Fortinet NSE 6 - Secure Wireless LAN 6.4 NSE6_FWF-6.4 Exam Questions

Answer : B, D

FortiGate, FortiCloud wireless access points (send visitor data in the form of station reports directly to FortiPresence)

Part of the location service registration process is to link FortiAPs in FortiPresence, which is a cloud-based service that provides location analytics and customer engagement tools for wireless networks. The management services that can configure the discovered AP registration information from the FortiPresence cloud are FortiAP Cloud and FortiGate. FortiAP Cloud is a cloud-based wireless LAN management platform that can discover, configure, monitor, and troubleshoot FortiAP devices. FortiGate is a network security appliance that can act as a wireless controller and manage FortiAP devices through security fabric or CAPWAP protocols. Reference:FortiPresence Data Sheet, page 1;FortiOS 6.4.0 Handbook - Wireless Controller, page 9.

Answer : D

Security profiles are a feature that allows FortiAP devices to apply various security functions to the wireless traffic, such as antivirus, web filter, application control, intrusion prevention, and botnet scanning. Security profiles can be enabled on both tunnel-mode and bridge-mode SSIDs, and can be applied either through the wireless controller configuration or through firewall policies on the FortiGate device. Security profiles can also inspect encrypted wireless traffic, as long as the FortiAP device has access to the encryption keys.

Security profiles on FortiAP devices can use FortiGate subscription services to inspect the traffic, such as FortiGuard Antivirus, FortiGuard Web Filter, FortiGuard Application Control, and FortiGuard IPS. This means that the FortiAP device can leverage the latest threat intelligence and updates from Fortinet to protect the wireless network from malicious or unwanted content.

Therefore, the correct answer is D. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic.

FortiAP-S and FortiAP-U bridge mode security profiles

Configuring security | FortiAP / FortiWiFi 6.4.2

Security profiles - Fortinet Document Library

Answer : A, C

The configuration changes that will resolve the issue are to configure set vaps to be ''Authors'' for both interfaces in the wtp-profile, and to configure vap-all to be manual for both interfaces in the wtp-profile. This is because the current configuration does not assign any VAPs to the AP interfaces, which means that no wireless networks are broadcasted by the APs. The vap-all setting determines whether all VAPs are assigned to an interface or not, and the vaps setting specifies which VAPs are assigned to an interface. By setting vap-all to manual and vaps to ''Authors'', the APs will only broadcast the Authors wireless network on both interfaces. Disabling intra-vap-privacy for the Authors vap-wireless network will not help, as it only affects the communication between clients on the same SSID, not their connection to the AP. Increasing the transmission power of the AP radio interfaces will not help, as it only affects the signal strength and coverage of the APs, not their broadcasting of wireless networks. Reference:wireless-controller vap | FortiGate / FortiOS 6.4.0,Technical Note: How to configure intra-SSID privacy

Answer : B

FortiPlanner is a wireless network planning and deployment tool that helps to design and optimize wireless networks based on various parameters, such as floor plans, AP models, coverage areas, and client density. FortiPlanner uses a predictive model in wireless design projects, which means that it estimates the wireless coverage and performance based on mathematical calculations and simulations, without requiring any physical measurements or site surveys. Reference:FortiOS 6.4.0 Handbook - Wireless Controller, page 5; [FortiPlanner User Guide], page 9.

Answer : A

(Page 88 Study Guide) 'FortiPresence provides data and analytics based on demographic segmentation and visitor movement between areas'

According to the web search results, FortiPresence location map functionality provides real-time insight into user movements. It uses the location data from the Fortinet access points to detect each visitor's smartphone Wi-Fi signal and track their location and behavior within the site. It also provides data visualization in a customizable format, such as heat maps and animated flows, to show the visitor traffic and movement patterns. This geographical data analysis can help improve visitor experiences and business outcomes. Reference:Location Analytics | FortiPresence 22.4.0 - Fortinet Documentation,FortiPresence Data Sheet

Answer : D

The ARRP (Automatic Radio Resource Provisioning) profile improves upon DARRP (Distributed Automatic Radio Resource Provisioning) by allowing more factors to be considered to optimize channel selection among FortiAPs. DARRP uses the neighbor APs channels and signal strength collected from the background scan for channel selection.

Answer : B