NSE 7 — Enterprise Firewall — Question 60

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

Answer options

• A. IKEv2 fragmentation is performed at IP layer.
• B. The reassembly timeout default value is 30 seconds.
• C. Only some IKE version 2 packets are considered fragmentable.
• D. The maximum number of IKE version 2 fragments are 64.

Correct answer: C, D

Explanation

The correct answers are C and D because only specific IKEv2 packets are capable of being fragmented, and the maximum number of fragments that can be produced is indeed 64. Options A and B are incorrect as they misrepresent the details about the fragmentation process and the reassembly timeout value.