2021年最新の実際に出ると確認されたNSE6_FWF-6.4試験問題集と解答でNSE6_FWF-6.4無料更新 [Q17-Q40]

2021年最新の実際に出ると確認されたNSE6_FWF-6.4試験問題集と解答でNSE6_FWF-6.4無料更新

実際問題を使ってNSE6_FWF-6.4問題集で100%無料NSE6_FWF-6.4試験問題集

質問 17
When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.)

A. 81 Tunnel-Private-Group-ID
B. 65 Tunnel-Medium-Type
C. 83 Tunnel-Preference
D. 58 Egress-VLAN-Name
E. 64 Tunnel-Type

正解: A,B,E

解説:
The RADIUS user attributes used for the VLAN ID assignment are:
IETF 64 (Tunnel Type)-Set this to VLAN.
IETF 65 (Tunnel Medium Type)-Set this to 802
IETF 81 (Tunnel Private Group ID)-Set this to VLAN ID.

質問 18
How are wireless clients assigned to a dynamic VLAN configured for hash mode?

A. Using the current number of wireless clients connected to the SSID and the number of IPs available in the least busy VLAN
B. Using the current number of wireless clients connected to the SSID and the number of VLANs available in the pool
C. Using the current number of wireless clients connected to the SSID and the group the FortiAP is a member of
D. Using the current number of wireless clients connected to the SSID and the number of clients allocated to each of the VLANs

正解: B

解説:
VLAN from the VLAN pool based on a hash of the current number of SSID clients and the number of entries in the VLAN pool.

質問 19
Which two phases are part of the process to plan a wireless design project? (Choose two.)

A. Site survey phase
B. Project information phase
C. Hardware selection phase
D. Installation phase

正解: A,D

解説:
Reference:
https://www.automation.com/en-us/articles/2015-2/wireless-device-network-planning-and-design

質問 20
Refer to the exhibits.
Exhibit A

Exhibit B

The exhibits show the diagnose debug log of a station connection taken on the controller CLI.
Which security mode is used by the wireless connection?

A. WPA2 Personal and radius MAC filtering
B. WPA3 Enterprise
C. Open, with radius MAC filtering
D. WPA2 Enterprise

正解: D

解説:
Best security option is WPA2-AES.

質問 21
Part of the location service registration process is to link FortiAPs in FortiPresence.
Which two management services can configure the discovered AP registration information from the FortiPresence cloud? (Choose two.)

A. AP Manager
B. FortiSwitch
C. FortiGate
D. FortiAP Cloud

正解: C,D

解説:
FortiGate, FortiCloud wireless access points (send visitor data in the form of station reports directly to FortiPresence)

質問 22
Refer to the exhibit.

What does the asterisk (*) symbol beside the channel mean?

A. Indicates channels that will be scanned by the Wireless Intrusion Detection System (WIDS)
B. Indicates channels that are subject to dynamic frequency selection (DFS) regulations
C. Indicates channels that cannot be used because of regulatory channel restrictions
D. Indicates channels that can be used only when Radio Resource Provisioning is enabled

正解: D

質問 23
Which factor is the best indicator of wireless client connection quality?

A. The receive signal strength (RSS) of the client at the AP
B. Downstream link rate, the connection rate for the AP to the client
C. Upstream link rate, the connection rate for the client to the AP
D. The channel utilization of the channel the client is using

正解: A

解説:
SSI, or "Received Signal Strength Indicator," is a measurement of how well your device can hear a signal from an access point or router. It's a value that is useful for determining if you have enough signal to get a good wireless connection.

質問 24
When using FortiPresence as a captive portal, which two types of public authentication services can be used to access guest Wi-Fi? (Choose two.)

A. Hardware security token authentication
B. Short message service authentication
C. Social networks authentication
D. Software security token authentication

正解: A,C

解説:
This information along with the social network authentication logins with Facebook, Google, Instagram, LinkedIn, or FortiPresence using your WiFi.
Captive Portal configurations for social media logins and internet access. You can add and manage sites using the integrated Google maps and manoeuvre your hardware infrastructure easily.

質問 25
When enabling security fabric on the FortiGate interface to manage FortiAPs, which two types of communication channels are established between FortiGate and FortiAPs? (Choose two.)

A. Security channels
B. Data channels
C. FortLink channels
D. Control channels

正解: B,D

解説:
The control channel for managing traffic, which is always encrypted by DTLS. l The data channel for carrying client data packets.

質問 26
Which two roles does FortiPresence analytics assist in generating presence reports? (Choose two.)

A. Gathering details about on site visitors
B. Comparing current data with historical records
C. Reporting potential threats by guests on site
D. Predicting the number of guest users visiting on-site

正解: A,D

質問 27
Which statement is correct about security profiles on FortiAP devices?

A. Disable DTLS on FortiAP
B. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic
C. Only bridge mode SSIDs can apply the security profiles
D. FortiGate performs inspection the wireless traffic

正解: C

質問 28
Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit C

A wireless network has been installed in a small office building and is being used by a business to connect its wireless clients. The network is used for multiple purposes, including corporate access, guest access, and connecting point-of-sale and IoT devices.
Users connecting to the guest network located in the reception area are reporting slow performance. The network administrator is reviewing the information shown in the exhibits as part of the ongoing investigation of the problem. They show the profile used for the AP and the controller RF analysis output together with a screenshot of the GUI showing a summary of the AP and its neighboring APs.
To improve performance for the users connecting to the guest network in this area, which configuration change is most likely to improve performance?