[UPDATED 2023] Free Fortinet NSE6_FWF-6.4 Exam Questions Self-Assess Preparation
NSE6_FWF-6.4 Free Sample Questions to Practice One Year Update
NEW QUESTION # 12
Refer to the exhibit.
If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?
- A. Areas with the signal strength weaker than -68 dB are highlighted in orange and red to indicate that no signal was propagated by the APs.
- B. Areas with the signal strength equal to -68 dB are zoomed in to provide better visibility
- C. Areas with the signal strength equal or stronger than -68 dB are highlighted in multicolor
- D. Areas with the signal strength weaker than -68 dB are cut out of the map
Answer: C
NEW QUESTION # 13
When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)
- A. An X.509 certificate to authenticate the client
- B. 509 certificates and work for connections that use Secure Socket Layer/Transport Level Security (SSL/TLS). Both client and server certificates have additional requirements.
- C. A WPA2 or WPA3 personal wireless network
- D. An X.509 to authenticate the authentication server
- E. A WPA2 or WPA3 Enterprise wireless network
Answer: A,D
NEW QUESTION # 14
Which two phases are part of the process to plan a wireless design project? (Choose two.)
- A. Site survey phase
- B. Project information phase
- C. Installation phase
- D. Hardware selection phase
Answer: A,C
Explanation:
Reference:
https://www.automation.com/en-us/articles/2015-2/wireless-device-network-planning-and-design
NEW QUESTION # 15
A tunnel mode wireless network is configured on a FortiGate wireless controller.
Which task must be completed before the wireless network can be used?
- A. The wireless network interface must be assigned a Layer 3 address
- B. Security Fabric and HTTPS must be enabled on the wireless network interface
- C. The new network must be manually assigned to a FortiAP profile.
- D. The wireless network to Internet firewall policy must be configured
Answer: D
Explanation:
A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.
NEW QUESTION # 16
Which two statements about distributed automatic radio resource provisioning (DARRP) are correct? (Choose two.)
- A. DARRP measurements can be scheduled to occur at specific times.
- B. DARRP requires that wireless intrusion detection (WIDS) be enabled to detect neighboring devices.
- C. DARRP performs measurements of the number of BSSIDs and their signal strength (RSSI). The controller then uses this information to select the optimum channel for the AP.
- D. DARRP performs continuous spectrum analysis to detect sources of interference. It uses this information to allow the AP to select the optimum channel.
Answer: A,C
Explanation:
According to Fortinet training: "When using DARRP, the AP selects the best channel available to use based on the scan results of BSSID/receive signal strength (RSSI) to AC" and "To set the running time for DARRP optimization, use the following CLI command within the wireless controller setting: set darrp-optimize {integer}. Note that DARRP doesn't do continuous spectrum analysis..."
NEW QUESTION # 17
What is the first discovery method used by FortiAP to locate the FortiGate wireless controller in the default configuration?
- A. Static
- B. Multicast
- C. Broadcast
- D. DHCP
Answer: A
NEW QUESTION # 18
What type of design model does FortiPlanner use in wireless design project?
- A. Analytical model
- B. Predictive model
- C. Architectural model
- D. Integration model
Answer: C
Explanation:
FortiPlanner will look familiar to anyone who has used architectural or home design software.
NEW QUESTION # 19
As standard best practice, which configuration should be performed before configuring FortiAPs using a FortiGate wireless controller?
- A. Create a custom AP profile
- B. Set the wireless controller country setting
- C. Preauthorize APs
- D. Create wireless LAN specific policies
Answer: A
NEW QUESTION # 20
Which two statements about background rogue scanning are correct? (Choose two.)
- A. When detecting rogue APs, a dedicated radio configured for background scanning can suppress the rogue AP
- B. A dedicated radio configured for background scanning can detect rogue devices on all other channels in its configured frequency band
- C. A dedicated radio configured for background scanning can support the connection of wireless clients
- D. Background rogue scanning requires DARRP to be enabled on the AP instance
Answer: B,D
NEW QUESTION # 21
Refer to the exhibits.
Exhibit A
Exhibit B
Exhibit C
A wireless network has been installed in a small office building and is being used by a business to connect its wireless clients. The network is used for multiple purposes, including corporate access, guest access, and connecting point-of-sale and IoT devices.
Users connecting to the guest network located in the reception area are reporting slow performance. The network administrator is reviewing the information shown in the exhibits as part of the ongoing investigation of the problem. They show the profile used for the AP and the controller RF analysis output together with a screenshot of the GUI showing a summary of the AP and its neighboring APs.
To improve performance for the users connecting to the guest network in this area, which configuration change is most likely to improve performance?
- A. Reduce the number of wireless networks being broadcast by the AP
- B. Enable frequency handoff on the AP to band steer clients
- C. Increase the transmission power of the AP radios
- D. Install another AP in the reception area to improve available bandwidth
Answer: B
NEW QUESTION # 22
What type of design model does FortiPlanner use in wireless design project?
- A. Architectural model
- B. Analytical model
- C. Integration model
- D. Predictive model
Answer: D
NEW QUESTION # 23
Refer to the exhibit.
What does the asterisk (*) symbol beside the channel mean?
- A. Indicates channels that can be used only when Radio Resource Provisioning is enabled
- B. Indicates channels that are subject to dynamic frequency selection (DFS) regulations
- C. Indicates channels that will be scanned by the Wireless Intrusion Detection System (WIDS)
- D. Indicates channels that cannot be used because of regulatory channel restrictions
Answer: B
NEW QUESTION # 24
When configuring Auto TX Power control on an AP radio, which two statements best describe how the radio responds? (Choose two.)
- A. When the AP detects any other wireless signal stronger that -70 dBm, it will reduce its transmission power until it reaches the minimum configured TX power limit.
- B. When the AP detects any wireless client signal weaker than -70 dBm, it will reduce its transmission power until it reaches the maximum configured TX power limit.
- C. When the AP detects PF Interference from an unknown source such as a cordless phone with a signal stronger that -70 dBm, it will increase its transmission power until it reaches the maximum configured TX power limit.
- D. When the AP detects any interference from a trusted neighboring AP stronger that -70 dBm, it will reduce its transmission power until it reaches the minimum configured TX power limit.
Answer: A,B
NEW QUESTION # 25
Refer to the exhibits.
Exhibit A
Exhibit B
The exhibits show the diagnose debug log of a station connection taken on the controller CLI.
Which security mode is used by the wireless connection?
- A. WPA2 Enterprise
- B. WPA3 Enterprise
- C. WPA2 Personal and radius MAC filtering
- D. Open, with radius MAC filtering
Answer: C
NEW QUESTION # 26
Which two configurations are compatible for Wireless Single Sign-On (WSSO)? (Choose two.)
- A. A VAP configured for captive portal authentication
- B. A VAP configured to authenticate locally on FortiGate
- C. A VAP configured for WPA2 or 3 Enterprise
- D. A VAP configured to authenticate using a radius server
Answer: C,D
Explanation:
In the SSID choose WPA2-Enterprise authentication.
WSSO is RADIUS-based authentication that passes the user's user group memberships to the FortiGate.
NEW QUESTION # 27
Where in the controller interface can you find a wireless client's upstream and downstream link rates?
- A. On the controller CLI, using the diag wireless-controller wlac -d sta command
- B. On the controller CLI, using the WiFi Client monitor
- C. On the AP CLI, using the cw_diag -d sta command
- D. On the AP CLI, using the cw_diag ksta command
Answer: D
NEW QUESTION # 28
When using FortiPresence as a captive portal, which two types of public authentication services can be used to access guest Wi-Fi? (Choose two.)
- A. Hardware security token authentication
- B. Social networks authentication
- C. Software security token authentication
- D. Short message service authentication
Answer: A,B
Explanation:
This information along with the social network authentication logins with Facebook, Google, Instagram, LinkedIn, or FortiPresence using your WiFi.
Captive Portal configurations for social media logins and internet access. You can add and manage sites using the integrated Google maps and manoeuvre your hardware infrastructure easily.
NEW QUESTION # 29
Which two roles does FortiPresence analytics assist in generating presence reports? (Choose two.)
- A. Reporting potential threats by guests on site
- B. Gathering details about on site visitors
- C. Comparing current data with historical records
- D. Predicting the number of guest users visiting on-site
Answer: B,C
NEW QUESTION # 30
Refer to the exhibits.
Exhibit A
Exhibit B
Exhibit C
A wireless network has been installed in a small office building and is being used by a business to connect its wireless clients. The network is used for multiple purposes, including corporate access, guest access, and connecting point-of-sale and IoT devices.
Users connecting to the guest network located in the reception area are reporting slow performance. The network administrator is reviewing the information shown in the exhibits as part of the ongoing investigation of the problem. They show the profile used for the AP and the controller RF analysis output together with a screenshot of the GUI showing a summary of the AP and its neighboring APs.
To improve performance for the users connecting to the guest network in this area, which configuration change is most likely to improve performance?
- A. Reduce the number of wireless networks being broadcast by the AP
- B. Enable frequency handoff on the AP to band steer clients
- C. Increase the transmission power of the AP radios
- D. Install another AP in the reception area to improve available bandwidth
Answer: C
NEW QUESTION # 31
......
Real exam questions are provided for NSE 6 Network Security Specialist tests, which can make sure you 100% pass: https://www.testpdf.com/NSE6_FWF-6.4-exam-braindumps.html
Download NSE6_FWF-6.4 exam with Fortinet NSE6_FWF-6.4 Real Exam Questions: https://drive.google.com/open?id=12GiNp82xF2wSh5sQgOGnHoRtB_LPE1ZV
