Fortinet FCP_FWF_AD-7.4 Practice Test Questions Answers

Channels 52 through 144 in the 5 GHz band (shown as UNII-2, UNII-2-Extended, and some adjacent channels) are marked in regulatory domains as DFS (Dynamic Frequency Selection) channels.

DFS channels must be monitored for radar activity (such as weather radar). If radar is detected, the AP must switch channels to avoid interference.

These channels can be used, but only if the AP supports DFS and performs the necessary checks before use.

WIDS can scan these channels but that’s not the defining characteristic.

Regulatory restrictions (B) apply only if DFS is not supported, which is rare on modern equipment.

Radio Resource Provisioning (C) is unrelated to DFS usage.

Scenario:

The IT department wants to prevent direct communication between wireless stations.

There is one SSID configured in bridge mode (all clients on the same SSID/VLAN, directly bridging to the wired network).

Correct Action:

Block intra-SSID traffic (sometimes called “client isolation” or “intra-SSID privacy”).

This feature prevents wireless clients connected to the same SSID from communicating directly with each other at Layer 2.

Each station can reach the network but cannot reach other wireless clients on the same SSID.

This is the industry-standard method to achieve the stated security goal in a wireless environment, especially in bridge mode.

Why Other Options Are Incorrect:

A. Create unique SSIDs for each FortiAP device

Impractical and unnecessary for user isolation; users on the same SSID but different APs can still be isolated with intra-SSID blocking.

B. Add an upstream layer 3 device on each FortiAP device

Overkill and not required; this does not directly solve intra-SSID traffic.

D. Drop all local traffic in the wireless network

Too broad; you only want to prevent client-to-client communication, not all local traffic (such as traffic to the gateway).

Summary:

Block intra-SSID traffic is the intended and correct configuration to prevent wireless stations from communicating directly while sharing the same SSID in bridge mode.

When a FortiAP is directly cabled to a FortiGate interface, it sends out a broadcast CAPWAP discovery packet.

The FortiGate listens for these on its interfaces and then discovers/provisions the FortiAP automatically.

Analysis of Exhibits:

RF Analysis:

Channel 1 (2.4 GHz) shows very high utilization (91%) and significant overlap/interference from other APs (8 overlap-AP, 7 interfere-AP).

Channel utilization on 2.4 GHz is very high, indicating congestion and contention.

AP Diagnostic Summary:

Radio 1 (2.4 GHz):

Channel Utilization: 78%

Interfering SSIDs: 18

A long list of clients and many SSIDs being broadcast on Channel 1.

Radio 2 (5 GHz):

Channel Utilization: 0% (much lower usage; likely not all clients or SSIDs are using it).

SSID List:

Multiple SSIDs are being broadcast by the AP, which increases management overhead (beacon/probe traffic) and reduces airtime for actual data.

Problem Symptoms:

Guest users in the reception area (on 2.4 GHz, channel 1) are experiencing slow performance.

Option Analysis:

A. Reduce the number of SSIDs being broadcast by the reception AP

Correct.

Each SSID adds additional management overhead (beacons, probes) that consume airtime on already congested 2.4 GHz channels.

Reducing the number of SSIDs frees up airtime for actual client data, which can improve throughput and reduce latency, especially in high-density environments with high channel utilization.

This is a recommended best practice for optimizing Wi-Fi performance in congested environments.

B. Enable frequency handoff on the AP to band steer clients

Helpful if clients support 5 GHz, but not all client devices (especially IoT/guests) do; with such high channel utilization, this is a secondary optimization.

C. Increase the transmission power of the AP radios

This can make interference worse and does not solve airtime congestion; it may also increase contention with neighboring APs.

D. Install another AP in the reception area to improve available bandwidth

Adding more APs on congested channels can actually increase interference and may not help unless channel planning and SSID management are also addressed.

Summary:

Reducing the number of SSIDs is the most direct, configuration-based action that will improve available airtime and performance for clients in a congested, high-utilization environment like the one shown in the exhibits.

Exhibit Analysis:

The diagram shows a section of the 5 GHz Wi-Fi band, with several adjacent channels: 149, 153, 157, 161.

The red line outlines a wider frequency range covering multiple adjacent channels (149, 153, 157).

What this means:

In Wi-Fi (especially 802.11ac/ax), “channel bonding” means combining adjacent 20 MHz channels into a wider channel (40, 80, or even 160 MHz).

The red line indicates the frequency range that would be used if an 80 MHz channel (covering channels 149, 153, 157, 161) is formed by bonding the narrower channels together.

This increases throughput because a wider channel allows more data to be transmitted at once.

Option Review:

A. Practical channel bonding to increase high throughput

Correct. The red line represents the spectrum occupied when several 20 MHz channels are bonded into a single, wider channel to increase data rates.

B. A pool of channels for the wireless radio to broadcast the wireless signal.

Incorrect. A pool would be all available channels, not the bonded range.

C. The range of channels used to allocate available airtime while transmitting data

Incorrect. This is about frequency, not time.

D. The total length of the wireless signal wavelength

Incorrect. The line indicates frequency spectrum, not wavelength length.

Summary:

The red line shows how multiple adjacent 20 MHz channels are bonded together (in this case, most likely into an 80 MHz channel), a practical method to increase wireless throughput in modern Wi-Fi networks.