The two types of NAT supported by the Security Gateway are hide NAT and static NAT. Hide NAT translates many source IP addresses into one IP address, usually the external interface of the gateway.Static NAT translates one source IP address into another IP address, usually a public IP address34. The other options are not valid types of NAT. Network Address Translation (NAT),Check Point CCSA - R81: Practice Test & Explanation

Capsule Connect provides a Layer 3 VPN that allows users to access corporate resources securely from their mobile devices2.Capsule Workspace provides a secure container on the mobile device that isolates business data and applications from personal data and applications3.Capsule Workspace also provides a desktop with usable applications such as email, calendar, contacts, documents, and web applications3. Check Point Capsule Connect,Check Point Capsule Workspace

The correct answer is B. The R82 Logging and Monitoring Administration Guide describes log storage disk-management behavior where old log and index files can be deleted when available disk space falls below the configured threshold. The search extract specifically identifies the default threshold behavior: when disk space is below 5000 MBytes, old files begin to be deleted. Option A is incomplete because alerts can be configured for disk thresholds, but the question asks what happens at the default
5000 MB deletion threshold. Option C is wrong because logging does not immediately stop at that threshold; stopping logging is controlled by a different lower threshold. Option D is unsupported because the default response is disk maintenance by deleting older files, not running a script.
Operationally, this prevents the log partition from filling completely while retaining as much recent searchable logging as possible. Reference topics: Log Server disk management, log storage thresholds, deleting old log files, Logging and Monitoring.

The correct answer is A. Trusted Clients, also called GUI Clients in management configuration, restrict which client IP addresses, hostnames, ranges, or networks can connect to the Security Management Server using SmartConsole. This is a management-plane access-control mechanism. It does not manage end-user accounts, configure routing/network settings, or install policy by itself. Option B is wrong because user and administrator account management is handled through separate administrator/user management areas. Option C is wrong because network settings are handled through Gaia or object
/topology configuration, not the Trusted Clients feature. Option D is wrong because policy installation is performed from SmartConsole after rules are configured and published; Trusted Clients only controls who can connect to the management server with SmartConsole. From a security perspective, Trusted Clients are valuable because even a valid administrator credential should not be usable from arbitrary systems if management access is properly restricted. Reference topics: Trusted Clients, GUI Clients, SmartConsole management access, Security Management Server hardening.