Fortinet NSE6_FWF-6.4 Exam Questions Instant Access

Question 1

Which of the following is a requirement to generate analytic reports using on-site FortiPresence deployment?

ASQL services must be running

BTwo wireless APs must be sending data

CDTLS encryption on wireless traffic must be turned off

DWireless network security must be set to open

Answer : A

https://docs.fortinet.com/document/fortipresence-vm/1.2.0/administration-guide/546812/introduction

Question 2

Refer to the exhibit.

What does the asterisk (*) symbol beside the channel mean?

AIndicates channels that can be used only when Radio Resource Provisioning is enabled

BIndicates channels that cannot be used because of regulatory channel restrictions

CIndicates channels that will be scanned by the Wireless Intrusion Detection System (WIDS)

DIndicates channels that are subject to dynamic frequency selection (DFS) regulations

Answer : D

This frequencies are also used by other licensed applications, wireless LANs have to use a specific method to gain access to certain higher frequencies and this method is known as DFS.

Question 3

Which two phases are part of the process to plan a wireless design project? (Choose two.)

AProject information phase

BHardware selection phase

CSite survey phase

DInstallation phase

Answer : A, C

According to the web search results, the project information phase and the site survey phase are part of the process to plan a wireless design project. The project information phase involves defining the project scope, objectives, requirements, deliverables, and stakeholders.It also includes creating a project plan, a risk management plan, a communication plan, and a budget.1The site survey phase involves conducting a physical inspection of the site where the wireless network will be deployed, measuring the signal strength and interference levels, identifying the optimal locations for the access points and antennas, and validating the network performance and coverage.2The hardware selection phase and the installation phase are not part of the planning process, but rather part of the implementation process.The hardware selection phase involves choosing the appropriate wireless devices, such as access points, routers, switches, controllers, and cables, based on the network design and specifications.3The installation phase involves installing, configuring, testing, and documenting the wireless network components according to the project plan and best practices.3Reference:Wireless Device Network Planning and Design - Emerson,Telecommunications and Implementation Project Management - BICSI,Project Planning | Wireless Design Services | Digi International

Question 4

What is the first discovery method used by FortiAP to locate the FortiGate wireless controller in the default configuration?

ADHCP

BStatic

CBroadcast

DMulticast

Answer : B

According to the web search results, the first discovery method used by FortiAP to locate the FortiGate wireless controller in the default configuration is static. This means that the FortiAP sends discovery requests to a preconfigured IP address that the controller owns. This is useful if the FortiAP and the controller are not in the same subnet and other discovery methods will not work. The other discovery methods are used in sequence if the static method fails or is not configured. Reference:Advanced WiFi controller discovery | FortiAP / FortiWiFi 7.4.0

Question 5

How are wireless clients assigned to a dynamic VLAN configured for hash mode?

AUsing the current number of wireless clients connected to the SSID and the number of IPs available in the least busy VLAN

BUsing the current number of wireless clients connected to the SSID and the number of clients allocated to each of the VLANs

CUsing the current number of wireless clients connected to the SSID and the number of VLANs available in the pool

DUsing the current number of wireless clients connected to the SSID and the group the FortiAP is a member of

Answer : C

VLAN from the VLAN pool based on a hash of the current number of SSID clients and the number of entries in the VLAN pool.

Question 6

How can you find upstream and downstream link rates of a wireless client using FortiGate?

AOn the FortiAP CLI, using the cw_diag ksta command

BOn the FortiAP CLI, using the cw_diag -d sta command

COn the FortiGate GUI, using the WiFi Client monitor

DOn the FortiGate CLI, using the diag wireless-controller wlac -d Sta command

Answer : C

The WiFi Client monitor on the FortiGate GUI shows the upstream and downstream link rates of a wireless client, along with other information such as MAC address, SSID, IP address, signal strength, and connection time. The link rates indicate the maximum data rates that the client can achieve in both directions. Reference:Secure Wireless LAN Course Description, page 7; [FortiOS 6.4.0 Handbook - Wireless Controller], page 37.

Question 7

As standard best practice, which configuration should be performed before configuring FortiAPs using a FortiGate wireless controller?

ACreate wireless LAN specific policies

BPreauthorize APs

CCreate a custom AP profile

DSet the wireless controller country setting

Answer : D

Setting the wireless controller country setting is a standard best practice that should be performed before configuring FortiAPs using a FortiGate wireless controller. The country setting determines the regulatory domain and the allowed channels and power levels for the wireless network. The country setting must match the physical location of the FortiAPs to comply with local regulations and avoid interference issues. Reference:Secure Wireless LAN Course Description, page 5;FortiOS 6.4.0 Handbook - Wireless Controller, page 24.

Fortinet NSE 6 - Secure Wireless LAN 6.4 NSE6_FWF-6.4 Exam Questions