FCSS – Enterprise Firewall Administrator 7.4 — Question 40

How will configuring set tcp-mss-sender and set tcp-mss-receiver in a firewall policy affect the size and handling of TCP packets in the network?

Answer options

• A. The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.
• B. Applying commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.
• C. The administrator must consider the payload size of the packet and the size of the IP header to configure a correct value in the firewall policy.
• D. The TCP packet modifies the packet size only if the size of the packet is less than the one the administrator configured in the firewall policy.

Correct answer: B

Explanation

The correct answer, B, is accurate because it describes how the commands restrict the maximum payload size that a device can manage in a TCP segment. Option A is incorrect because it misinterprets the role of maximum segment size in allowing or denying packets. Option C, while relevant, does not directly address the effect of the commands on packet size. Option D incorrectly states that the modification occurs only for packets smaller than the configured size, which is misleading.