Pending

Explanation: when you select the alert button in the properties of the interface at the topology tab, you achieve to main things: the action specified at the anti-spoof alert in the global properties is executed and theaction of the alert pop up command at the Global Properties gets executed too. The configuration of these action is made from the policy editor at the Global Configuration of the Checkpoint infrastructure.
Incorrect Answers
A:This is wrong, the action taken is in the Anti-Spoofing Alert field in the Global properties window is taken, not at the action field of the rule base.
B:This is only part of the answer.
C:This is only part of the answer
D:This in wrong because it includes answer A that is incorrect.

Explanation: Rule 1 is the entry to apply to our rulebase, in this rule we are including all the users defined at Chicago, giving access to any service at any destination always that the session could be authenticated. This rule is the only one that covers the needs of the questions in a 100%.
Incorrect Answers
A:Rule 2 is incorrect since you cannot have the users at the same source to the same destination, in this fashion, the traffic is local and it doesn't need to pass though the gateway. That is not agood practice.
D:Putting "ANY" on the service entry is not correct because user authentication only works with HTTP, Telnet, FTP and RLogin, not with "ANY" service.

Explanation: this is the most correct answer because we use firewalls in networks where we need security, so we secure our network from unauthorized, and with this we can control who can get in or get out of it.
Incorrect Answers
B:We don't need firewalls in a unsecured network, we need them in networks that require security.
C:We should not need to prevent authorized access, if it authorized, the traffic should go through.
D:We should not need to prevent authorized access, if it authorized, the traffic should go through.
E:A firewall is not a virus scanning engine, we have anti-virus for that matter, Firewalls are a form of packet analyzers that says if traffics go through, is redirected or is discarded at one of its interfaces, it doesn't look for virus patterns.