Exam NSE6_FWF-6.4 topic 1 question 19 discussion

Actual exam question from Fortinet's NSE6_FWF-6.4

Question #: 19
Topic #: 1

Six APs are located in a remotely based branch office and are managed by a centrally hosted FortiGate. Multiple wireless users frequently connect and roam between the APs in the remote office.
The network they connect to, is secured with WPA2-PSK. As currently configured, the WAN connection between the branch office and the centrally hosted
FortiGate is unreliable.
Which configuration would enable the most reliable wireless connectivity for the remote clients?

A. Configure a tunnel mode wireless network and enable split tunneling to the local network
B. Configure a bridge mode wireless network and enable the Local standalone configuration option
C. Configure a bridge mode wireless network and enable the Local authentication configuration option
D. Install supported FortiAP and configure a bridge mode wireless network

Show Suggested Answer

Suggested Answer: B 🗳️

by skouba at Feb. 20, 2022, 4:49 p.m.

Comments

Submit Cancel

Yorkylad

11 months ago

Selected Answer: B

Answer B would be correct if the client is already authenticated but new clients would not connect, As the question asks mutliple users frequently connect and roam, you could say that it should be B and C. For roaming then answer B. Bad question.

upvoted 1 times

...

p3dr01n

1 year ago

Selected Answer: B

If you enable "Local Standalone" Wifi clients are always authenticated localy on AP.

upvoted 3 times

...

Nomorg

1 year, 2 months ago

Selected Answer: B

I would say that B is the correct one. The wan connection is unreliable. Look for “Continued FortiAP operation when WiFi controller connection is down” im the link here: https://docs.fortinet.com/document/fortiap/7.0.4/fortiwifi-and-fortiap-configuration-guide/442078/how-to-configure-a-fortiap-local-bridge-private-cloud-managed-ap

upvoted 3 times

...

draven76

1 year, 5 months ago

Selected Answer: C

C seems to be correct.

upvoted 2 times

...

wedda

1 year, 5 months ago

Actually, I although that would work, the best answer is C Study Guide Page 240. The question states WPA2-PSK, so the important thing is local authentication.

upvoted 1 times

...

1 year, 11 months ago

B is correct Local standalone mode is enabled. This allows new Wi-Fi client connections when the controller is down. This field is available only if the other conditions have been met.

upvoted 1 times

...