Explanation: "Hybrid Authentication for IKE" is just that, it allows you to use existing authentication servers supported by VPN1/FW1 as shared secrets for IKE. This is supported since FW 1 4.1 SP1 and SecuRemote 4153. See Page 382 of "Essential Checkpoint Firewall 1" from Dameon Welch.
Incorrect AnswersA:This is not the most complete answer, the most complete is answer
"D".
B:This is not a kind of authentication server, its an encryption algorithm.
C:This is not the most complete answer, the most complete is answer "D".
E:This is not the most complete answer, the most complete is answer "D".

Explanation: once you disable a rule, it becomes ineffective in your policy, you don't have to verify the policy to make the disabling effective, once you want to push the policy to the enforcement modules again the disabled rule is not enforced. To disable a rule just right click the rule number and select "Disable".
Incorrect Answers
A:You don't have to verify your policy to make a disabling action take effect over your policy, this is not necessary. See page 215 from the Syngress Book "Checkpoint NG - Next Generation Security Administration).

Explanation: when you have firewall objects defined in the policy editor you can select between 2 options in the general tab of the object at the "Object Management" setting. The options are "Managed by another management server (External)" or "Managed by this management server (Internal)". If you select our first option (External) we will not be able to install any policy on this firewall, because our management server does not figure as the master for the object.
Incorrect AnswersA:Our need cant be addressed by a Master file. You can have a review to the Checkpoint documentation with the functions of the Masters file.
B:This is not a licenses problem, the management station cannot see the firewall as an option.
C:We don't need to reboot the firewall to allow it to receive policy updates.
D:This is not a possible cause.