NSE 7 — Enterprise Firewall — Question 8

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

Answer options

• A. Only some IKE version 2 packets are considered fragmentable
• B. The reassembly timeout default value is 30 seconds
• C. It is performed at the IP layer
• D. The maximum number of IKE version 2 fragments is 128

Correct answer: A, C

Explanation

Option A is correct as only specific IKE version 2 packets can be fragmented. Option C is also correct since fragmentation occurs at the IP layer. Option B is incorrect because the reassembly timeout default value is not 30 seconds; it may vary. Option D is wrong since the maximum number of fragments is not limited to 128.