PFPT-TPAD Practice Test

PFPT-TPAD practice test: what's covered

• Email Protection (PPS)
• TAP
• TRAP
• URL/Attachment Defense

Free PFPT-TPAD sample questions

1. Proofpoint Email Protection sits in the mail flow as:

   • A. An endpoint agent
   • B. A secure email gateway (cloud or hybrid) that inspects inbound/outbound email — filtering spam, malware, phishing, and applying policy BEFORE messages reach (or leave) the organization's mail system (e.g., M365/Exchange)
   • C. A network firewall
   • D. A BGP router
   Show answer

   Correct: B. Proofpoint is a secure email gateway (SEG): MX points to Proofpoint, which inspects/filters mail and then relays clean mail to your mail system (M365/Exchange). It's the email security layer in front of the mail platform — not an endpoint/firewall.

2. Why is email the focus of so much security investment (and Proofpoint)?

   • A. Email is rarely attacked
   • B. Email is the #1 initial-access / attack vector — phishing, BEC, malware attachments, and malicious links overwhelmingly start in email; securing it blocks most attack chains at the source
   • C. Email uses BGP
   • D. Email is obsolete
   Show answer

   Correct: B. The vast majority of breaches start with email (phishing, BEC, malicious attachments/links). Stopping threats at the email gateway disrupts attacks at their most common entry point — why email security is a top priority and Proofpoint's focus.

3. Which TWO Proofpoint capabilities work TOGETHER to detect and then remediate email threats? (Choose 2)

   • A. TAP (Targeted Attack Protection) — detects/analyzes advanced threats (malicious URLs/attachments)
   • B. TRAP (Threat Response Auto-Pull) — retroactively removes delivered malicious messages from mailboxes
   • C. BGP route filtering
   • D. Printer management
   Show answer

   Correct: A and B. TAP detects advanced threats (sandboxing URLs/attachments, click-time analysis); TRAP acts on TAP's verdicts to retroactively pull already-delivered malicious mail from inboxes. Detection (TAP) + remediation (TRAP) is the core combo. BGP/printers are irrelevant.

4. For Microsoft 365 customers, Proofpoint typically deploys as:

   • A. A replacement for M365 entirely
   • B. A gateway in front of M365 (MX → Proofpoint → M365) and/or via API integration — adding advanced threat protection beyond native M365 filtering
   • C. A BGP peer
   • D. A desktop app only
   Show answer

   Correct: B. Proofpoint commonly fronts M365 (MX record points to Proofpoint, which relays to M365) and/or integrates via API. It augments native M365 protection with stronger anti-phishing/BEC/sandboxing. It complements, not replaces, the mail platform.

5. The "people-centric" approach Proofpoint emphasizes means:

   • A. Securing only servers
   • B. Focusing protection around the PEOPLE attackers target — identifying high-risk/heavily-attacked users (VAPs — Very Attacked People) and applying stronger controls to them
   • C. Ignoring users
   • D. Using BGP
   Show answer

   Correct: B. Proofpoint's thesis: attacks target people, not just infrastructure. Identify Very Attacked People (VAPs) and risky users, then apply adaptive/stronger controls (e.g., browser isolation on their links). People-centric security prioritizes who is actually targeted.

Last updated: 2026-10-19

PFPT-TPAD practice test FAQ