Which two statements about IKE version 2 fragmentation are true? (Choose two.)

• A.The maximum number of IKE version 2 fragments are 64.
• B.IKEv2 fragmentation is performed at IP layer.
• C.The reassembly timeout default value is 30 seconds.
• D.Only some IKE version 2 packets are considered fragmentable.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows the output of a diagnose command.

What can be concluded about the debug output in this scenario?

• A.There is a natural correlation between the value in the Packets field and the value in the Weight field.
• B.Servers with a negative TZ value are less preferred for rating requests.
• C.The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
• D.FortiGate used 64.26.151.37 as the initial server to validate its contract.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about the Security Fabric are true? (Choose two.)

• A.All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.
• B.Only the root FortiGate collects network information and forwards it to FortiAnalyzer.
• C.FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.
• D.Branch FortiGate devices must be configured first.

Comment: *

Name: *

Email: *

Verification: *

Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.Local BGP peer has not received an OpenConfirm from 10.200.3.1.
• B.BGP state of the peer 10.125.0.60 is Established.
• C.The local BGP peer has received a total of 3 BGP prefixes.
• D.BGP peer 10.200.3.1 has never been down since the BGP counters were cleared.

Comment: *

Name: *

Email: *

Verification: *

How will configuring set tcp-mss-sender and set tcp-mss-receiver in a firewall policy affect the size and handling of TCP packets in the network?

• A.The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.
• B.Applying commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.
• C.The administrator must consider the payload size of the packet and the size of the IP header to configure a correct value in the firewall policy.
• D.The TCP packet modifies the packet size only if the size of the packet is less than the one the administrator configured in the firewall policy.

Comment: *

Name: *

Email: *

Verification: *