NSE 7 — Enterprise Firewall — Question 2

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

Answer options

• A. fec-ingress and fsc-egrsss
• B. dpd and dpd-retryinterval
• C. fragmentation and fragmentation-mtu
• D. keepalive and keylive

Correct answer: A

Explanation

The correct answer is A, as fec-ingress and fsc-egrsss are specifically designed to improve reliability in lossy environments by providing forward error correction. The other options, while relevant for various aspects of IPSec, do not directly address reliability improvements over a lossy tunnel.