NSE6_FWF-6.4 Fortinet NSE 6 - Secure Wireless LAN 6.4 Questions and Answers

According to Fortinet training: "When using DARRP, the AP selects the best channel available to use based on the scan results of BSSID/receive signal strength (RSSI) to AC" and "To set the running time for DARRP optimization, use the following CLI command within the wireless controller setting: set darrp-optimize {integer}. Note that DARRP doesn't do continuous spectrum analysis..."

Setting the wireless controller country setting is a standard best practice that should be performed before configuring FortiAPs using a FortiGate wireless controller. The country setting determines the regulatory domain and the allowed channels and power levels for the wireless network. The country setting must match the physical location of the FortiAPs to comply with local regulations and avoid interference issues. References:  Secure Wireless LAN Course Description , page 5;  FortiOS 6.4.0 Handbook - Wireless Controller , page 24.

The correct way to ensure that the RF channels and transmission power limits are appropriately configured for the remote APs is to create a new FortiAP profile and change the country code settings on the profile. This is because the country code settings determine the legal RF channels and transmission power limits for each country, and they are applied at the FortiAP profile level. By creating a new FortiAP profile for the remote APs, you can specify the correct country code for Germany and assign it to the APs. This will ensure that the APs comply with the local regulations and avoid interference with other devices. Configuring the APs individually by overriding the settings in Managed FortiAPs is not recommended, as it is tedious and error-prone. Configuring the controller for the correct country code for Germany is not possible, as the controller can only have one country code setting, which should match its physical location. Cloning a suitable FortiAP profile and changing the county code settings on the profile is not advisable, as it may cause conflicts with other settings that are specific to the original profile. References:  Secure Wireless LAN course description , [FortiOS 6.4.0 Handbook - Wireless Controller]

FortiGate, FortiCloud wireless access points (send visitor data in the form of station reports directly to FortiPresence)

VLAN from the VLAN pool based on a hash of the current number of SSID clients and the number of entries in the VLAN pool.

In the SSID choose WPA2-Enterprise authentication.

WSSO is RADIUS-based authentication that passes the user's user group memberships to the FortiGate.

According to the web search results, Auto TX Power control is a feature that allows the AP to automatically adjust its transmission power based on the RF environment. The goal is to minimize interference and optimize coverage cells for roaming. When the AP detects any other wireless signal stronger than -70 dBm, it means that there is a potential source of interference nearby, so it will reduce its transmission power until it reaches the minimum configured TX power limit. This will reduce the interference and improve coexistence with other devices. When the AP detects any interference from a trusted neighboring AP stronger than -70 dBm, it means that there is a high density of APs in the area, so it will also reduce its transmission power until it reaches the minimum configured TX power limit. This will balance the load and avoid overlapping coverage areas. References:  AP Transmit Power and Enable Power Reduction with Auto TX ,  Transmit Power and Antenna Configuration ,  Meraki Auto RF: Wi-Fi Channel and Power Management