Fortinet Exam NSE7_EFW-7.2 Topic 5 Question 33 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam

Question #: 33
Topic #: 5

[All NSE7_EFW-7.2 Questions]

Refer to the exhibit, which shows a partial routing table.

What two conclusions can you draw from the FortiGate output shown in the

exhibit? (Choose two.)

AFortiGate creates separate virtual interfaces for each VPN client.

Badd-route is enabled in the tunnel IPSec phase 1 configuration.

CFortiGate is not using the destination subnets of the quick mode selectors to
populate the routing table.

Dnet-device is disabled in the tunnel IPSec phase 1 configuration.

Show Suggested Answer

Suggested Answer: A, D

In IKE version 2, not all packets are fragmentable. Only certain messages within the IKE negotiation process can be fragmented. Additionally, there is a limit to the number of fragments that IKE version 2 can handle, which is 128. This is specified in the Fortinet documentation and ensures that the IKE negotiation process can proceed even in networks that have issues with large packets. The reassembly timeout and the layer at which fragmentation occurs are not specified in this context within Fortinet documentation.

by Lizette at Feb 10, 2025, 06:25 AM

Limited Time Offer

25%

14 days ago

I think the answer is B.

upvoted 0 times

...