Exam NSE8_812 topic 1 question 63 discussion

Actual exam question from Fortinet's NSE8_812

Question #: 63
Topic #: 1

You have configured a Site-to-Site IPsec VPN tunnel between a FortiGate and a third-party device but notice that one of the error counters on the tunnel interface keeps increasing.

Which two configuration options can resolve this problem? (Choose two.)

A. Enable Forward Error Correction (FEC) on the VPN interface for egress traffic.
B. Enable DF-bit honoring in the global settings.
C. Adjust the MTU of the physical interface to which the IPsec tunnel is bound.
D. Adjust the MTU of the IPsec interface.

Show Suggested Answer

Suggested Answer: BD 🗳️

by 4589956 at May 29, 2024, 5:55 a.m.

Comments

Submit Cancel

b4eri

6 months, 2 weeks ago

Selected Answer: BD

A can't be correct as the tunnel is to a third party device

upvoted 1 times

...

dspavvn

8 months, 2 weeks ago

Selected Answer: AD

Not sure on the missing answer. A: FEC can help reconstruct the lost data. B: the DF bit enabled would make it so if the MTU of the packets were bigger than the physical interface MTU then it would drop, so this is better to be disabled. C: Adjusting the MTU of the physical interface effects all traffic through that interface. D: Adjusting the MTU of the IPsec would allow the encrypted payload to fit into the size of the interfaces MTU, preventing the drop of packets.

upvoted 1 times

...

4589956

8 months, 2 weeks ago

original question is with choose three option + missin here an additional answer

upvoted 1 times

...