Fortinet fcp fwf ad 7 4 practice test
FCP - Secure Wireless LAN 7.4 Administrator
Question 1
Refer to the exhibit.
An administrator authorizes two FortiAP devices connected to this wireless controller However, one
FortiAP is not able to broadcast the SSIDs. What must the administrator do to fix the issue?
- A. Enable the radios on the FAP23JF FortiAP profile.
- B. Replace the FortiAP device model to match the other device
- C. Disable the override setting on the FortiAP that is preventing it from broadcasting SSIDs
- D. Assign the FAP231F FortiAP profile to the problematic FortiAP device
Answer:
A
Question 2
How can you find the upstream and downstream link rates of a wireless client connected to a
FortiAP?
- A. On the FortiGate GUI using the WiFi Client monitor
- B. On the FortiAP CLI using the cw_diag ksta command
- C. On the FortiGate CL! using the diagnose wireless-controller wlac -d sta command
- D. On the FortiAP CLI using the cw_diag -d sea command
Answer:
B
Question 3
Which two threats on wireless networks are detected by WIDS? (Choose two.)
- A. Brute-force dictionary attacks
- B. Unauthorized wireless connection
- C. Rogue access points
- D. WPA2 authentication vulnerabilities
Answer:
B, C
Question 4
When enabling a Security Fabric connection on a FortiGate interface to manage FortiAP devices,
which two types of CAPWAP communication channels are established between FortiGate and the
FortiAP devices'? (Choose two)
- A. Control channels
- B. Data channels
- C. Security channels
- D. Fortlink channels
Answer:
A, B
Question 5
Exhibit.
Refer to the exhibit of a wireless client performance monitor Which performance metric is abnormal
for this wireless client?
- A. The wireless client has been experiencing high background noise within the last 5 minutes
- B. The wireless client has been dropping half of the packets transmitted within the last 5 minutes.
- C. The wireless client has been transmitting traffic with all performance metrics within the normal levels
- D. The wireless client has been switching between available wireless bands within the last 5 minutes
Answer:
B
Question 6
Which two statements are correct about FortiAP and rogue APs? (Choose two.)
- A. FortiAP offers automatic suppression of rogue APs when broadcasting SSIDs
- B. FortiAP scans rogue APs in the background while broadcasting SSIDs
- C. FortiAP detects rogue APs on dedicated monitoring radios
- D. FortiAP suppresses detected rogue APs manually
Answer:
B, C
Question 7
Refer to the exhibit.
User1 is part of the infrastructure department and connects to the ONBOARD wireless network using
the credentials uteri. However, the dynamic VLAN assignment is not working
Which configuration step must you take to fix this issue?
- A. Disable the DHCP server on ONBOARD to allow VLAN assignment.
- B. Add user1 in one of the VLAN names
- C. Update user1 RADIUS attributes to include a VLAN ID attribute ID
- D. Create a new VLAN name infrastructure' with a VLAN ID associated with it
Answer:
C
Question 8
An IT department must provide wireless security to employees connected over remote hortiAP
devices who must access corporate resources at the mam office Which action must the IT
department take to enforce security policies for all wireless stations accessing corporate resources
across all remote locations?
- A. Configure VPN tunnels to transport secured data between the main office and branch offices
- B. Deploy further onsite IT personnel to these remote sites to enforce security inspection
- C. Transfer local resources from corporate data centers to cloud services to offer access to remote users
- D. Implement a teleworker topology to split traffic for further security inspection
Answer:
A
Question 9
A wireless station has reported several connection issues with FortiAP that have not been resolved
using standard troubleshooting tools As a wireless network administrator you are planning to
perform additional advanced-level troubleshooting Which two steps must you take to analyze and
troubleshoot the issue? (Choose two)
- A. Create and assign a new FortiAP profile detected for troubleshooting
- B. Capture the wireless station traffic in the air
- C. Review event logs reporting wireless station activities
- D. Collect low-level information on FortiAP power management
Answer:
B
Question 10
Which two rotes does FortiPresence analytics assist in generating presence reports'' (Choose two.)
- A. Gathering details about on-site guest users
- B. Reporting potential threats by on-site guest users
- C. Comparing current data with historical records
- D. Predicting the number of on-site guest users
Answer:
A, C
Question 11
Refer to the exhibit.
What does the red line represent?
- A. Practical channel bonding to increase high throughput
- B. A pool of channels for the wireless radio to broadcast the wireless signal.
- C. The range of channels used to allocate available airtime while transmitting data
- D. The total length of the wireless signal wavelength
Answer:
A
Question 12
Refer to the exhibits.
FortiGate is pushing the POST parameters shown in the exhibit to the external captive portal server
The wireless client redirection fails because certificate validation occurred while loading the web
page
The wireless client browser uses the FortiGate self-signed certificate to access secured web pages
The SSID on FortiGate has the captive portal setting
What could cause the certification validation error on the wireless client?
- A. The FortiGate IP address in the POST parameters is using a numerical IP address
- B. The external server address is not the FQDN address
- C. The used credential is not embedded in the captive portal parameters
- D. The captive portal setting in the authentication setting is set to use FQDN as the captive portal type
Answer:
A
Question 13
Refer to the exhibit.
A new security policy is made by the IT department to prevent direct communication between
wireless stations There is one SSID configured in bridge mode Which statement is correct as a plan of
action to update the wireless network configuration?
- A. Create unique SSIDs for each FortiAP device
- B. Add an upstream layer 3 device on each FortiAP device
- C. Block intra-SSID traffic on the wireless network
- D. Drop all local traffic in the wireless network
Answer:
C
Question 14
Refer to the exhibits.
The exhibits show the AP profile the controller RF analysis output and a diagnostic summary of the
AP and neighboring APs
The wireless network is used for multiple purposes including corporate access guest access and
connecting point-of-sale and loT devices Users connecting to the guest network located in the
reception area are reporting stow performance
Which configuration change is most likely to improve performance?
- A. Reduce the number of SSlDs being broadcast by the reception AP
- B. Enable frequency handoff on the AP to band steer clients
- C. increase the transmission power of the AP radios
- D. install another AP in the reception area to improve available bandwidth.
Answer:
A
Question 15
Refer to the exhibit.
Which statement is correct about channels 52 through 144 in the 5 GHz band?
- A. The channels will be scanned by the wireless intrusion detection system (WIDS)
- B. The channels cannot be used because of regulatory channel restrictions
- C. The channels can be used only when Radio Resource Provisioning is enabled
- D. The channels are subject to dynamic frequency selection (DPS) regulations
Answer:
B