Fortinet NSE6_FWF-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE6_FWF-6.4 Online Questions & Answers

• Question 1:

  Which two configurations are compatible for Wireless Single Sign-On (WSSO)? (Choose two.)

  A. A VAP configured for captive portal authentication
  B. A VAP configured for WPA2 or 3 Enterprise
  C. A VAP configured to authenticate locally on FortiGate
  D. A VAP configured to authenticate using a radius server
  B. A VAP configured for WPA2 or 3 Enterprise
  D. A VAP configured to authenticate using a radius server

  ---

  Explanation/Reference:

  In the SSID choose WPA2-Enterprise authentication.

  WSSO is RADIUS-based authentication that passes the user's user group memberships to the FortiGate.

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/b92a67f9-73a6-11ea-9384-00505692583a/FortiWiFi_and_FortiAP-6.4.2-Configuration_Guide.pdf

• Question 2:

  Which two phases are part of the process to plan a wireless design project? (Choose two.)

  A. Project information phase
  B. Hardware selection phase
  C. Site survey phase
  D. Installation phase
  C. Site survey phase
  D. Installation phase

  ---

  Explanation/Reference:

  Reference: https://www.sciencedirect.com/topics/computer-science/wireless-site-survey https://www.automation.com/en-us/articles/2015-2/wireless-device-network-planning-and-design

• Question 3:

  Which factor is the best indicator of wireless client connection quality?

  A. Downstream link rate, the connection rate for the AP to the client
  B. The receive signal strength (RSS) of the client at the AP
  C. Upstream link rate, the connection rate for the client to the AP
  D. The channel utilization of the channel the client is using
  B. The receive signal strength (RSS) of the client at the AP

• Question 4:

  A tunnel mode wireless network is configured on a FortiGate wireless controller. Which task must be completed before the wireless network can be used?

  A. The wireless network interface must be assigned a Layer 3 address
  B. Security Fabric and HTTPS must be enabled on the wireless network interface
  C. The wireless network to Internet firewall policy must be configured
  D. The new network must be manually assigned to a FortiAP profile
  C. The wireless network to Internet firewall policy must be configured

  ---

  Explanation/Reference:

  A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/723e20ad-5098-11e9-94bf-00505692583a/FortiWiFi_and_FortiAP-6.2.0-Configuration_Guide.pdf

• Question 5:

  Where in the controller interface can you find a wireless client's upstream and downstream link rates?

  A. On the AP CLI, using the cw_diag ksta command
  B. On the controller CLI, using the diag wireless-controller wlac -d sta command
  C. On the AP CLI, using the cw_diag -d sta command
  D. On the controller CLI, using the WiFi Client monitor
  B. On the controller CLI, using the diag wireless-controller wlac -d sta command

  ---

  Explanation/Reference:

• Question 6:

  As standard best practice, which configuration should be performed before configuring FortiAPs using a FortiGate wireless controller?

  A. Create wireless LAN specific policies
  B. Preauthorize APs
  C. Create a custom AP profile
  D. Set the wireless controller country setting
  C. Create a custom AP profile

  ---

  Explanation/Reference:

  Reference: https://docs.fortinet.com/document/fortiap/6.4.1/fortiwifi-and-fortiap-configuration-guide/547298/complex-wireless-network-example

• Question 7:

  Which two roles does FortiPresence analytics assist in generating presence reports? (Choose two.)

  A. Gathering details about on site visitors
  B. Predicting the number of guest users visiting on-site
  C. Comparing current data with historical records
  D. Reporting potential threats by guests on site
  A. Gathering details about on site visitors
  B. Predicting the number of guest users visiting on-site

  ---

  Explanation/Reference:

• Question 8:

  Which statement describes FortiPresence location map functionality?

  A. Provides real-time insight into user movements
  B. Provides real-time insight into user online activity
  C. Provides real-time insight into user purchase activity
  D. Provides real-time insight into user usage stats
  D. Provides real-time insight into user usage stats

  ---

  Explanation/Reference:

  This geographical data analysis provides real-time insights into user behavior.

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/05d8bae1-5f3c-11e9-81a4-00505692583a/FortiPresence-v2.0.1-getting-started.pdf

• Question 9:

  Refer to the exhibit.

  

  If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?

  A. Areas with the signal strength equal to -68 dB are zoomed in to provide better visibility
  B. Areas with the signal strength weaker than -68 dB are cut out of the map
  C. Areas with the signal strength equal or stronger than -68 dB are highlighted in multicolor
  D. Areas with the signal strength weaker than -68 dB are highlighted in orange and red to indicate that no signal was propagated by the APs.
  C. Areas with the signal strength equal or stronger than -68 dB are highlighted in multicolor

  ---

  Explanation/Reference:

• Question 10:

  Six APs are located in a remotely based branch office and are managed by a centrally hosted FortiGate. Multiple wireless users frequently connect and roam between the APs in the remote office.

  The network they connect to, is secured with WPA2-PSK. As currently configured, the WAN connection between the branch office and the centrally hosted FortiGate is unreliable.

  Which configuration would enable the most reliable wireless connectivity for the remote clients?

  A. Configure a tunnel mode wireless network and enable split tunneling to the local network
  B. Configure a bridge mode wireless network and enable the Local standalone configuration option
  C. Configure a bridge mode wireless network and enable the Local authentication configuration option
  D. Install supported FortiAP and configure a bridge mode wireless network
  A. Configure a tunnel mode wireless network and enable split tunneling to the local network

  ---

  Explanation/Reference: