How you actually reduce the scope of security checks?

What do the different check flags stand for?

Check/maintain
- A check is carried out against this object
- Profile Generator creates an authorization for this object
- Default values for this authorization can be maintained
Check
- A check is carried out against this object
- Profile Generator does not create an authorization for this object
No check
- Check is disabled
Unmaintained
- Check is carried out