Fortinet Exam NSE7_EFW-7.2 Topic 5 Question 24 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam

Question #: 24
Topic #: 5

[All NSE7_EFW-7.2 Questions]

You want to improve reliability over a lossy IPSec tunnel.

Which combination of IPSec phase 1 parameters should you configure?

Afec-ingress and fec-egress

BOdpd and dpd-retryinterval

Cfragmentation and fragmentation-mtu

Dkeepalive and keylive

Show Suggested Answer

Suggested Answer: C

For improving reliability over a lossy IPSec tunnel, the fragmentation and fragmentation-mtu parameters should be configured. In scenarios where there might be issues with packet size or an unreliable network, setting the IPsec phase 1 to allow for fragmentation will enable large packets to be broken down, preventing them from being dropped due to size or poor network quality. The fragmentation-mtu specifies the size of the fragments. This is aligned with Fortinet's recommendations for handling IPsec VPN over networks with potential packet loss or size limitations.

by Yvette at Sep 15, 2024, 10:03 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annmarie

16 days ago

A) fec-ingress and fec-egress? Interesting, but I'm not sure if that's the best option. I'll have to do some research on that one.

upvoted 0 times

Golda

9 days ago

B) Odpd and dpd-retryinterval

upvoted 0 times

...

Loreen

1 months ago

D) keepalive and keylive? Really? Sounds like someone's been watching too many spy movies. Let's keep it technical, folks!

upvoted 0 times

Joye

13 days ago

B) Odpd and dpd-retryinterval are not the right parameters for this scenario. Let's stick to the technical details.

upvoted 0 times

...

Beckie

16 days ago

C) fragmentation and fragmentation-mtu could also help in improving reliability by handling packet fragmentation.

upvoted 0 times

...

Audry

21 days ago

A) fec-ingress and fec-egress are the correct parameters to improve reliability over a lossy IPSec tunnel.

upvoted 0 times

...

Melissa

1 months ago

I'm not sure, but I think C) fragmentation and fragmentation-mtu could also be a good option.

upvoted 0 times

...

Slyvia

1 months ago

Wait, 'keylive'? Is that like a new dance move or something? I'm pretty sure that's not an actual IPSec parameter.

upvoted 0 times

Jose

8 days ago

Oh, that makes more sense. 'Keepalive' is definitely an IPSec parameter.

upvoted 0 times

...

Frederick

9 days ago

I think it's supposed to be 'keepalive' instead of 'keylive'.

upvoted 0 times

...

Lilli

10 days ago

Yeah, 'keylive' doesn't sound right. It must be a typo.

upvoted 0 times

...

Glenn

11 days ago

D) keepalive and keylive

upvoted 0 times

...

Graciela

21 days ago

C) fragmentation and fragmentation-mtu

upvoted 0 times

...

Zona

23 days ago

B) Odpd and dpd-retryinterval

upvoted 0 times

...

Tina

1 months ago

A) fec-ingress and fec-egress

upvoted 0 times

...

Tamar

2 months ago

I agree with Matthew, because keepalive and keylive can help improve reliability.

upvoted 0 times

...

Matthew

2 months ago

I think the answer is D) keepalive and keylive.

upvoted 0 times

...

Jenelle

2 months ago

I think C) fragmentation and fragmentation-mtu is the way to go. Improving reliability over a lossy IPSec tunnel requires handling fragmentation, right?

upvoted 0 times