Fortinet NSE6_FWF-6.4 Exam Questions Instant Access

Question 1

Six APs are located in a remotely based branch office and are managed by a centrally hosted FortiGate. Multiple wireless users frequently connect and roam between the APs in the remote office.

The network they connect to, is secured with WPA2-PSK. As currently configured, the WAN connection between the branch office and the centrally hosted FortiGate is unreliable.

Which configuration would enable the most reliable wireless connectivity for the remote clients?

AConfigure a tunnel mode wireless network and enable split tunneling to the local network

BConfigure a bridge mode wireless network and enable the Local standalone configuration option

CConfigure a bridge mode wireless network and enable the Local authentication configuration option

DInstall supported FortiAP and configure a bridge mode wireless network

Answer : B

Look for ''Continued FortiAP operation when WiFi controller connection is down'' im the link here: https://docs.fortinet.com/document/fortiap/7.0.4/fortiwifi-and-fortiap-configuration-guide/442078/how-to-configure-a-fortiap-local-bridge-private-cloud-managed-ap

Question 2

Which two roles does FortiPresence analytics assist in generating presence reports? (Choose two.)

AGathering details about on site visitors

BPredicting the number of guest users visiting on-site

CComparing current data with historical records

DReporting potential threats by guests on site

Answer : A, C

FortiPresence analytics is a cloud-based service that provides location analytics and customer engagement tools for wireless networks. FortiPresence analytics assists in generating presence reports by gathering details about on-site visitors, such as their dwell time, frequency, loyalty, and demographics. FortiPresence analytics also assists in comparing current data with historical records, such as trends, patterns, and anomalies. Reference: [FortiPresence Data Sheet], page 1;FortiOS 6.4.0 Handbook - Wireless Controller, page 9.

Question 3

A tunnel mode SSID is configured on a FortiGate wireless controller.

Which task must be completed before the SSID can be used?

AThe new network must be manually assigned to a FortiAP profile.

BThe wireless network interface must be assigned a Layer 3 address.

CSecurity Fabric and HTTPS must be enabled on the wireless network interface.

DThe wireless network to Internet firewall policy must be configured.

Answer : B

The wireless network interface must be assigned a Layer 3 address because it acts as the gateway for the tunnel mode SSID traffic. The FortiGate wireless controller uses this interface to communicate with the FortiAPs and the wireless clients. Without a valid IP address, the tunnel mode SSID cannot function properly. Reference:Secure Wireless LAN Course Description, page 5; [FortiOS 6.4.0 Handbook - Wireless Controller], page 24.

Question 4

You are investigating a wireless performance issue and you are trying to audit the neighboring APs in the PF environment. You review the Rogue APs widget on the GUI but it is empty, despite the known presence of other APs.

Which configuration change will allow neighboring APs to be successfully detected?

AEnable Locate WiFi clients when not connected in the relevant AP profiles.

BEnable Monitor channel utilization on the relevant AP profiles.

CEnsure that all allowed channels are enabled for the AP radios.

DEnable Radio resource provisioning on the relevant AP profiles.

Answer : D

The ARRP (Automatic Radio Resource Provisioning) profile improves upon DARRP (Distributed Automatic Radio Resource Provisioning) by allowing more factors to be considered to optimize channel selection among FortiAPs. DARRP uses the neighbor APs channels and signal strength collected from the background scan for channel selection.

Question 5

How can you find upstream and downstream link rates of a wireless client using FortiGate?

AOn the FortiAP CLI, using the cw_diag ksta command

BOn the FortiAP CLI, using the cw_diag -d sta command

COn the FortiGate GUI, using the WiFi Client monitor

DOn the FortiGate CLI, using the diag wireless-controller wlac -d Sta command

Answer : C

The WiFi Client monitor on the FortiGate GUI shows the upstream and downstream link rates of a wireless client, along with other information such as MAC address, SSID, IP address, signal strength, and connection time. The link rates indicate the maximum data rates that the client can achieve in both directions. Reference:Secure Wireless LAN Course Description, page 7; [FortiOS 6.4.0 Handbook - Wireless Controller], page 37.

Question 6

What type of design model does FortiPlanner use in wireless design project?

AArchitectural model

BPredictive model

CAnalytical model

DIntegration model

Answer : B

FortiPlanner is a wireless network planning and deployment tool that helps to design and optimize wireless networks based on various parameters, such as floor plans, AP models, coverage areas, and client density. FortiPlanner uses a predictive model in wireless design projects, which means that it estimates the wireless coverage and performance based on mathematical calculations and simulations, without requiring any physical measurements or site surveys. Reference:FortiOS 6.4.0 Handbook - Wireless Controller, page 5; [FortiPlanner User Guide], page 9.

Question 7

A tunnel mode wireless network is configured on a FortiGate wireless controller.

Which task must be completed before the wireless network can be used?

AThe wireless network interface must be assigned a Layer 3 address

BSecurity Fabric and HTTPS must be enabled on the wireless network interface

CThe wireless network to Internet firewall policy must be configured

DThe new network must be manually assigned to a FortiAP profile.

Answer : C

A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.

Fortinet NSE 6 - Secure Wireless LAN 6.4 NSE6_FWF-6.4 Exam Questions