StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 431 of 440 · medium

Small pings succeed through a VPN, but larger TCP transfers stall. Which hypothesis should be tested with packet evidence before changing proposals?

Choose the single best answer.

  1. A.The selector subnet mask automatically changes with file size.
  2. B.AH is required for large TCP transfers on FortiOS.
  3. C.MTU/fragmentation or TCP MSS constraints on the encapsulated path.
  4. D.Every successful small ping proves all packet sizes work.
Show the answer and explanation

✓ Correct answer

  • MTU/fragmentation or TCP MSS constraints on the encapsulated path.

Encapsulation reduces usable path size and can expose fragmentation/MSS problems. Small-packet success is not a large-transfer test. Selectors do not resize by file, and unsupported AH is not the solution.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.