Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Checkpoint
Exam Format
90 min
75
70%
Expert
Registration
$200 USD
Pearson VUE or online proctoring
English
Validity
3 years
Pass a newer version of the CCTE exam; Complete continuing education requirements; Pass another Expert-level Check Point certification
156-587 Exam Topics and Domains
156-587 is organized into 9 weighted domains. Expect to work with cpwd, Access Control, AD Query, API Server, and more.
1
Introduction to Advanced Troubleshooting
10%
Linux and Check Point Commands
System Monitoring CommandsFile Operations
- Identify and use Linux-based and Check Point commands for system monitoring
- Perform file editing and viewing operations
- Collect and read live and historical CPView data
2
Advanced Management Server Troubleshooting
15%
Management Server Issues
CPM Process TroubleshootingManagement HA
- Troubleshoot and debug advanced Management Server issues
- Resolve API Server problems
- Troubleshoot CPM and SmartConsole login issues
- Restore Management High Availability environments
3
Advanced Troubleshooting with Logs and Events
10%
Log Management
SmartLog ProcessesLog Analysis
- Investigate and troubleshoot using logs and events monitoring tools
- Troubleshoot SmartLog processes
- Resolve log indexing issues
4
Advanced Gateway Troubleshooting
15%
Security Gateway Issues
Gateway ProcessesUser Mode Debugs
- Resolve advanced Security Gateway issues
- Collect and interpret user mode debugs
- Troubleshoot gateway processes
5
Advanced Firewall Kernel Debugging
15%
Kernel Troubleshooting
Kernel DebugUnified Policy Inspection
- Demonstrate understanding of kernel debugging techniques
- Collect and interpret kernel debugs
- Debug Unified Policy Inspection in kernel
6
Advanced Access Control Troubleshooting
10%
Access Control Issues
Policy TroubleshootingApplication Control
- Resolve advanced Access Control issues
- Debug policy matching problems
- Troubleshoot application control
7
Advanced Identity Awareness Troubleshooting
10%
Identity Awareness
User AuthenticationIdentity Processes
- Resolve advanced Identity Awareness issues
- Debug Identity Awareness user mode processes
- Troubleshoot authentication problems
8
Advanced Site-to-Site VPN Troubleshooting
10%
Site-to-Site VPN
IKE/IPsec TroubleshootingVPN Debug
- Resolve advanced Site-to-Site VPN issues
- Collect and interpret Site-to-Site VPN debugs
- Troubleshoot IKE and IPsec problems
9
Advanced Client-to-Site VPN Troubleshooting
5%
Remote Access VPN
Client VPN IssuesRemote Access Debug
- Resolve advanced Client-to-Site VPN issues
- Collect and interpret Remote Access VPN debugs
- Troubleshoot client connectivity problems
How do I earn this certification?
Passing 156-587 earns the Check Point Certified Troubleshooting Expert certification. It sits in the Security Operations track.
Current Level Exams
- 156-580 - CCTA
- 156-520 - CCCS
Next Level Options
- 156-541 - CCME - Maestro Expert
- 156-560 - CCCS - Cloud Specialist
- Multiple Specializations - Infinity Specializations
Alternative Paths
- 156-835 - CCMSE - Multi-Domain Security Expert Advanced multi-domain management skills
- 156-551 - CCVSE - VSX ExpertVirtual security expertise
- 156-540 - CCSM - Security Master Security architecture mastery
- 156-590 - CCES - Endpoint Specialist Endpoint protection expertise
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for 156-587.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2023-08
- Announcement date: 2023-07-15
Updates
- Check Point R82 R82 Future CCTE exam likely to cover R82 in 2025-2026 • Release date: 2024-Q2
- Quantum Security Platform R81.20
- CloudGuard
Who should take this exam?
This exam is typically taken by Security experts and Check Point resellers.
CCSE certification (R80 or higher)
- CCSA certification
- Advanced knowledge of Check Point security products
- Working knowledge of UNIX and/or Windows operating systems
- Working knowledge of Networking and TCP/IP
What jobs can I get with this?
Senior Security Engineer
Security Architect
Check Point Specialist
Security Consultant
Technical Support Engineer (L3)