Explanation: VPN1/FW1 resides on the top of layer 2 (DataLink) and below Network layer of the OSI model. In this place, the firewall engine can get all the packets before they get to the TCP/IP stack of the operating system, incrementing performance and improving security.
Incorrect Answers
A:VPN1/FW1 resides below the Network layer (3) of the OSI model.
B:VPN1/FW1 resides below the Network layer (3) of the OSI model.
C:VPN1/FW1 resides below the Network layer (3) of the OSI model.
D:VPN1/FW1 resides below the Network layer (3) of the OSI model.

Explanation: by default, any rule that you add to your rulebase for certain policy is enforced automatically once you push the updated policy to the enforcement modules from the management station. See "Basics of Security policy Administration" at the Checkpoint Official Courseware for CCSA.
Incorrect Answers
A:When you create a rule it is enforced as part of the security policy. See the explanation above for details.

Explanation: this is the opposite, the time specified in the session time-out box will tell the firewall how much time the users with one time passwords can make request without re authenticating to the firewall.
Incorrect Answers
A:The session time-out specifies how much time should it pass until the firewall ask for re- authentication to the users of one time passwords during their requests.

Pending