[Q12-Q29] NSE6_FWF-6.4 Actual Questions – Instant Download Tests Free Updated Today!

4.5/5 - (2 votes)

NSE6_FWF-6.4 Actual Questions – Instant Download Tests Free Updated Today!

Get instant access of 100% real Fortinet NSE6_FWF-6.4 exam questions with verified answers

NO.12 Which of the following is a requirement to generate analytic reports using on-site FortiPresence deployment?

SQL services must be running

Two wireless APs must be sending data

DTLS encryption on wireless traffic must be turned off

Wireless network security must be set to open

NO.13 You are investigating a wireless performance issue and you are trying to audit the neighboring APs in the PF environment. You review the Rogue APs widget on the GUI but it is empty, despite the known presence of other APs.
Which configuration change will allow neighboring APs to be successfully detected?

Enable Locate WiFi clients when not connected in the relevant AP profiles.

Enable Monitor channel utilization on the relevant AP profiles.

Ensure that all allowed channels are enabled for the AP radios.

Enable Radio resource provisioning on the relevant AP profiles.

NO.14 Which two statements about distributed automatic radio resource provisioning (DARRP) are correct? (Choose two.)

DARRP performs continuous spectrum analysis to detect sources of interference. It uses this information to allow the AP to select the optimum channel.

DARRP performs measurements of the number of BSSIDs and their signal strength (RSSI). The controller then uses this information to select the optimum channel for the AP.

DARRP measurements can be scheduled to occur at specific times.

DARRP requires that wireless intrusion detection (WIDS) be enabled to detect neighboring devices.

NO.15 Which two configurations are compatible for Wireless Single Sign-On (WSSO)? (Choose two.)

A VAP configured for captive portal authentication

A VAP configured for WPA2 or 3 Enterprise

A VAP configured to authenticate locally on FortiGate

A VAP configured to authenticate using a radius server

NO.16 When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.)

81 Tunnel-Private-Group-ID

65 Tunnel-Medium-Type

83 Tunnel-Preference

58 Egress-VLAN-Name

64 Tunnel-Type

NO.17 Six APs are located in a remotely based branch office and are managed by a centrally hosted FortiGate. Multiple wireless users frequently connect and roam between the APs in the remote office.
The network they connect to, is secured with WPA2-PSK. As currently configured, the WAN connection between the branch office and the centrally hosted FortiGate is unreliable.
Which configuration would enable the most reliable wireless connectivity for the remote clients?

Configure a tunnel mode wireless network and enable split tunneling to the local network

Configure a bridge mode wireless network and enable the Local standalone configuration option

Configure a bridge mode wireless network and enable the Local authentication configuration option

Install supported FortiAP and configure a bridge mode wireless network

NO.18 Refer to the exhibits.
Exhibit A

Exhibit B

The exhibits show the diagnose debug log of a station connection taken on the controller CLI.
Which security mode is used by the wireless connection?

WPA2 Enterprise

WPA3 Enterprise

WPA2 Personal and radius MAC filtering

Open, with radius MAC filtering

NO.19 Which factor is the best indicator of wireless client connection quality?

Downstream link rate, the connection rate for the AP to the client

The receive signal strength (RSS) of the client at the AP

Upstream link rate, the connection rate for the client to the AP

The channel utilization of the channel the client is using

NO.20 Which two statements about distributed automatic radio resource provisioning (DARRP) are correct? (Choose two.)

DARRP performs continuous spectrum analysis to detect sources of interference. It uses this information to allow the AP to select the optimum channel.

DARRP performs measurements of the number of BSSIDs and their signal strength (RSSI). The controller then uses this information to select the optimum channel for the AP.

DARRP measurements can be scheduled to occur at specific times.

DARRP requires that wireless intrusion detection (WIDS) be enabled to detect neighboring devices.

NO.21 Where in the controller interface can you find a wireless client’s upstream and downstream link rates?

On the AP CLI, using the cw_diag ksta command

On the controller CLI, using the diag wireless-controller wlac -d sta command

On the AP CLI, using the cw_diag -d sta command

On the controller CLI, using the WiFi Client monitor

NO.22 When using FortiPresence as a captive portal, which two types of public authentication services can be used to access guest Wi-Fi? (Choose two.)

Social networks authentication

Software security token authentication

Short message service authentication

Hardware security token authentication

NO.23 Which statement describes FortiPresence location map functionality?

Provides real-time insight into user movements

Provides real-time insight into user online activity

Provides real-time insight into user purchase activity

Provides real-time insight into user usage stats

NO.24 Refer to the exhibits.
Exhibit A

Exhibit B

A wireless network has been created to support a group of users in a specific area of a building. The wireless network is configured but users are unable to connect to it. The exhibits show the relevant controller configuration for the APs and the wireless network.
Which two configuration changes will resolve the issue? (Choose two.)

For both interfaces in the wtp-profile, configure set vaps to be “Authors”

Disable intra-vap-privacy for the Authors vap-wireless network

For both interfaces in the wtp-profile, configure vap-all to be manual

Increase the transmission power of the AP radio interfaces

NO.25 When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)

An X.509 certificate to authenticate the client

An X.509 to authenticate the authentication server

A WPA2 or WPA3 personal wireless network

A WPA2 or WPA3 Enterprise wireless network

509 certificates and work for connections that use Secure Socket Layer/Transport Level Security (SSL/TLS). Both client and server certificates have additional requirements.

NO.26 What is the first discovery method used by FortiAP to locate the FortiGate wireless controller in the default configuration?

DHCP

Static

Broadcast

Multicast

NO.27 Refer to the exhibit.

If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?