156-561 · Question #103
Which licensing packages are available for the CloudGuard platform?
The correct answer is A. NGTP & NGTX. A is correct because CloudGuard (Check Point's cloud security platform) is available under two licensing tiers: NGTP (Next Generation Threat Prevention) and NGTX (Next Generation Threat Extraction) - both are valid, purchasable packages depending on the security features an…
Question
Which licensing packages are available for the CloudGuard platform?
Options
- ANGTP & NGTX
- BNGTP Only
- CNGTP & Firewall Only
- DNGTX Only
How the community answered
(41 responses)- A88% (36)
- B2% (1)
- C7% (3)
- D2% (1)
Explanation
A is correct because CloudGuard (Check Point's cloud security platform) is available under two licensing tiers: NGTP (Next Generation Threat Prevention) and NGTX (Next Generation Threat Extraction) - both are valid, purchasable packages depending on the security features an organization needs.
- B (NGTP Only) is wrong because it excludes NGTX, which is a legitimate and commonly deployed CloudGuard license that adds Threat Emulation (sandboxing) and Threat Extraction on top of NGTP.
- C (NGTP & Firewall Only) is wrong because "Firewall Only" is not a standalone CloudGuard licensing package - basic firewall capabilities are included within NGTP, not sold as a separate tier.
- D (NGTX Only) is wrong because NGTX doesn't exist in isolation as the sole option; both tiers are offered, not just the higher one.
Memory tip: Think of the packages as a ladder - NGTP is the foundation (prevention), and NGTX adds eXtraction/Emulation on top. The answer is always "both rungs of the ladder," so whenever you see a question about CloudGuard licensing, remember: Two tiers, both available = A.
Topics
Community Discussion
5
Imani T.Dec 31, 2025The correct answer is A, NGTP and NGTX. CloudGuard Network Security offers two main licensing tiers, and you need to know both of them cold for this exam. NGTP, which stands for Next Generation Threat Prevention, covers your core protections like IPS, application control, URL filtering, and antivirus. NGTX goes a step further and layers in sandboxing via SandBlast, so you get zero-day threat emulation and extraction on top of everything NGTP already includes. Check Point designed these as a progression, not competing options, so the exam is testing whether you know the platform supports both packages, not just one or the other.
Lena V.Dec 14, 2025CloudGuard licensing comes in two tiers, NGTP (Next Generation Threat Prevention) and NGTX (which stacks Threat Extraction and SandBlast on top), so the answer here is A since both packages are available on the platform. Quick question for anyone who has deployed this in production, do you find that most orgs actually need NGTX or do they typically land on NGTP and call it a day?
Ingrid P.Jan 16, 2026NGTP and NGTX are both correct, card this: CloudGuard supports two tiers, not one.
Grace U.Dec 24, 2025When you think about what CloudGuard is actually protecting against, it helps to ask whether one package alone would cover both prevention and the deeper extraction capabilities, or if Check Point designed them to work as a pair. Have you come across the difference between what NGTP handles versus what the "X" in NGTX adds on top of it, like threat emulation and sandboxing?
Ingrid P.Dec 25, 2025NGTX is just NGTP plus Threat Emulation and Threat Extraction bundled together, so the "X" is specifically about sandboxing unknown files and sanitizing documents before they reach the user, which is the gap NGTP alone leaves open.