[2023年11月26日]NSE6_FWF-6.4試験ブレーン問題集で学習注釈と理論
合格させるFortinet NSE6_FWF-6.4テスト練習テスト問題試験問題集
質問 # 14
When using FortiPresence as a captive portal, which two types of public authentication services can be used to access guest Wi-Fi? (Choose two.)
- A. Short message service authentication
- B. Software security token authentication
- C. Hardware security token authentication
- D. Social networks authentication
正解：C、D
解説：
This information along with the social network authentication logins with Facebook, Google, Instagram, LinkedIn, or FortiPresence using your WiFi.
Captive Portal configurations for social media logins and internet access. You can add and manage sites using the integrated Google maps and manoeuvre your hardware infrastructure easily.
質問 # 15
Refer to the exhibit.
If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?
- A. Areas with the signal strength equal or stronger than -68 dB are highlighted in multicolor
- B. Areas with the signal strength equal to -68 dB are zoomed in to provide better visibility
- C. Areas with the signal strength weaker than -68 dB are cut out of the map
- D. Areas with the signal strength weaker than -68 dB are highlighted in orange and red to indicate that no signal was propagated by the APs.
正解：D
質問 # 16
Which statement describes FortiPresence location map functionality?
- A. Provides real-time insight into user usage stats
- B. Provides real-time insight into user movements
- C. Provides real-time insight into user online activity
- D. Provides real-time insight into user purchase activity
正解：B
解説：
Explanation
(Page 88 Study Guide) "FortiPresence provides data and analytics based on demographic segmentation and visitor movement between areas" According to the web search results, FortiPresence location map functionality provides real-time insight into user movements. It uses the location data from the Fortinet access points to detect each visitor's smartphone Wi-Fi signal and track their location and behavior within the site. It also provides data visualization in a customizable format, such as heat maps and animated flows, to show the visitor traffic and movement patterns.
This geographical data analysis can help improve visitor experiences and business outcomes.
References: Location Analytics | FortiPresence 22.4.0 - Fortinet Documentation, FortiPresence Data Sheet
質問 # 17
Refer to the exhibit.
If the signal is set to -68 dB on the FortiPlanner site survey reading, which statement is correct regarding the coverage area?
- A. Areas with the signal strength weaker than -68 dB are shown with blackbackground.
- B. Areas with the signal strength weaker than -68 dB are highlighted in orangeand red to indicate that no signal was propagated by the APS.
- C. Areas with the signal strength equal to -68 dB are zoomed in to providebetter visibility.
- D. Areas with the signal strength equal or stronger than -68 dB are highlighted in green circles.
正解：D
解説：
Explanation
The FortiPlanner site survey reading is a tool that shows the predicted signal strength of the wireless network based on the floor plan, the placement of the APs, and the propagation model. The signal strength is measured in decibels (dB), which is a logarithmic scale that indicates how much power the signal has. The higher the dB value, the stronger the signal.
The site survey reading allows the user to set a threshold value for the signal strength, which is -68 dB by default. This means that any area with a signal strength equal or stronger than -68 dB is considered to have adequate coverage for most wireless applications. These areas are highlighted in green circles on the floor plan. Any area with a signal strength weaker than -68 dB is considered to have poor coverage or no coverage at all. These areas are shown with different colors, such as yellow, orange, red, or black, depending on how weak the signal is.
Therefore, the correct answer is D. Areas with the signal strength equal or stronger than -68 dB are highlighted in green circles.
References:
FortiPlanner 2.0 User Guide, page 28
FortiPlanner Data Sheet, page 2
FortiPlanner 2.2 User Guide, page 19
質問 # 18
Refer to the exhibit.
What does the asterisk (*) symbol beside the channel mean?
- A. Indicates channels that cannot be used because of regulatory channel restrictions
- B. Indicates channels that are subject to dynamic frequency selection (DFS) regulations
- C. Indicates channels that can be used only when Radio Resource Provisioning is enabled
- D. Indicates channels that will be scanned by the Wireless Intrusion Detection System (WIDS)
正解：C
質問 # 19
Refer to the exhibits.
Exhibit A
Exhibit B
The exhibits show the diagnose debug log of a station connection taken on the controller CLI.
Which security mode is used by the wireless connection?
- A. WPA2 Enterprise
- B. Open, with radius MAC filtering
- C. WPA2 Personal and radius MAC filtering
- D. WPA3 Enterprise
正解：A
解説：
Best security option is WPA2-AES.
質問 # 20
You are investigating a wireless performance issue and you are trying to audit the neighboring APs in the PF environment. You review the Rogue APs widget on the GUI but it is empty, despite the known presence of other APs.
Which configuration change will allow neighboring APs to be successfully detected?
- A. Ensure that all allowed channels are enabled for the AP radios.
- B. Enable Locate WiFi clients when not connected in the relevant AP profiles.
- C. Enable Radio resource provisioning on the relevant AP profiles.
- D. Enable Monitor channel utilization on the relevant AP profiles.
正解：C
解説：
The ARRP (Automatic Radio Resource Provisioning) profile improves upon DARRP (Distributed Automatic Radio Resource Provisioning) by allowing more factors to be considered to optimize channel selection among FortiAPs. DARRP uses the neighbor APs channels and signal strength collected from the background scan for channel selection.
質問 # 21
Which statement describes FortiPresence location map functionality?
- A. Provides real-time insight into user usage stats
- B. Provides real-time insight into user movements
- C. Provides real-time insight into user online activity
- D. Provides real-time insight into user purchase activity
正解：B
解説：
Explanation
(Page 88 Study Guide) "FortiPresence provides data and analytics based on demographic segmentation and visitor movement between areas" According to the web search results, FortiPresence location map functionality provides real-time insight into user movements. It uses the location data from the Fortinet access points to detect each visitor's smartphone Wi-Fi signal and track their location and behavior within the site. It also provides data visualization in a customizable format, such as heat maps and animated flows, to show the visitor traffic and movement patterns.
This geographical data analysis can help improve visitor experiences and business outcomes.
References: Location Analytics | FortiPresence 22.4.0 - Fortinet Documentation, FortiPresence Data Sheet
質問 # 22
When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)
- A. An X.509 to authenticate the authentication server
- B. A WPA2 or WPA3 personal wireless network
- C. An X.509 certificate to authenticate the client
- D. A WPA2 or WPA3 Enterprise wireless network
正解：A、D
質問 # 23
A tunnel mode wireless network is configured on a FortiGate wireless controller.
Which task must be completed before the wireless network can be used?
- A. The new network must be manually assigned to a FortiAP profile.
- B. Security Fabric and HTTPS must be enabled on the wireless network interface
- C. The wireless network to Internet firewall policy must be configured
- D. The wireless network interface must be assigned a Layer 3 address
正解：C
解説：
A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.
質問 # 24
Which two phases are part of the process to plan a wireless design project? (Choose two.)
- A. Site survey phase
- B. Hardware selection phase
- C. Installation phase
- D. Project information phase
正解：A、D
質問 # 25
Part of the location service registration process is to link FortiAPs in FortiPresence.
Which two management services can configure the discovered AP registration information from the FortiPresence cloud? (Choose two.)
- A. FortiGate
- B. FortiSwitch
- C. FortiAP Cloud
- D. AP Manager
正解：A、C
解説：
FortiGate, FortiCloud wireless access points (send visitor data in the form of station reports directly to FortiPresence)
質問 # 26
Which of the following is a requirement to generate analytic reports using on-site FortiPresence deployment?
- A. Wireless network security must be set to open
- B. DTLS encryption on wireless traffic must be turned off
- C. Two wireless APs must be sending data
- D. SQL services must be running
正解：C
解説：
FortiPresence VM is deployed locally on your site and consists of two virtual machines. All the analytics data collected and computed resides locally on the VMs.
質問 # 27
As a network administrator, you are responsible for managing an enterprise secure wireless LAN. The controller is based in the United States, and you have been asked to deploy a number of managed APs in a remote office in Germany.
What is the correct way to ensure that the RF channels and transmission power limits are appropriately configured for the remote APs?
- A. Create a new FortiAP profile and change the county code settings on the profile
- B. Configure the APs individually by overriding the settings in Managed FortiAPs
- C. Clone a suitable FortiAP profile and change the county code settings on the profile
- D. Configure the controller for the correct country code for Germany
正解：C
質問 # 28
Which statement is correct about security profiles on FortiAP devices?
- A. Security profiles are only supported on Bridge-mode SSIDs.
- B. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic.
- C. Security profiles can only be applied via firewall policies on the FortiGate.
- D. Security profiles can only be applied to unencrypted wireless traffic.
正解：B
解説：
Explanation
Security profiles are a feature that allows FortiAP devices to apply various security functions to the wireless traffic, such as antivirus, web filter, application control, intrusion prevention, and botnet scanning. Security profiles can be enabled on both tunnel-mode and bridge-mode SSIDs, and can be applied either through the wireless controller configuration or through firewall policies on the FortiGate device. Security profiles can also inspect encrypted wireless traffic, as long as the FortiAP device has access to the encryption keys.
Security profiles on FortiAP devices can use FortiGate subscription services to inspect the traffic, such as FortiGuard Antivirus, FortiGuard Web Filter, FortiGuard Application Control, and FortiGuard IPS. This means that the FortiAP device can leverage the latest threat intelligence and updates from Fortinet to protect the wireless network from malicious or unwanted content.
Therefore, the correct answer is D. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic.
References:
FortiAP-S and FortiAP-U bridge mode security profiles
Configuring security | FortiAP / FortiWiFi 6.4.2
Security profiles - Fortinet Document Library
質問 # 29
When enabling security fabric on the FortiGate interface to manage FortiAPs, which two types of communication channels are established between FortiGate and FortiAPs? (Choose two.)
- A. Control channels
- B. Security channels
- C. FortLink channels
- D. Data channels
正解：A、D
解説：
The control channel for managing traffic, which is always encrypted by DTLS. l The data channel for carrying client data packets.
質問 # 30
......
厳密検証されたNSE6_FWF-6.4問題集と解答でNSE6_FWF-6.4問題集と正解付き：https://jp.fast2test.com/NSE6_FWF-6.4-premium-file.html
ベストNSE 6 Network Security Specialist学習ガイドNSE6_FWF-6.4試験：https://drive.google.com/open?id=1uJelOQmMbQdjolrZxX-JZBtX-yR6TsYS