View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam


Question 45 Discussion

Users in your organization who are on an IPsec VPN between FortiGate A and FortiGate B are experiencing intermittent issues since implementing VXLAN. You suspect that packets exceeding the 1500-byte default maximum transmission unit (MTU) are causing the problems. How would you adjust the interface MTU value help resolve issues caused by protocols that add extra headers to IP packets? (Choose one answer)

  • A. Adjust the MTU on interfaces only in wired connections like Point-to-Point Protocol over Ethernet (PPPoE), optic fiber, and Ethernet cable.
  • B. Adjust the MTU on interfaces in controlled environments where all devices along the path allow MTU interface changes.
  • C. Adjust the MTU on interfaces only on FortiGate A and FortiGate B.
  • D. Adjust the MTU on all FortiGate interfaces after adjusting the TCP maximum segment size (MSS).
Correct Answer: B

Brave-Dump Clients Votes

B 100%

Comments



Adam 2026-01-19 12:59:28

Selected Answers: B


From Study Guide:
Changing MTU sizes on internet-facing interfaces is nearly impossible, as control is limited beyond that point. However, experts can modify the MTU in controlled environments, such as internal networks or data centers.
In external communications, such as those across the internet, ensuring a higher MTU from end to end is generally not feasible.