Explanation: when you map a routable address with an external one, you will get the message "rule x conflicts with rule y" this is because of the behavior of the Checkpoint firewall suite in relation with the limitations of Static NAT, this behavior will make your policy verification and installation fail.
Incorrect Answers
B:As stated in the explanation above, you can't make this configuration because your policy verification will fail, and you will get the error message, this error makes this answer wrong.

Explanation: if you want to prevent an UDP mapping from loosing its port you have the
"Fwx_udp_time-out", you just need to extend the value, its in seconds, check the product online help .
Incorrect Answers
A:this is not a valid variable to achieve this objective.
B:this is not a valid variable to achieve this objective.
C:this is not a valid variable to achieve this objective.
E:this is not a valid variable to achieve this objective.

Explanation: when an UDP packets enters to the Inspect engine inside the firewall, the database that contains the pending connections is reviewed and the packet is delivered if its a reply to a request, we know this because there is an entry expecting the reply in the pending connections database, this is the first case. The second case that allows the deliver of the UDP packet is if it is allowed by the rulebase, for example, a rule that allows DNS Query traffic through port 53 UDP.
Incorrect Answers
A:A request cannot pass the firewall unless there is a rulebase permitting that service.
B:This is only part of the correct answer. This is only 1 of the 2 cases.
C:Source routed request are not allowed unless there is a rule permitting it.
D:This is only part of the correct answer. This is only 1 of the 2 cases.