ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 13 - NSE7_EFW-7.2 discussion

Report
Export

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

A.
Only some IKE version 2 packets are considered fragmentable.
Answers
A.
Only some IKE version 2 packets are considered fragmentable.
B.
The reassembly timeout default value is 30 seconds.
Answers
B.
The reassembly timeout default value is 30 seconds.
C.
It is performed at the IP layer.
Answers
C.
It is performed at the IP layer.
D.
The maximum number of IKE version 2 fragments is 128.
Answers
D.
The maximum number of IKE version 2 fragments is 128.
Suggested answer: A, D

Explanation:

In IKE version 2, not all packets are fragmentable. Only certain messages within the IKE negotiation process can be fragmented. Additionally, there is a limit to the number of fragments that IKE version 2 can handle, which is 128. This is specified in the Fortinet documentation and ensures that the IKE negotiation process can proceed even in networks that have issues with large packets. The reassembly timeout and the layer at which fragmentation occurs are not specified in this context within Fortinet documentation.

asked 18/09/2024
Shahir Kazmi
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first