Fortinet Exam NSE7_EFW-7.2 Topic 5 Question 23 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam

Question #: 23
Topic #: 5

[All NSE7_EFW-7.2 Questions]

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

AOnly some IKE version 2 packets are considered fragmentable.

BThe reassembly timeout default value is 30 seconds.

CIt is performed at the IP layer.

DThe maximum number of IKE version 2 fragments is 128.

Show Suggested Answer

Suggested Answer: A, D

In IKE version 2, not all packets are fragmentable. Only certain messages within the IKE negotiation process can be fragmented. Additionally, there is a limit to the number of fragments that IKE version 2 can handle, which is 128. This is specified in the Fortinet documentation and ensures that the IKE negotiation process can proceed even in networks that have issues with large packets. The reassembly timeout and the layer at which fragmentation occurs are not specified in this context within Fortinet documentation.

by Lajuana at Sep 15, 2024, 09:13 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chaya

12 days ago

Ah, the IKE version 2 fragmentation question. Time to put on my thinking cap and avoid a fragmented brain!

upvoted 0 times

...

Leonida

13 days ago

I'm not sure about statement B, but I think it makes sense that there would be a timeout value for reassembly.

upvoted 0 times

...

Roselle

13 days ago

Hmm, I'm not so sure about this one. Maybe A and C? I know it's not all IKE version 2 packets that are fragmentable, and it's definitely at the IP layer.

upvoted 0 times

...