Fortinet NSE6_FWF-6.4 Exam Practice Test Instant Access

Question 1

When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)

AAn X.509 certificate to authenticate the client

BAn X.509 to authenticate the authentication server

CA WPA2 or WPA3 personal wireless network

DA WPA2 or WPA3 Enterprise wireless network

Answer : B, D

Question 2

Which statement describes FortiPresence location map functionality?

AProvides real-time insight into user movements

BProvides real-time insight into user online activity

CProvides real-time insight into user purchase activity

DProvides real-time insight into user usage stats

Answer : A

(Page 88 Study Guide) 'FortiPresence provides data and analytics based on demographic segmentation and visitor movement between areas'

According to the web search results, FortiPresence location map functionality provides real-time insight into user movements. It uses the location data from the Fortinet access points to detect each visitor's smartphone Wi-Fi signal and track their location and behavior within the site. It also provides data visualization in a customizable format, such as heat maps and animated flows, to show the visitor traffic and movement patterns. This geographical data analysis can help improve visitor experiences and business outcomes. Reference:Location Analytics | FortiPresence 22.4.0 - Fortinet Documentation,FortiPresence Data Sheet

Question 3

As standard best practice, which configuration should be performed before configuring FortiAPs using a FortiGate wireless controller?

ACreate wireless LAN specific policies

BPreauthorize APs

CCreate a custom AP profile

DSet the wireless controller country setting

Answer : D

Setting the wireless controller country setting is a standard best practice that should be performed before configuring FortiAPs using a FortiGate wireless controller. The country setting determines the regulatory domain and the allowed channels and power levels for the wireless network. The country setting must match the physical location of the FortiAPs to comply with local regulations and avoid interference issues. Reference:Secure Wireless LAN Course Description, page 5;FortiOS 6.4.0 Handbook - Wireless Controller, page 24.

Question 4

Which two roles does FortiPresence analytics assist in generating presence reports? (Choose two.)

AGathering details about on site visitors

BPredicting the number of guest users visiting on-site

CComparing current data with historical records

DReporting potential threats by guests on site

Answer : A, C

FortiPresence analytics is a cloud-based service that provides location analytics and customer engagement tools for wireless networks. FortiPresence analytics assists in generating presence reports by gathering details about on-site visitors, such as their dwell time, frequency, loyalty, and demographics. FortiPresence analytics also assists in comparing current data with historical records, such as trends, patterns, and anomalies. Reference: [FortiPresence Data Sheet], page 1;FortiOS 6.4.0 Handbook - Wireless Controller, page 9.

Question 5

How can you find upstream and downstream link rates of a wireless client using FortiGate?

AOn the FortiAP CLI, using the cw_diag ksta command

BOn the FortiAP CLI, using the cw_diag -d sta command

COn the FortiGate GUI, using the WiFi Client monitor

DOn the FortiGate CLI, using the diag wireless-controller wlac -d Sta command

Answer : C

The WiFi Client monitor on the FortiGate GUI shows the upstream and downstream link rates of a wireless client, along with other information such as MAC address, SSID, IP address, signal strength, and connection time. The link rates indicate the maximum data rates that the client can achieve in both directions. Reference:Secure Wireless LAN Course Description, page 7; [FortiOS 6.4.0 Handbook - Wireless Controller], page 37.

Question 6

Which two statements about distributed automatic radio resource provisioning (DARRP) are correct? (Choose two.)

ADARRP performs continuous spectrum analysis to detect sources of interference. It uses this information to allow the AP to select the optimum channel.

BDARRP performs measurements of the number of BSSIDs and their signal strength (RSSI). The controller then uses this information to select the optimum channel for the AP.

CDARRP measurements can be scheduled to occur at specific times.

DDARRP requires that wireless intrusion detection (WIDS) be enabled to detect neighboring devices.

Answer : B, C

According to Fortinet training: 'When using DARRP, the AP selects the best channel available to use based on the scan results of BSSID/receive signal strength (RSSI) to AC' and 'To set the running time for DARRP optimization, use the following CLI command within the wireless controller setting: set darrp-optimize {integer}. Note that DARRP doesn't do continuous spectrum analysis...'

Question 7

Refer to the exhibit.

What does the asterisk (*) symbol beside the channel mean?

AIndicates channels that can be used only when Radio Resource Provisioning is enabled

BIndicates channels that cannot be used because of regulatory channel restrictions

CIndicates channels that will be scanned by the Wireless Intrusion Detection System (WIDS)

DIndicates channels that are subject to dynamic frequency selection (DFS) regulations

Answer : D

This frequencies are also used by other licensed applications, wireless LANs have to use a specific method to gain access to certain higher frequencies and this method is known as DFS.

Fortinet NSE6_FWF-6.4 Fortinet NSE 6 - Secure Wireless LAN 6.4 Exam Practice Test