Explanation: Session authentication does not result in any additional connection to the firewall, you can use one connection and use it for the rest of the session for any service, also remember that session authentication is controlled by the Session authentication agent. See the online product documentation for more info.
Incorrect Answers
B:User authentication needs additional connection because it manages a proxy for each service.
C:Client authentication also requires additional connection because you have to connect to the firewall with HTTP or Telnet and enable the service for your use through the gateway.
D:This is not a valid authentication method.
E:This answer is wrong because answer A is correct, session authentication doesn't need additional connections to the firewall.

Explanation: as stated in the Checkpoint Official Website, the User interface of the NG suite is composed of 3 components:
The Security Policy Editor (Where you create the rulebase entries).
The Visual Policy Editor (That let you see a graphical view of you Checkpoint Deployment).
The Object Tree (Where you can find the created objects of your Checkpoint implementation).
Incorrect Answers
B:Those are components of the infrastructure, not from the user interface.
C:The inspection module is not a part of the user interface, it's the part of code installed on the firewall that makes the actual inspection.
D:The security server is not part of the interface, and there is not such a thing like System GUI.
E:Those are components of the infrastructure, not of the Interface.

Explanation: this is the best practice, you have to check both, the properties of the user, to see that the correct authentication has been selected & the settings are correct and also the authentication properties of the firewall object to see if that authentication method is enabled.
Incorrect Answers
B:we are not talking about encryption, only authentication, the question does not talk about a user performing encryption of traffic through any rule.
C:this is wrong because this option is not mandatory to achieve a successful authentication process.
D:You don't have to check client authentication, the question clearly talks only about user authentication.
E:this is not an available option for this issue.