Fortinet NSE6_FWF-6.4 Exam Practice Test Instant Access

Question 1

How are wireless clients assigned to a dynamic VLAN configured for hash mode?

AUsing the current number of wireless clients connected to the SSID and the number of IPs available in the least busy VLAN

BUsing the current number of wireless clients connected to the SSID and the number of clients allocated to each of the VLANs

CUsing the current number of wireless clients connected to the SSID and the number of VLANs available in the pool

DUsing the current number of wireless clients connected to the SSID and the group the FortiAP is a member of

Answer : C

VLAN from the VLAN pool based on a hash of the current number of SSID clients and the number of entries in the VLAN pool.

Question 2

Which statement is correct about security profiles on FortiAP devices?

ASecurity profiles on FortiAP devices can use FortiGate subscription to inspect the traffic

BOnly bridge mode SSIDs can apply the security profiles

CDisable DTLS on FortiAP

DFortiGate performs inspection the wireless traffic

Answer : B

Question 3

When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)

AAn X.509 certificate to authenticate the client

BAn X.509 to authenticate the authentication server

CA WPA2 or WPA3 personal wireless network

DA WPA2 or WPA3 Enterprise wireless network

Answer : B, D

Question 4

What is the first discovery method used by FortiAP to locate the FortiGate wireless controller in the default configuration?

ADHCP

BStatic

CBroadcast

DMulticast

Answer : B

Question 5

A tunnel mode wireless network is configured on a FortiGate wireless controller.

Which task must be completed before the wireless network can be used?

AThe wireless network interface must be assigned a Layer 3 address

BSecurity Fabric and HTTPS must be enabled on the wireless network interface

CThe wireless network to Internet firewall policy must be configured

DThe new network must be manually assigned to a FortiAP profile.

Answer : C

A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.

Question 6

Refer to the exhibits.

Exhibit A

Exhibit B

A wireless network has been created to support a group of users in a specific area of a building. The wireless network is configured but users are unable to connect to it. The exhibits show the relevant controller configuration for the APs and the wireless network.

Which two configuration changes will resolve the issue? (Choose two.)

AFor both interfaces in the wtp-profile, configure set vaps to be ''Authors''

BDisable intra-vap-privacy for the Authors vap-wireless network

CFor both interfaces in the wtp-profile, configure vap-all to be manual

DIncrease the transmission power of the AP radio interfaces

Answer : A, C

Question 7

As a network administrator, you are responsible for managing an enterprise secure wireless LAN. The controller is based in the United States, and you have been asked to deploy a number of managed APs in a remote office in Germany.

What is the correct way to ensure that the RF channels and transmission power limits are appropriately configured for the remote APs?

AConfigure the APs individually by overriding the settings in Managed FortiAPs

BConfigure the controller for the correct country code for Germany

CClone a suitable FortiAP profile and change the county code settings on the profile

DCreate a new FortiAP profile and change the county code settings on the profile

Answer : C

Fortinet NSE6_FWF-6.4 Fortinet NSE 6 - Secure Wireless LAN 6.4 Exam Practice Test