Fortinet Fortinet Certifications NSE6_FWF-6.4 Questions & Answers

• Question 31:

  Which statement is correct about security profiles on FortiAP devices?

  A. Security profiles can only be applied to unencrypted wireless traffic.

  B. Security profiles can only be applied via firewall policies on the FortiGate.

  C. Security profiles are only supported on Bridge-mode SSIDs.

  D. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic.

  Correct Answer: D

  Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic, such as antivirus, web filtering, application control, and IPS. This feature is called local bridging and it allows the FortiAP to forward traffic to the FortiGate for security inspection before sending it to the destination network. This reduces the bandwidth consumption and latency of tunnel mode SSIDs. References: Secure Wireless LAN Course Description, page 9; [FortiOS 6.4.0 Handbook - Wireless Controller], page 46.

• Question 32:

  How can you find upstream and downstream link rates of a wireless client using FortiGate?

  A. On the FortiAP CLI, using the cw_diag ksta command

  B. On the FortiAP CLI, using the cw_diag -d sta command

  C. On the FortiGate GUI, using the WiFi Client monitor

  D. On the FortiGate CLI, using the diag wireless-controller wlac -d Sta command

  Correct Answer: C

  The WiFi Client monitor on the FortiGate GUI shows the upstream and downstream link rates of a wireless client, along with other information such as MAC address, SSID, IP address, signal strength, and connection time. The link rates indicate the maximum data rates that the client can achieve in both directions. References: Secure Wireless LAN Course Description, page 7; [FortiOS 6.4.0 Handbook - Wireless Controller], page 37.