The correct answer is A. Explicit rules are the visible rules created by the administrator in the Security Policy rulebase. They define matching conditions such as source, destination, VPN, services
/applications, content, action, tracking, installation targets, and time. Option B is inaccurate because the Security Management Server stores and manages the policy database, but it does not independently
"create" administrator intent rules. Option C is wrong because the Security Gateway enforces installed policy; it does not author the rulebase. Option D confuses explicit rules with implied rules or global settings. In Check Point terminology, explicit rules are administrator-defined, whereas implied rules are automatically generated from global properties or blade requirements to permit essential control connections, management traffic, or infrastructure behavior. The distinction is critical in policy troubleshooting because explicit rules are visible in the rulebase, while implied rules may be viewed through policy actions and can affect enforcement before or near the rulebase depending on configuration. Reference topics: Explicit Rules, Implied Rules, Security Policy Management, Access Control rulebase.