Explanation: you can use the command "cp unload all all" to discard any policy installed in the gateway module, with this, you can reset the communication and correct the rulebase in your policy so you don't lock out the communication between the firewall and the management module.
Incorrect AnswersA:this is not a valid command to resolve this communication problem, you have to unload the current installed policy.
B:this is not a valid option.
C:This will stop the checkpoint applications running, this answer is wrong because we need to unload a policy, and also, we need our applications running to make this.
E:This will start checkpoint applications, this answer is wrong because we need to unload a policy that is corrupting communication, we don't need to start services.

Explanation: since we want to scan e-mail and check for viruses, all we need is a product that check for certain virus fingerprints, this products is the OPSEC certified Application and we link it with the firewall module with CVP (Content Vectoring Protocol). The most common in enterprise environments is to have asecond server with a crossover cable to the firewall running this virus checking application, this is also a best practice.
Incorrect Answers
A:UFP (URI Filtering Protocol) is not used for Virus scanning, it is usually for Content Management with applications like WebSense to restrict access to some URI's (URL's).
C:We don't need both of them, we can provide the functionality only with CVP.
D:We don't need UFP for this.
E:This is not a functionality provided by default you need to use an OPSEC application connected by Content Vectoring Protocol.

Explanation: Rule 1 is the appropriate rule in here because since we want the managers to access from any location we have the "@any" at the end of the source with an user authentication action that is the most appropriate authentication method because the local managers group wants to make FTP connections and User authentication provides advanced proxy services for FTP. It also supports HTTP, Telnet and Rlogin.
Incorrect Answers
B:Rule 2 is incorrect because we want the managers to access from anywhere.
C:Rule 3 is incorrect because Session authentication does not provide the advanced capabilities of User authentication in the case of the FTP service D:Rule 4 is incorrect because we want the managers to access from anywhere.
E:This is incorrect because answer A provide the desired results.

Pending