[2022年更新]NSE6_FWF-6.4試験問題集でテストエンジン練習テスト問題
合格できるNSE6_FWF-6.4試験[2022年03月04日]最新30問題
質問 12
Refer to the exhibits.
Exhibit A
Exhibit B
The exhibits show the diagnose debug log of a station connection taken on the controller CLI.
Which security mode is used by the wireless connection?
- A. WPA2 Personal and radius MAC filtering
- B. WPA3 Enterprise
- C. Open, with radius MAC filtering
- D. WPA2 Enterprise
正解: D
解説:
Best security option is WPA2-AES.
質問 13
Which two configurations are compatible for Wireless Single Sign-On (WSSO)? (Choose two.)
- A. A VAP configured to authenticate using a radius server
- B. A VAP configured to authenticate locally on FortiGate
- C. A VAP configured for captive portal authentication
- D. A VAP configured for WPA2 or 3 Enterprise
正解: A,D
解説:
In the SSID choose WPA2-Enterprise authentication.
WSSO is RADIUS-based authentication that passes the user's user group memberships to the FortiGate.
質問 14
A tunnel mode wireless network is configured on a FortiGate wireless controller.
Which task must be completed before the wireless network can be used?
- A. The wireless network to Internet firewall policy must be configured
- B. The wireless network interface must be assigned a Layer 3 address
- C. Security Fabric and HTTPS must be enabled on the wireless network interface
- D. The new network must be manually assigned to a FortiAP profile.
正解: A
解説:
A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.
質問 15
Where in the controller interface can you find a wireless client's upstream and downstream link rates?
- A. On the controller CLI, using the diag wireless-controller wlac -d sta command
- B. On the controller CLI, using the WiFi Client monitor
- C. On the AP CLI, using the cw_diag -d sta command
- D. On the AP CLI, using the cw_diag ksta command
正解: A
質問 16
Which two phases are part of the process to plan a wireless design project? (Choose two.)
- A. Site survey phase
- B. Project information phase
- C. Hardware selection phase
- D. Installation phase
正解: A,D
解説:
Reference:
https://www.automation.com/en-us/articles/2015-2/wireless-device-network-planning-and-design
質問 17
Which factor is the best indicator of wireless client connection quality?
- A. The receive signal strength (RSS) of the client at the AP
- B. Downstream link rate, the connection rate for the AP to the client
- C. Upstream link rate, the connection rate for the client to the AP
- D. The channel utilization of the channel the client is using
正解: A
解説:
SSI, or "Received Signal Strength Indicator," is a measurement of how well your device can hear a signal from an access point or router. It's a value that is useful for determining if you have enough signal to get a good wireless connection.
質問 18
When configuring Auto TX Power control on an AP radio, which two statements best describe how the radio responds? (Choose two.)
- A. When the AP detects any interference from a trusted neighboring AP stronger that -70 dBm, it will reduce its transmission power until it reaches the minimum configured TX power limit.
- B. When the AP detects any wireless client signal weaker than -70 dBm, it will reduce its transmission power until it reaches the maximum configured TX power limit.
- C. When the AP detects any other wireless signal stronger that -70 dBm, it will reduce its transmission power until it reaches the minimum configured TX power limit.
- D. When the AP detects PF Interference from an unknown source such as a cordless phone with a signal stronger that -70 dBm, it will increase its transmission power until it reaches the maximum configured TX power limit.
正解: B,C
質問 19
Which statement is correct about security profiles on FortiAP devices?
- A. Disable DTLS on FortiAP
- B. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic
- C. Only bridge mode SSIDs can apply the security profiles
- D. FortiGate performs inspection the wireless traffic
正解: C
質問 20
As a network administrator, you are responsible for managing an enterprise secure wireless LAN. The controller is based in the United States, and you have been asked to deploy a number of managed APs in a remote office in Germany.
What is the correct way to ensure that the RF channels and transmission power limits are appropriately configured for the remote APs?
- A. Configure the controller for the correct country code for Germany
- B. Configure the APs individually by overriding the settings in Managed FortiAPs
- C. Create a new FortiAP profile and change the county code settings on the profile
- D. Clone a suitable FortiAP profile and change the county code settings on the profile
正解: D
質問 21
Refer to the exhibit.
What does the asterisk (*) symbol beside the channel mean?
- A. Indicates channels that will be scanned by the Wireless Intrusion Detection System (WIDS)
- B. Indicates channels that are subject to dynamic frequency selection (DFS) regulations
- C. Indicates channels that cannot be used because of regulatory channel restrictions
- D. Indicates channels that can be used only when Radio Resource Provisioning is enabled
正解: D
質問 22
You are investigating a wireless performance issue and you are trying to audit the neighboring APs in the PF environment. You review the Rogue APs widget on the GUI but it is empty, despite the known presence of other APs.
Which configuration change will allow neighboring APs to be successfully detected?
- A. Enable Locate WiFi clients when not connected in the relevant AP profiles.
- B. Ensure that all allowed channels are enabled for the AP radios.
- C. Enable Radio resource provisioning on the relevant AP profiles.
- D. Enable Monitor channel utilization on the relevant AP profiles.
正解: C
解説:
The ARRP (Automatic Radio Resource Provisioning) profile improves upon DARRP (Distributed Automatic Radio Resource Provisioning) by allowing more factors to be considered to optimize channel selection among FortiAPs. DARRP uses the neighbor APs channels and signal strength collected from the background scan for channel selection.
質問 23
When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)
- A. 509 certificates and work for connections that use Secure Socket Layer/Transport Level Security (SSL/TLS). Both client and server certificates have additional requirements.
- B. A WPA2 or WPA3 Enterprise wireless network
- C. An X.509 to authenticate the authentication server
- D. An X.509 certificate to authenticate the client
- E. A WPA2 or WPA3 personal wireless network
正解: C,D
質問 24
......
Fortinet NSE6_FWF-6.4リアルな2022年最新の知能問題集模擬試験問題集：https://jp.fast2test.com/NSE6_FWF-6.4-premium-file.html
Fortinet NSE6_FWF-6.4リアルな問題と100%カバーリアルな試験問題：https://drive.google.com/open?id=1uJelOQmMbQdjolrZxX-JZBtX-yR6TsYS