Exam FCSS_EFW_AD-7.4 topic 1 question 55 discussion

Actual exam question from Fortinet's FCSS_EFW_AD-7.4

Question #: 55
Topic #: 1

Refer to the exhibits.

The configuration of a user's Windows PC, which has a default MTU of 1500 bytes, along with FortiGate interfaces set to an MTU of 1000 bytes, and the results of PC1 pinging server 172.16.0.254 are shown.
Why is the user in Windows PC1 unable to ping server 172.16.0.254 and is seeing the message: Packet needs to be fragmented but DF set?

A. Option ip.flags.mf must be set to enable on FortiGate. The user has to adjust the ping MTU to 1000 to succeed.
B. Fragmented packets must be encrypted. To connect any application successfully, the user must install the Fortinet_CA certificate in the Microsoft Management Console.
C. FortiGate honors the do not fragment bit and the packets are dropped. The user has to adjust the ping MTU to 972 to succeed.
D. The user must trigger different traffic because path MTU discovery techniques do not recognize ICMP payloads.

Show Suggested Answer

Suggested Answer: C 🗳️

by acaa928 at March 31, 2025, 1:08 p.m.

Comments

Submit Cancel

Tweefo

2 weeks, 5 days ago

Selected Answer: C

C is correct

upvoted 1 times

...

acaa928

1 month ago

Selected Answer: C

Pag. 204

upvoted 1 times

...

Exam FCSS_EFW_AD-7.4 All Questions

View all questions & answers for the FCSS_EFW_AD-7.4 exam

Exam FCSS_EFW_AD-7.4 topic 1 question 55 discussion

Comments

Tweefo

acaa928

SY0-701