schedule Update, Follow policy
D) Update Now, Schedule Update, Follow Protections
5. What is the recommended setting for Anti-Virus and why?
A) Hold because it is Pre-infection and inspects a limited subset of traffic
B) Hold because it inspects a limited subset of traffic
C) Background because it is Post-infection
D) Background because it inspects a large subset of traffic
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: C | Question # 3 Answer: C | Question # 4 Answer: D | Question # 5 Answer: D |
By Nicole
