Exam FCSS_EFW_AD-7.4 topic 1 question 20 discussion

Actual exam question from Fortinet's FCSS_EFW_AD-7.4

Question #: 20
Topic #: 1

A company's users on an IPsec VPN between FortiGate A and B have experienced intermittent issues since implementing VXLAN. The administrator suspects that packets exceeding the 1500-byte default MTU are causing the problems.
In which situation would adjusting the interface’s maximum MTU value help resolve issues caused by protocols that add extra headers to IP packets?

A. Adjust the MTU on interfaces only if FortiGate has the FortiGuard enterprise bundle, which allows MTU modification.
B. Adjust the MTU on interfaces in all FortiGate devices that support the latest family of Fortinet SPUs: NP7, CP9 and SP5.
C. Adjust the MTU on interfaces in controlled environments where all devices along the path allow MTU interface changes.
D. Adjust the MTU on interfaces only in wired connections like PPPoE, optic fiber, and ethernet cable.

Show Suggested Answer

Suggested Answer: C 🗳️

by Tweefo at March 26, 2025, 3:49 p.m.

Comments

Submit Cancel

Tweefo

1 week ago

Selected Answer: C

I'd go for C. VXLAN adds approximately 50 bytes of overhead due to encapsulation with new Ethernet, IP, UDP, and VXLAN headers. This can cause packets to exceed the standard 1500-byte MTU, leading to fragmentation or drops if not adjusted. Source : Study Guide ~P206

upvoted 1 times

...

Exam FCSS_EFW_AD-7.4 All Questions

View all questions & answers for the FCSS_EFW_AD-7.4 exam

Exam FCSS_EFW_AD-7.4 topic 1 question 20 discussion

Comments

Tweefo

SY0-701