Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Checkpoint
Exam Format
90 min
75
70%
Expert
Registration
$200 USD
Pearson VUE or online proctoring
English
Validity
3 years
Pass the latest CCTE exam version; Complete continuing education requirements; Maintain active CCSE certification
156-585 Exam Topics and Domains
156-585 is organized into 9 weighted domains. Expect to work with Security Gateway, SmartEvent, Access Control, AD Query, and more.
1
Introduction to Advanced Troubleshooting
10%
Advanced Troubleshooting Methodologies
Systematic Troubleshooting ApproachLinux-based Commands
- Apply systematic troubleshooting methodologies
- Use Linux-based and Check Point commands effectively
- Assess troubleshooting risks in production environments
2
Advanced Management Server Troubleshooting
15%
Management Server Issues
Database ManagementAPI Server Troubleshooting
- Troubleshoot Management Server database issues
- Debug API Server problems
- Use diagnostic commands and tools
CPInfo and System Diagnostics
Collecting CPInfo
- Collect and interpret CPInfo data
- Use CPInfo for diagnostic purposes
3
Advanced Troubleshooting with Logs and Events
12%
Log System Architecture
Log Indexing SystemLog Analysis Techniques
- Use Logs and SmartEvent for troubleshooting
- Troubleshoot log indexing issues
- Analyze security events effectively
4
Advanced Gateway Troubleshooting
15%
CPView Monitoring
Collecting and Reading CPView Data
- Collect and interpret CPView data
- Identify performance issues
- Monitor gateway health
Traffic Analysis Tools
fw monitorAlternative Capture Tools
- Use fw monitor effectively
- Select appropriate capture tools
- Analyze traffic patterns
5
Advanced Firewall Kernel Debugging
18%
Kernel Debug Procedures
fw ctl debug Commandszdebug vs Full Debug
- Understand kernel debug procedures
- Choose between zdebug and full debug
- Manage debug buffers effectively
Chain Module Troubleshooting
Kernel Chain Architecture
- Understand kernel chain architecture
- Troubleshoot using chain modules
- Analyze packet drops
6
Advanced Access Control Troubleshooting
8%
Unified Policy Debugging
Policy Installation IssuesRule Matching and Processing
- Debug Unified Policy inspection
- Troubleshoot policy installation
- Analyze rule matching
7
Advanced Identity Awareness Troubleshooting
7%
Identity Source Issues
AD Query TroubleshootingIdentity Agent Issues
- Debug Identity Awareness components
- Troubleshoot identity sources
- Resolve user mapping issues
8
Advanced Site-to-Site VPN Troubleshooting
8%
IKE/IPSec Debugging
Phase 1 and Phase 2 IssuesVPN Performance Issues
- Debug IKE and IPSec issues
- Analyze VPN performance
- Troubleshoot Site-to-Site connections
9
Advanced Client-to-Site VPN Troubleshooting
7%
Remote Access VPN Issues
Client Authentication ProblemsEndpoint Security Verification
- Debug Remote Access VPN
- Troubleshoot client authentication
- Resolve endpoint compliance issues
How do I earn this certification?
Passing 156-585 earns the Check Point Certified Troubleshooting Expert certification. It sits in the Security Engineering track.
Current Level Exams
- 156-585 - CCTE R81
- 156-586 - CCTE R81.10
- 156-587 - CCTE R81.20
Next Level Options
- 156-541 - CCCS - Check Point Certified Cloud Specialist
- 156-560 - CCCS - Check Point Certified Cloud Specialist
- 156-835 - CCMS - Check Point Certified Maestro Specialist
Alternative Paths
- 156-730 - CCPS - Check Point Certified PenTesting Specialist Security testing expertise
- 156-520 - CCAS - Check Point Certified Automation Specialist API and automation skills
- 156-536 - CCVS - Check Point Certified VSX SpecialistVirtual security expertise
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for 156-585 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2021-01-01
- Announcement date: 2021-01-01
Updates
- Kernel Debugging R81 Core topic - 18% of exam • Release date: 2021-01-01
- CPView Utility 3.0 Critical monitoring tool • Release date: 2020-06-01
- fw monitor Enhanced in R81 Essential packet capture tool • Release date: 2021-01-01
Who should take this exam?
This exam is typically taken by Security Engineers and Security Administrators.
- CCSE (Check Point Certified Security Expert) certification
- Advanced knowledge of Check Point security products
- Working knowledge of UNIX/Windows operating systems
- Strong networking and TCP/IP knowledge