Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 0d 13h 57m 37s Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet Exam NSE7_EFW-7.2 Topic 5 Question 33 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam
Question #: 33
Topic #: 5
[All NSE7_EFW-7.2 Questions]

Refer to the exhibit, which shows a partial routing table.

What two conclusions can you draw from the FortiGate output shown in the

exhibit? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, D

In IKE version 2, not all packets are fragmentable. Only certain messages within the IKE negotiation process can be fragmented. Additionally, there is a limit to the number of fragments that IKE version 2 can handle, which is 128. This is specified in the Fortinet documentation and ensures that the IKE negotiation process can proceed even in networks that have issues with large packets. The reassembly timeout and the layer at which fragmentation occurs are not specified in this context within Fortinet documentation.


by Lizette at Feb 10, 2025, 06:25 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Bettyann
23 days ago
Hmm, 128 fragments? That's a lot. I hope they don't expect me to count them all during the exam!
upvoted 0 times
...
Glenna
24 days ago
B and C sound right to me. Though I wonder if the 30-second timeout is long enough - I'd hate to have my connection drop because of a slow network.
upvoted 0 times
Vashti
11 days ago
User 2: Yeah, I agree. It could be a problem on slower networks.
upvoted 0 times
...
Selene
13 days ago
User 1: B and C are correct. The timeout might be a bit short though.
upvoted 0 times
...
...
Phillip
1 months ago
Wait, only some packets are fragmentable? That's a bit strange. Anyway, I'm going with B and C as well.
upvoted 0 times
...
Stefania
1 months ago
I'm not sure about statement C, but I think statement D is true because there is a limit to the number of IKE version 2 fragments.
upvoted 0 times
...
Beata
1 months ago
I'm not sure about the maximum number of fragments, but I agree that it's done at the IP layer. The timeout value seems reasonable too.
upvoted 0 times
Amalia
5 days ago
D) The maximum number of IKE version 2 fragments is 128.
upvoted 0 times
...
Larae
10 days ago
B) The reassembly timeout default value is 30 seconds.
upvoted 0 times
...
Carey
16 days ago
C) It is performed at the IP layer.
upvoted 0 times
...
Filiberto
24 days ago
A) Only some IKE version 2 packets are considered fragmentable.
upvoted 0 times
...
...
Quentin
1 months ago
I think the correct answers are B and C. The reassembly timeout default value is 30 seconds, and the fragmentation is performed at the IP layer.
upvoted 0 times
Juliana
8 days ago
So, A and D are incorrect statements.
upvoted 0 times
...
Lenna
14 days ago
Fragmentation is indeed performed at the IP layer.
upvoted 0 times
...
Felicitas
16 days ago
Yes, you're right. The reassembly timeout default value is 30 seconds.
upvoted 0 times
...
Leeann
18 days ago
I think the correct answers are B and C.
upvoted 0 times
...
...
Nenita
1 months ago
I agree with you, Eliseo. I also believe statement B is true because the reassembly timeout default value is important for fragmentation.
upvoted 0 times
...
Eliseo
1 months ago
I think statement A is true because not all IKE version 2 packets can be fragmented.
upvoted 0 times
...

Save Cancel
a