156-590 practice question 9 of 10

What is the purpose of the Profile Cleanup option?

Full set: 75 questions

Answer options

A: It lets you start over by removing all administrator overrides. Correct answer

B: It merges protection settings from multiple profiles into the Optimized Profile.

C: It serves as a cleanup policy if none of the protection matches the packets.

D: It eliminates protections automatically which hasn't been used for a predefined amount of time.

Correct Answer:

A. It lets you start over by removing all administrator overrides.

Explanation

The "Profile Cleanup" utility within the Threat Prevention policy settings is a maintenance tool for the Security Management Server. Its specific function is to scan the configuration and identify any custom-made Threat Prevention profiles that are not currently assigned to any active rule in the policy. It then allows the administrator to remove these unused profiles, which helps to keep the management database clean, reduce clutter, and prevent the use of obsolete configurations.

Why Incorrect

B. Deleting old logs is a function of Log Management and retention policies, configured separately in the Log Server settings.
C. Rulebase optimization, such as finding shadowed or redundant rules, is performed by tools like fwaccel db stat or via other policy analysis features.
D. Resetting profiles to their factory defaults is a distinct action and is not the purpose of the "Profile Cleanup" tool.

References

- Check Point. (2022). R81.10 Threat Prevention Administration Guide. Chapter 2: The Threat Prevention Policy, "Managing Threat Prevention Profiles".

Keep practicing

Take the free 156-590 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test