Fortinet NSE6_FWF-6.4 Exam Practice Test Instant Access

Question 1

Refer to the exhibits.

Exhibit A

Exhibit B

A wireless network has been created to support a group of users in a specific area of a building. The wireless network is configured but users are unable to connect to it. The exhibits show the relevant controller configuration for the APs and the wireless network.

Which two configuration changes will resolve the issue? (Choose two.)

AFor both interfaces in the wtp-profile, configure set vaps to be ''Authors''

BDisable intra-vap-privacy for the Authors vap-wireless network

CFor both interfaces in the wtp-profile, configure vap-all to be manual

DIncrease the transmission power of the AP radio interfaces

Answer : A, C

The configuration changes that will resolve the issue are to configure set vaps to be ''Authors'' for both interfaces in the wtp-profile, and to configure vap-all to be manual for both interfaces in the wtp-profile. This is because the current configuration does not assign any VAPs to the AP interfaces, which means that no wireless networks are broadcasted by the APs. The vap-all setting determines whether all VAPs are assigned to an interface or not, and the vaps setting specifies which VAPs are assigned to an interface. By setting vap-all to manual and vaps to ''Authors'', the APs will only broadcast the Authors wireless network on both interfaces. Disabling intra-vap-privacy for the Authors vap-wireless network will not help, as it only affects the communication between clients on the same SSID, not their connection to the AP. Increasing the transmission power of the AP radio interfaces will not help, as it only affects the signal strength and coverage of the APs, not their broadcasting of wireless networks. Reference:wireless-controller vap | FortiGate / FortiOS 6.4.0,Technical Note: How to configure intra-SSID privacy

Question 2

How are wireless clients assigned to a dynamic VLAN configured for hash mode?

AUsing the current number of wireless clients connected to the SSID and the number of IPs available in the least busy VLAN

BUsing the current number of wireless clients connected to the SSID and the number of clients allocated to each of the VLANs

CUsing the current number of wireless clients connected to the SSID and the number of VLANs available in the pool

DUsing the current number of wireless clients connected to the SSID and the group the FortiAP is a member of

Answer : C

VLAN from the VLAN pool based on a hash of the current number of SSID clients and the number of entries in the VLAN pool.

Question 3

You are investigating a wireless performance issue and you are trying to audit the neighboring APs in the PF environment. You review the Rogue APs widget on the GUI but it is empty, despite the known presence of other APs.

Which configuration change will allow neighboring APs to be successfully detected?

AEnable Locate WiFi clients when not connected in the relevant AP profiles.

BEnable Monitor channel utilization on the relevant AP profiles.

CEnsure that all allowed channels are enabled for the AP radios.

DEnable Radio resource provisioning on the relevant AP profiles.

Answer : D

The ARRP (Automatic Radio Resource Provisioning) profile improves upon DARRP (Distributed Automatic Radio Resource Provisioning) by allowing more factors to be considered to optimize channel selection among FortiAPs. DARRP uses the neighbor APs channels and signal strength collected from the background scan for channel selection.

Question 4

Which administrative access method must be enabled on a FortiGate interface to allow APs to connect and function?

ASecurity Fabric Connection

BSSH

CHTTPS

DFortiTelemetry

Answer : A

Question 5

How can you find upstream and downstream link rates of a wireless client using FortiGate?

AOn the FortiAP CLI, using the cw_diag ksta command

BOn the FortiAP CLI, using the cw_diag -d sta command

COn the FortiGate GUI, using the WiFi Client monitor

DOn the FortiGate CLI, using the diag wireless-controller wlac -d Sta command

Answer : C

The WiFi Client monitor on the FortiGate GUI shows the upstream and downstream link rates of a wireless client, along with other information such as MAC address, SSID, IP address, signal strength, and connection time. The link rates indicate the maximum data rates that the client can achieve in both directions. Reference:Secure Wireless LAN Course Description, page 7; [FortiOS 6.4.0 Handbook - Wireless Controller], page 37.

Question 6

Which two statements about background rogue scanning are correct? (Choose two.)

AA dedicated radio configured for background scanning can support the connection of wireless clients

BWhen detecting rogue APs, a dedicated radio configured for background scanning can suppress the rogue AP

CBackground rogue scanning requires DARRP to be enabled on the AP instance

DA dedicated radio configured for background scanning can detect rogue devices on all other channels in its configured frequency band

Answer : A, C

Question 7

Which of the following is a requirement to generate analytic reports using on-site FortiPresence deployment?

ASQL services must be running

BTwo wireless APs must be sending data

CDTLS encryption on wireless traffic must be turned off

DWireless network security must be set to open

Answer : A

https://docs.fortinet.com/document/fortipresence-vm/1.2.0/administration-guide/546812/introduction

Fortinet NSE 6 - Secure Wireless LAN 6.4 NSE6_FWF-6.4 Exam Practice Test