Fortinet NSE6_FWF-6.4 Exam Practice Test Instant Access

Question 1

Refer to the exhibit.

If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?

A. Areas with the signal strength weaker than -68 dB are shown with black background.

B. Areas with the signal strength equal to -68 dB are zoomed in to provide better visibility.

C. Areas with the signal strength weaker than -68 dB are highlighted in orange and red to indicate that no signal was propagated by the APS.

DAreas with the signal strength equal or stronger than -68 dB are highlighted in green circles.

Answer : D

The FortiPlanner site survey reading is a tool that shows the predicted signal strength of the wireless network based on the floor plan, the placement of the APs, and the propagation model. The signal strength is measured in decibels (dB), which is a logarithmic scale that indicates how much power the signal has. The higher the dB value, the stronger the signal.

The site survey reading allows the user to set a threshold value for the signal strength, which is -68 dB by default. This means that any area with a signal strength equal or stronger than -68 dB is considered to have adequate coverage for most wireless applications. These areas are highlighted in green circles on the floor plan. Any area with a signal strength weaker than -68 dB is considered to have poor coverage or no coverage at all. These areas are shown with different colors, such as yellow, orange, red, or black, depending on how weak the signal is.

Therefore, the correct answer is D. Areas with the signal strength equal or stronger than -68 dB are highlighted in green circles.

FortiPlanner 2.0 User Guide, page 28

FortiPlanner Data Sheet, page 2

FortiPlanner 2.2 User Guide, page 19

Question 2

How can you find upstream and downstream link rates of a wireless client using FortiGate?

AOn the FortiAP CLI, using the cw_diag ksta command

BOn the FortiAP CLI, using the cw_diag -d sta command

COn the FortiGate GUI, using the WiFi Client monitor

DOn the FortiGate CLI, using the diag wireless-controller wlac -d Sta command

Answer : C

The WiFi Client monitor on the FortiGate GUI shows the upstream and downstream link rates of a wireless client, along with other information such as MAC address, SSID, IP address, signal strength, and connection time. The link rates indicate the maximum data rates that the client can achieve in both directions. Reference:Secure Wireless LAN Course Description, page 7; [FortiOS 6.4.0 Handbook - Wireless Controller], page 37.

Question 3

A tunnel mode SSID is configured on a FortiGate wireless controller.

Which task must be completed before the SSID can be used?

AThe new network must be manually assigned to a FortiAP profile.

BThe wireless network interface must be assigned a Layer 3 address.

CSecurity Fabric and HTTPS must be enabled on the wireless network interface.

DThe wireless network to Internet firewall policy must be configured.

Answer : B

The wireless network interface must be assigned a Layer 3 address because it acts as the gateway for the tunnel mode SSID traffic. The FortiGate wireless controller uses this interface to communicate with the FortiAPs and the wireless clients. Without a valid IP address, the tunnel mode SSID cannot function properly. Reference:Secure Wireless LAN Course Description, page 5; [FortiOS 6.4.0 Handbook - Wireless Controller], page 24.

Question 4

How are wireless clients assigned to a dynamic VLAN configured for hash mode?

AUsing the current number of wireless clients connected to the SSID and the number of IPs available in the least busy VLAN

BUsing the current number of wireless clients connected to the SSID and the number of clients allocated to each of the VLANs

CUsing the current number of wireless clients connected to the SSID and the number of VLANs available in the pool

DUsing the current number of wireless clients connected to the SSID and the group the FortiAP is a member of

Answer : C

VLAN from the VLAN pool based on a hash of the current number of SSID clients and the number of entries in the VLAN pool.

Question 5

When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)

AAn X.509 certificate to authenticate the client

BAn X.509 to authenticate the authentication server

CA WPA2 or WPA3 personal wireless network

DA WPA2 or WPA3 Enterprise wireless network

Answer : B, D

Question 6

As standard best practice, which configuration should be performed before configuring FortiAPs using a FortiGate wireless controller?

ACreate wireless LAN specific policies

BPreauthorize APs

CCreate a custom AP profile

DSet the wireless controller country setting

Answer : D

Setting the wireless controller country setting is a standard best practice that should be performed before configuring FortiAPs using a FortiGate wireless controller. The country setting determines the regulatory domain and the allowed channels and power levels for the wireless network. The country setting must match the physical location of the FortiAPs to comply with local regulations and avoid interference issues. Reference:Secure Wireless LAN Course Description, page 5;FortiOS 6.4.0 Handbook - Wireless Controller, page 24.

Question 7

What type of design model does FortiPlanner use in wireless design project?

AArchitectural model

BPredictive model

CAnalytical model

DIntegration model

Answer : B

FortiPlanner is a wireless network planning and deployment tool that helps to design and optimize wireless networks based on various parameters, such as floor plans, AP models, coverage areas, and client density. FortiPlanner uses a predictive model in wireless design projects, which means that it estimates the wireless coverage and performance based on mathematical calculations and simulations, without requiring any physical measurements or site surveys. Reference:FortiOS 6.4.0 Handbook - Wireless Controller, page 5; [FortiPlanner User Guide], page 9.

Fortinet NSE6_FWF-6.4 Fortinet NSE 6 - Secure Wireless LAN 6.4 Exam Practice Test