Examice

Exam nse7_sdw-72 All QuestionsBrowse all questions from this exam

Question 26

Refer to the exhibit.

In a dual-hub hub-and-spoke SD-WAN deployment, which is a benefit of disabling the anti-replay setting on the hubs?

It instructs the hub to skip content inspection on TCP traffic, to improve performance.

It instructs the hub to not check the ESP sequence numbers on IPsec traffic, to improve performance.

It instructs the hub to disable TCP sequence number check, which is required for TCP sessions originated from spokes to fail over back and forth between the hubs.

It instructs the hub to disable the reordering of TCP packets on behalf of the receiver, to improve performance.

Correct Answer: B

Disabling the anti-replay setting on the hubs instructs the hub to not check the ESP (Encapsulating Security Payload) sequence numbers on IPsec traffic, which improves performance. In dual-hub hub-and-spoke SD-WAN deployments, this action can enhance the efficiency of data transmission by reducing the overhead associated with sequence number verification, thereby optimizing performance.

Discussion

sugar12Option: C

c - by disabling the anti-replay setting. When you disable anti-replay, FortiGate doesn’t check sequence numbers of TCP packets

JP0421Option: C

Page: 164 on 7.2 Guide

OrioN88Option: C

100% C

nse_studentOption: C

C is ok

alejandrofern43Option: C

C is correct Page: 164 on 7.2 Guide

Tommy_SOption: C

C is Correct

KavinTOption: C

Refer to below explanation from JP0421