Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Fortinet
NSE 6 Network Security Specialist
NSE6_FWF-6.4
Fortinet NSE 6 - Secure Wireless LAN 6.4 Questions and Answers

Pass the Fortinet NSE 6 Network Security Specialist NSE6_FWF-6.4 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam NSE6_FWF-6.4 Premium Access

View all detail and faqs for the NSE6_FWF-6.4 exam

Go to Exam

471 Students Passed

94% Average Score

93% Same Questions

Viewing page 1 out of 1 pages

Viewing questions 1-10 out of questions

Questions # 1:

Which two statements about background rogue scanning are correct? (Choose two.)

Options:

A dedicated radio configured for background scanning can support the connection of wireless clients

When detecting rogue APs, a dedicated radio configured for background scanning can suppress the rogue AP

Background rogue scanning requires DARRP to be enabled on the AP instance

A dedicated radio configured for background scanning can detect rogue devices on all other channels in its configured frequency band

Answer

A, C

Questions # 2:

What type of design model does FortiPlanner use in wireless design project?

Options:

Architectural model

Predictive model

Analytical model

Integration model

Answer

Explanation

FortiPlanner is a wireless network planning and deployment tool that helps to design and optimize wireless networks based on various parameters, such as floor plans, AP models, coverage areas, and client density. FortiPlanner uses a predictive model in wireless design projects, which means that it estimates the wireless coverage and performance based on mathematical calculations and simulations, without requiring any physical measurements or site surveys. References: FortiOS 6.4.0 Handbook - Wireless Controller, page 5; [FortiPlanner User Guide], page 9.

Questions # 3:

Which two phases are part of the process to plan a wireless design project? (Choose two.)

Options:

Project information phase

Hardware selection phase

Site survey phase

Installation phase

Answer

A, C

Explanation

According to the web search results, the project information phase and the site survey phase are part of the process to plan a wireless design project. The project information phase involves defining the project scope, objectives, requirements, deliverables, and stakeholders. It also includes creating a project plan, a risk management plan, a communication plan, and a budget.1 The site survey phase involves conducting a physical inspection of the site where the wireless network will be deployed, measuring the signal strength and interference levels, identifying the optimal locations for the access points and antennas, and validating the network performance and coverage.2 The hardware selection phase and the installation phase are not part of the planning process, but rather part of the implementation process. The hardware selection phase involves choosing the appropriate wireless devices, such as access points, routers, switches, controllers, and cables, based on the network design and specifications.3 The installation phase involves installing, configuring, testing, and documenting the wireless network components according to the project plan and best practices.3 References: Wireless Device Network Planning and Design - Emerson, Telecommunications and Implementation Project Management - BICSI, Project Planning | Wireless Design Services | Digi International

Questions # 4:

Refer to the exhibit.

Question # 4

If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?

Options:

Areas with the signal strength weaker than -68 dB are shown with blackbackground.

Areas with the signal strength equal to -68 dB are zoomed in to providebetter visibility.

Areas with the signal strength weaker than -68 dB are highlighted in orangeand red to indicate that no signal was propagated by the APS.

Areas with the signal strength equal or stronger than -68 dB are highlighted in green circles.

Answer

Explanation

The FortiPlanner site survey reading is a tool that shows the predicted signal strength of the wireless network based on the floor plan, the placement of the APs, and the propagation model. The signal strength is measured in decibels (dB), which is a logarithmic scale that indicates how much power the signal has. The higher the dB value, the stronger the signal.

The site survey reading allows the user to set a threshold value for the signal strength, which is -68 dB by default. This means that any area with a signal strength equal or stronger than -68 dB is considered to have adequate coverage for most wireless applications. These areas are highlighted in green circles on the floor plan. Any area with a signal strength weaker than -68 dB is considered to have poor coverage or no coverage at all. These areas are shown with different colors, such as yellow, orange, red, or black, depending on how weak the signal is.

Therefore, the correct answer is D. Areas with the signal strength equal or stronger than -68 dB are highlighted in green circles.

References:

FortiPlanner 2.0 User Guide, page 28

FortiPlanner Data Sheet, page 2

FortiPlanner 2.2 User Guide, page 19

Questions # 5:

A tunnel mode SSID is configured on a FortiGate wireless controller.

Which task must be completed before the SSID can be used?

Options:

The new network must be manually assigned to a FortiAP profile.

The wireless network interface must be assigned a Layer 3 address.

Security Fabric and HTTPS must be enabled on the wireless network interface.

The wireless network to Internet firewall policy must be configured.

Answer

Explanation

The wireless network interface must be assigned a Layer 3 address because it acts as the gateway for the tunnel mode SSID traffic. The FortiGate wireless controller uses this interface to communicate with the FortiAPs and the wireless clients. Without a valid IP address, the tunnel mode SSID cannot function properly. References: Secure Wireless LAN Course Description, page 5; [FortiOS 6.4.0 Handbook - Wireless Controller], page 24.

Questions # 6:

When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)

Options:

An X.509 certificate to authenticate the client

An X.509 to authenticate the authentication server

A WPA2 or WPA3 personal wireless network

A WPA2 or WPA3 Enterprise wireless network

Answer

B, D

Questions # 7:

Refer to the exhibit.

Question # 7

If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?

Options:

Areas with the signal strength equal to -68 dB are zoomed in to provide better visibility

Areas with the signal strength weaker than -68 dB are cut out of the map

Areas with the signal strength equal or stronger than -68 dB are highlighted in multicolor

Areas with the signal strength weaker than -68 dB are highlighted in orange and red to indicate that no signal was propagated by the APs.

Answer

Questions # 8:

As standard best practice, which configuration should be performed before configuring FortiAPs using a FortiGate wireless controller?

Options:

Create wireless LAN specific policies

Preauthorize APs

Create a custom AP profile

Set the wireless controller country setting

Answer

Explanation

Setting the wireless controller country setting is a standard best practice that should be performed before configuring FortiAPs using a FortiGate wireless controller. The country setting determines the regulatory domain and the allowed channels and power levels for the wireless network. The country setting must match the physical location of the FortiAPs to comply with local regulations and avoid interference issues. References: Secure Wireless LAN Course Description, page 5; FortiOS 6.4.0 Handbook - Wireless Controller, page 24.

Questions # 9:

Which of the following is a requirement to generate analytic reports using on-site FortiPresence deployment?