Exam NSE6_FWF-6.4 topic 1 question 5 discussion

According to study guide , A & C are correct. A) is correct because putting one of the Radios in the AP in background scanning mode makes it work as a normal Radio that broadcasts SSIDs, but every 600 seconds performs scans for rogue APs. This have a bad detection rate and can make packets be dropped in the wireless network, but half-asses the monitoring requirement. The point is yeah, background scanning allows for clients to connect to the wireless. Using a dedicated radio does not, it performs foreground scans and that is all it does. C) is correct because, according to page 177, background scanning is automatic if DARRP is enabled. B) is not correct because if the radio is configured for background scanning, it can not suppress the rogue AP. Fortinet pretty much says they even can't detect rogue APs while in this mode, so supressing is out of the question. In page 180 it says "Supressing Rogue APs Requires dedicated monitor mode - Not possible with background scans" D is not correct because, as I understand according to page 177, it checks for all channels every 20 ms, not just for the ones it has configured.

The correct answer is B and C

Option A and Option C. B is wrong because Background don't do suppress AP, but dedicated monitor is doing suppress AP.

Option A and Option C.

Option A and Option C.

B & C - But Im not sure. Shitty Question. All of them are wrong to me.

B and D are more correct than the rest. Option A is definitely incorrect because, in dedicated monitor mode, the radio can not support the connection of wireless clients, and option C is not mandatory for rogue scanning.

I think D is definitely correct. On page 177 in study guide, it says "By default, a scan period starts every 600 seconds, and each second aa different channel is monitored for 20 ms until all channels have been checked". Answer A could be correct if it means that the AP is still supporting wireless clients, since you have two radios. Page 176 in study guide says you can have one radio for scanning and one for normal use. But not sure if that is "background scanning". Answer C could be correct if it means that background scanning is automatically enabled when DARRP is enabled. But the answer does not remotely say that. I'd go with A and D.

A. YES - Background scannig support wifi clients. B. NO - Suppress rogue AP only in dedicated monitor mode C. YES - Background rogue scanning requires DARRP D. NO - Background scannig only detect on selected channel

B an D

Dedicated radios do not do background scanning: A, B and D should be wrong. One of them has to be right, however... Have to check C.

I think all the answers are wrong. A dedicated radio per def cannot support clients and does active scanning and not backgroud scanning. A dedicated radio can suppress rougue AP but isn't doing a backgroud scan. Backgroud scanning is enabled if DARRP is implemneted but can be enabled without DARRP.

B and C

Answer is B and C, as per study guide - Background scanning require DARRP for roque detection. Dedicated monitor allows you to suppress APs with deauth frames.

C and D are correct. A is incorrect - dedicated radio doesn't support SSID broadcasting and wireless client connections; B is incorrect - background scanning doesn't do rouge AP suppression.