Fortinet Fortinet NSE 6 - Secure Wireless LAN 6.4 NSE6_FWF-6.4 Exam Dumps: Updated Questions & Answers (October 2025)

Security profiles are a feature that allows FortiAP devices to apply various security functions to the wireless traffic, such as antivirus, web filter, application control, intrusion prevention, and botnet scanning. Security profiles can be enabled on both tunnel-mode and bridge-mode SSIDs, and can be applied either through the wireless controller configuration or through firewall policies on the FortiGate device. Security profiles can also inspect encrypted wireless traffic, as long as the FortiAP device has access to the encryption keys.

Security profiles on FortiAP devices can use FortiGate subscription services to inspect the traffic, such as FortiGuard Antivirus, FortiGuard Web Filter, FortiGuard Application Control, and FortiGuard IPS. This means that the FortiAP device can leverage the latest threat intelligence and updates from Fortinet to protect the wireless network from malicious or unwanted content.

Therefore, the correct answer is D. Security profiles on FortiAP devices can use FortiGate subscription to inspect the traffic.

References:

FortiAP-S and FortiAP-U bridge mode security profiles

Configuring security | FortiAP / FortiWiFi 6.4.2

Security profiles - Fortinet Document Library

This frequencies are also used by other licensed applications, wireless LANs have to use a specific method to gain access to certain higher frequencies and this method is known as DFS.

The control channel for managing traffic, which is always encrypted by DTLS. l The data channel for carrying client data packets.

According to the web search results, Auto TX Power control is a feature that allows the AP to automatically adjust its transmission power based on the RF environment. The goal is to minimize interference and optimize coverage cells for roaming. When the AP detects any other wireless signal stronger than -70 dBm, it means that there is a potential source of interference nearby, so it will reduce its transmission power until it reaches the minimum configured TX power limit. This will reduce the interference and improve coexistence with other devices. When the AP detects any interference from a trusted neighboring AP stronger than -70 dBm, it means that there is a high density of APs in the area, so it will also reduce its transmission power until it reaches the minimum configured TX power limit. This will balance the load and avoid overlapping coverage areas. References: AP Transmit Power and Enable Power Reduction with Auto TX, Transmit Power and Antenna Configuration, Meraki Auto RF: Wi-Fi Channel and Power Management

According to the web search results, FortiPresence supports social networks authentication and short message service authentication as public authentication services for guest Wi-Fi access. Social networks authentication allows visitors to log in using their existing social media accounts, such as Facebook, Twitter, LinkedIn, Google, and Instagram. Short message service authentication allows visitors to receive a one-time password via SMS to their mobile phone number. These authentication methods are convenient and secure for visitors and provide valuable data for businesses. Software security token authentication and hardware security token authentication are not supported by FortiPresence as public authentication services for guest Wi-Fi access. References: Configuring Captive Portal | FortiPresence 1.2.0, Configuring Captive Portal | FortiPresence 22.4.0

The ARRP (Automatic Radio Resource Provisioning) profile improves upon DARRP (Distributed Automatic Radio Resource Provisioning) by allowing more factors to be considered to optimize channel selection among FortiAPs. DARRP uses the neighbor APs channels and signal strength collected from the background scan for channel selection.

According to Fortinet training: "When using DARRP, the AP selects the best channel available to use based on the scan results of BSSID/receive signal strength (RSSI) to AC" and "To set the running time for DARRP optimization, use the following CLI command within the wireless controller setting: set darrp-optimize {integer}. Note that DARRP doesn't do continuous spectrum analysis..."