Pending

Explanation: when you select only one firewall object in the "install on field" of a rule, that rule is enforced only on that firewall object. In case there are other firewalls referred in the whole policy, they will have the complete policy installed (with all the rules in the rulebase), but they will not enforce the rules that are not relevant to them. See page 175 of Syngress Book "Checkpoint NG - Next Generation Security Administration".
Incorrect Answers
A:When you select only one firewall object on the "install on" field of a rule, that rule is enforced only in that firewall after the policy installation.

Pending

Explanation: The client authentication will not be performed because rule 1 states that every packet that is destined to fw.chicago.com will be dropped (without creating a log entry) for any kind of traffic, the firewall will not accept any connection to it, therefore the authentication request will be dropped either at port 259 for Telnet or port 900 with HTTP.
Incorrect Answers
B:This rule provide the authentication.
C:This rule is not related to FTP.
D:This is the clean-up rule, perfectly correct at the end of the rule base.

Pending