Explanation: Remember, we have to enable the desired authentication method in both, the user and the firewall object, in this case we use firewall 1 authentication.
Incorrect Answers
A:we don't need to stop the firewall to achieve this kind of functionally, actually we are loosing all of it.
B:its not necessary to make a restart, we could make this configuration in a dynamic way.
C:We don't need to modify the service definition, remember that user authentication has its own telnet proxy.
E:you can have existing rules, you just need to make sure that they are below of the one that makes telnet authentication for your users.

Explanation: When you create users in VPN/Firewall 1 you are storing them in a component, called the User Database. Note that the user database reside in the management station and si pushed / installed to the firewall modules when a policy is installed. See page 219 of Syngress Book "Checkpoint NG - Next Generation Security Administration".
Incorrect Answers
A:This is not the place where users are stored, this is the place where the traffic is matched to the rules inside the policies.
B:The rulebase contains the criteria for the security policy that is scanned through the inspect engine, it doesn't store the users.
D:The users aren't here, they are in the User Database, see the explanation above.
E:An inspect module is a piece of inspect code used by the inspect engine to extend the capabilities of the firewall in native form, it doesn't store the users.

Explanation: you should always place any client authentication rule above the stealth rule, the stealth rule will prevent any connection to the firewall for security purposes, the client authentication needs to make a telnet connection on port 259 TCP or an HTTP connection in port 900 TCP. So, you should always place your client authentication rules above the stealth rule or you will have your traffic dropped.
Incorrect Answers
B:The statement at the question is true, we need the stealth rule below the client authentication rule, if we don't do it this way, our authentication request will be logged or dropped depending on our Stealth rule.

Pending