4.- WIRELESS - LAN-EDGE

You are investigating a report of poor wireless performance in a network that you manage. The issue is related to an AP interface in the 5 GHz range.

You are monitoring the channel utilization over time.

What is the recommended maximum utilization value that an interface should not exceed?

• 85%

• 95%

• 75%

• 65%

When you configure a FortiAP wireless interface for auto TX power control, which statement describes how it configures its transmission power?

• Every 30 seconds, the AP will measure the signal strength of the AP using the client. The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm

• Every 30 seconds, FortiGate measures the signal strength of adjacent AP interfaces. It will adjust its own AP power to match the adjacent AP signal strength.

• Every 30 seconds, FortiGate measures the signal strength of adjacent FortiAP interfaces. It will adjust the adjacent AP power to be detectable at -70 dBm.

• Every 30 seconds, FortiGate measures the signal strength of the weakest associated client. The AP will then configure its radio power to match the detected signal strength of the client.

You are setting up an SSID (VAP) to perform RADIUS-authenticated dynamic VLAN allocation.
Which three RADIUS attributes must be supplied by the RADIUS server to enable successful VLAN allocation? 3

• Tunnel-Private-Group-ID

• Tunnel-Pvt-Group-ID

• Tunnel-Preference

• Tunnel-Type

• Tunnel-Medium-Type

An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the Aps and authorize them. However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.

Which configuration setting can the administrator perform to resolve the problem?

• Upgrade the FortiAP firmware image to ensure compatibility with the FortiOS version

• Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.

• Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation

• Enable CAPWAP administrative access on the IPsec interface

A wireless network in a school provides guest access using a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS).

Which two changes must the administrator make to enforce HTTPS authentication? 2

• Which two changes must the administrator make to enforce HTTPS authentication?

• Enable HTTP redirect in the user authentication settings.

• Disable HTTP administrative access on the guest SSID to enforce HTTPS connection.

• Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator.

You are configuring a FortiGate wireless network to support automated wireless client quarantine using IOC

Which two configurations must you put in place for a wireless client to be quarantined successfully? 2

• Configure the wireless network to be in tunnel mode

• Configure the FortiGate device in the Security Fabric with a FortiAnalyzer device.

• Configure a firewall policy to allow communication

• Configure the wireless network to be in bridge mode.

An administrator has deployed multiple dual-band wireless APs in a wireless network. APs are installed at measured distances to ensure fast roaming for the clients. Multiple 2.4 GHz-only wireless clients are connecting to the network, and subsequent monitoring shows that individual AP 2.4 GHz interfaces are being overloaded with wireless connections.

Which configuration change would best resolve the overloading issue?

• Configure load balancing AP handoff on both AP interfaces on all APs

• Configure a client limit on all AP 2.4 GHz interfaces.

• Configure load balancing AP handoff on only the 2.4 GHz interfaces of all APs.

• Configure load balancing frequency handoff on both AP interfaces.

An administrator has configured an SSID in bridge mode for corporate employees. All APs are online and provisioned using default AP profiles. Employees are unable to locate the SSID to connect.

Which two configurations can the administrator verify? 2

• Verify that the broadcast SSID option is enabled in the SSID configuration.

• Verify that the Block Intra-SSID Traffic (Intra-vap-privacy) option in the SSID configuration is disabled

• Verify that the SSID to an AP group that should be broadcasting the SSID is applied.

• Verify that the SSID is manually applied on AP profiles for both 2.4 GHz and 5 GHz radios