Question 1

A tunnel mode wireless network is configured on a FortiGate wireless controller.

Which task must be completed before the wireless network can be used?

AThe wireless network interface must be assigned a Layer 3 address

BSecurity Fabric and HTTPS must be enabled on the wireless network interface

CThe wireless network to Internet firewall policy must be configured

DThe new network must be manually assigned to a FortiAP profile.

Answer : C

A FortiGate unit is an industry leading enterprise firewall. In addition to consolidating all the functions of a network firewall, IPS, anti-malware, VPN, WAN optimization, Web filtering, and application control in a single platform, FortiGate also has an integrated Wi-Fi controller.

Question 2

What is the first discovery method used by FortiAP to locate the FortiGate wireless controller in the default configuration?

ADHCP

BStatic

CBroadcast

DMulticast

Answer : B

Question 3

When deploying a wireless network that is authenticated using EAP PEAP, which two configurations are required? (Choose two.)

AAn X.509 certificate to authenticate the client

BAn X.509 to authenticate the authentication server

CA WPA2 or WPA3 personal wireless network

DA WPA2 or WPA3 Enterprise wireless network

Answer : B, D

Question 4

Which statement is correct about security profiles on FortiAP devices?

ASecurity profiles on FortiAP devices can use FortiGate subscription to inspect the traffic

BOnly bridge mode SSIDs can apply the security profiles

CDisable DTLS on FortiAP

DFortiGate performs inspection the wireless traffic

Answer : B

Question 5

How are wireless clients assigned to a dynamic VLAN configured for hash mode?

AUsing the current number of wireless clients connected to the SSID and the number of IPs available in the least busy VLAN

BUsing the current number of wireless clients connected to the SSID and the number of clients allocated to each of the VLANs

CUsing the current number of wireless clients connected to the SSID and the number of VLANs available in the pool

DUsing the current number of wireless clients connected to the SSID and the group the FortiAP is a member of