MTCNA Beserta Kunci Jawaban
Exam A
QUESTION 1
Action=redirect is applied in:
A. chain=srcnat
B. chain=dstnat
C. chain=forward
D. chain=output
Correct Answer: B
Section: (none)
Action=redirect is applied in:
A. chain=srcnat
B. chain=dstnat
C. chain=forward
D. chain=output
Correct Answer: B
Section: (none)
QUESTION 2
You have 802.11b/g wireless card. What frequencies are available to you?
A. 5800MHz
B. 2412MHz
C. 5210MHz
D. 2422MHz
E. 2327MHz
Correct Answer: BD
Section: (none)
You have 802.11b/g wireless card. What frequencies are available to you?
A. 5800MHz
B. 2412MHz
C. 5210MHz
D. 2422MHz
E. 2327MHz
Correct Answer: BD
Section: (none)
QUESTION 3
Mark all correct statements about /export (rsc file)
A. Exports logs from /log print
B. Exports full configuration of the router
C. Exports only part of the configuration (for example /ip firewall)
D. Exports scripts from /system script
E. Exports files could not edited
Correct Answer: BCD
Section: (none)
Mark all correct statements about /export (rsc file)
A. Exports logs from /log print
B. Exports full configuration of the router
C. Exports only part of the configuration (for example /ip firewall)
D. Exports scripts from /system script
E. Exports files could not edited
Correct Answer: BCD
Section: (none)
QUESTION 4
What wireless card can we use to achieve 100 Mbps actual wireless throughput?
A. 802.11 b/g
B. 802.11 a/b/g
C. 802.11 a
D. 802.11 a/n
E. 802.11 a/b/g/n
Correct Answer: DE
Section: (none)
What wireless card can we use to achieve 100 Mbps actual wireless throughput?
A. 802.11 b/g
B. 802.11 a/b/g
C. 802.11 a
D. 802.11 a/n
E. 802.11 a/b/g/n
Correct Answer: DE
Section: (none)
QUESTION 5
It is possible to add user-defined chains in ip firewall mangle?
A. True
B. False
Correct Answer: A
Section: (none)
It is possible to add user-defined chains in ip firewall mangle?
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 6
Choose all valid hosts address range for subnet 15.242.55.62/27
A. 15.242.55.31-15.242.55.62
B. 15.242.55.32-15.242.55.63
C. 15.242.55.33-15.242.55.62
D. 15.242.55.33-15.242.55.63
Correct Answer: C
Section: (none)
Choose all valid hosts address range for subnet 15.242.55.62/27
A. 15.242.55.31-15.242.55.62
B. 15.242.55.32-15.242.55.63
C. 15.242.55.33-15.242.55.62
D. 15.242.55.33-15.242.55.63
Correct Answer: C
Section: (none)
QUESTION 7
Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1?
A. /ip firewall nat add action=masquerade chain=srcnat
B. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
C. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
D. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
Correct Answer: ABD
Section: (none)
Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1?
A. /ip firewall nat add action=masquerade chain=srcnat
B. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
C. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
D. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
Correct Answer: ABD
Section: (none)
QUESTION 8
Mark all features that are compatible with Nstreme
A. WDS between a device in station-wds mode and a device in station-wds mode
B. Encryption
C. WDS between a device in ap-bridge mode with a device in station-wds mode
D. Bridging a device in station mode with a device in ap-bridge mode
Correct Answer: BC
Section: (none)
Mark all features that are compatible with Nstreme
A. WDS between a device in station-wds mode and a device in station-wds mode
B. Encryption
C. WDS between a device in ap-bridge mode with a device in station-wds mode
D. Bridging a device in station mode with a device in ap-bridge mode
Correct Answer: BC
Section: (none)
QUESTION 9
Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and it's a driver
issue?
A. Yes
B. No
Correct Answer: B
Section: (none)
Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and it's a driver
issue?
A. Yes
B. No
Correct Answer: B
Section: (none)
QUESTION 10
What protocol is used for Ping and Trace route
A. DHCP
B. IP
C. TCP
D. ICMP
E. UDP
Correct Answer: D
Section: (none)
What protocol is used for Ping and Trace route
A. DHCP
B. IP
C. TCP
D. ICMP
E. UDP
Correct Answer: D
Section: (none)
QUESTION 11
From which of the following locations can you obtain Winbox?
A. Router's webpage
B. Files menu in your router
C. Via the console cable
D. mikrotik.com
Correct Answer: AD
Section: (none)
From which of the following locations can you obtain Winbox?
A. Router's webpage
B. Files menu in your router
C. Via the console cable
D. mikrotik.com
Correct Answer: AD
Section: (none)
QUESTION 12
What kind of users are listed in the Secrets window of the PPP menu?
A. pptp users
B. l2tp users
C. winbox users
D. wireless users
E. pppoe users
F. hotspot users
Correct Answer: ABE
Section: (none)
What kind of users are listed in the Secrets window of the PPP menu?
A. pptp users
B. l2tp users
C. winbox users
D. wireless users
E. pppoe users
F. hotspot users
Correct Answer: ABE
Section: (none)
QUESTION 13
If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this?
A. Users
B. IP bindings
C. Walled-garden
D. Walled-garden IP
Correct Answer: B
Section: (none)
If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this?
A. Users
B. IP bindings
C. Walled-garden
D. Walled-garden IP
Correct Answer: B
Section: (none)
QUESTION 14
Which default route will be active?
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
A. Route via gateway 1.1.1.1
B. Route via gateway 2.2.2.2
Correct Answer: B
Section: (none)
Which default route will be active?
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
A. Route via gateway 1.1.1.1
B. Route via gateway 2.2.2.2
Correct Answer: B
Section: (none)
QUESTION 15
How long is level 1 (demo) license valid?
A. 24 hours
B. Infinite time
C. 1 month
D. 1 year
Correct Answer: A
Section: (none)
How long is level 1 (demo) license valid?
A. 24 hours
B. Infinite time
C. 1 month
D. 1 year
Correct Answer: A
Section: (none)
QUESTION 16
The basic unit of a physical network (OSI Layer 1)
A. Frame
B. Header
C. Byte
D. Bit
Correct Answer: D
Section: (none)
The basic unit of a physical network (OSI Layer 1)
A. Frame
B. Header
C. Byte
D. Bit
Correct Answer: D
Section: (none)
QUESTION 17
Select valid MAC-address
A. G2:60:CF:21:99:H0
B. 192.168.0.0/16
C. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201
D. 00:00:5E:80:EE:B0
Correct Answer:D
Section: (none)
Select valid MAC-address
A. G2:60:CF:21:99:H0
B. 192.168.0.0/16
C. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201
D. 00:00:5E:80:EE:B0
Correct Answer:D
Section: (none)
QUESTION 18
Which ones of the following are valid IP addresses?
A. 10.10.14.0
B. 192.168.13.255
C. 1.27.14.254
D. 192.168.256.1
Correct Answer: ABC
Section: (none)
Which ones of the following are valid IP addresses?
A. 10.10.14.0
B. 192.168.13.255
C. 1.27.14.254
D. 192.168.256.1
Correct Answer: ABC
Section: (none)
QUESTION 19
How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
A. 254
B. 510
C. 512
D. 508
Correct Answer: B
Section: (none)
How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
A. 254
B. 510
C. 512
D. 508
Correct Answer: B
Section: (none)
QUESTION 20
On the advanced menu of the wireless setup there is a parameter called "Area", it works directly with:
A. Connect List
B. Access List
C. None of these
D. Security Profile
Correct Answer: A
Section: (none)
On the advanced menu of the wireless setup there is a parameter called "Area", it works directly with:
A. Connect List
B. Access List
C. None of these
D. Security Profile
Correct Answer: A
Section: (none)
QUESTION 21
You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument
values for the required queue.
A. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address
B. kind=pcq pcq-limit=256000 pcq-classifier=dst-address
C. kind=pcq pcq-limit=5000000 pcq-classifier=src-address
D. kind=pcq pcq-limit=256000 pcq-classifier=src-address
E. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address
Correct Answer: BD
Section: (none)
You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument
values for the required queue.
A. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address
B. kind=pcq pcq-limit=256000 pcq-classifier=dst-address
C. kind=pcq pcq-limit=5000000 pcq-classifier=src-address
D. kind=pcq pcq-limit=256000 pcq-classifier=src-address
E. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address
Correct Answer: BD
Section: (none)
QUESTION 22
Which of the following is true for connection tracking
A. Enabling connection tracking reduces CPU usage in RouterOS
B. Connection tracking must be enabled for firewall to be effective
C. Connection tracking must be enable for NAT'ed network
D. Disable connection tracking for mangle to work
Correct Answer: BC
Section: (none)
Which of the following is true for connection tracking
A. Enabling connection tracking reduces CPU usage in RouterOS
B. Connection tracking must be enabled for firewall to be effective
C. Connection tracking must be enable for NAT'ed network
D. Disable connection tracking for mangle to work
Correct Answer: BC
Section: (none)
QUESTION 23
Which of these are possible solutions to bridge two networks over a wireless link:
A. Both devices in AP mode and enable WDS mode
B. One device in AP mode, another one in station-pseudobridge-clone
C. One device in AP mode, another one in station-pseudobridge
D. One device in AP mode, another one in station
Correct Answer: BC
Section: (none)
Which of these are possible solutions to bridge two networks over a wireless link:
A. Both devices in AP mode and enable WDS mode
B. One device in AP mode, another one in station-pseudobridge-clone
C. One device in AP mode, another one in station-pseudobridge
D. One device in AP mode, another one in station
Correct Answer: BC
Section: (none)
QUESTION 24
You have a 802.11b/g wireless card. Which frequencies can be set?
A. 5210MHz
B. 2327MHz
C. 2422MHz
D. 2412MHz
E. 5800MHz
Correct Answer: CD
Section: (none)
You have a 802.11b/g wireless card. Which frequencies can be set?
A. 5210MHz
B. 2327MHz
C. 2422MHz
D. 2412MHz
E. 5800MHz
Correct Answer: CD
Section: (none)
QUESTION 25
Which of the following Routes statuses are possible?
A. C = Connected
B. S = Static
C. A = Active
D. D = Drop
Correct Answer: ABC
Section: (none)
Which of the following Routes statuses are possible?
A. C = Connected
B. S = Static
C. A = Active
D. D = Drop
Correct Answer: ABC
Section: (none)
QUESTION 26
Action=redirect applies to
A. Route rules
B. DST-NAT rules
C. Firewall Filter rules
D. SRC-NAT rules
Correct Answer: B
Section: (none)
Action=redirect applies to
A. Route rules
B. DST-NAT rules
C. Firewall Filter rules
D. SRC-NAT rules
Correct Answer: B
Section: (none)
QUESTION 27
When backing up your router by using the 'Export' command, the following happens:
A. Winbox usernames and passwords are backed up
B. The Export file can be edited with a standard text editor after its creation
C. You are requested to give the export file a name
Correct Answer: BC
Section: (none)
When backing up your router by using the 'Export' command, the following happens:
A. Winbox usernames and passwords are backed up
B. The Export file can be edited with a standard text editor after its creation
C. You are requested to give the export file a name
Correct Answer: BC
Section: (none)
QUESTION 28
You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new
configuration.
A. Yes
B. No
Correct Answer: B
Section: (none)
You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new
configuration.
A. Yes
B. No
Correct Answer: B
Section: (none)
QUESTION 29
If ARP=reply-only is configured on an interface, what will this interface do
A. Add new IP addresses in /ip arp list
B. Accept all IP/MAC combinations listed in /ip arp as static entries
C. Add new MAC addresses in /ip arp list
D. Accept all IP addresses listed in /ip arp as static entries
E. Accept all MAC-addresses listed in /ip arp as static entries
Correct Answer: B
Section: (none)
If ARP=reply-only is configured on an interface, what will this interface do
A. Add new IP addresses in /ip arp list
B. Accept all IP/MAC combinations listed in /ip arp as static entries
C. Add new MAC addresses in /ip arp list
D. Accept all IP addresses listed in /ip arp as static entries
E. Accept all MAC-addresses listed in /ip arp as static entries
Correct Answer: B
Section: (none)
QUESTION 30
It is impossible to disable user "admin" at the menu "/user"
A. True
B. False
Correct Answer: B
Section: (none)
It is impossible to disable user "admin" at the menu "/user"
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 31
If a packet comes to a router and starts a new, previously unseen connection, which connection state would be
applied to it?
A. no connection state would be applied to such packet
B. new
C. unknown
D. invalid
E. established
Correct Answer: B
Section: (none)
If a packet comes to a router and starts a new, previously unseen connection, which connection state would be
applied to it?
A. no connection state would be applied to such packet
B. new
C. unknown
D. invalid
E. established
Correct Answer: B
Section: (none)
QUESTION 32
We have two radio cards in a point-to-point link with settings:
Card Nr 1.: mode=ap-bridge ssid="office"
frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa
Card Nr 2.: mode=station ssid="office"
frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2
Is Card Nr2. able to connect to Card Nr 1.?
A. Yes, if Nstreme is enabled or disabled on both
B. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on
both
C. No, because of the different frequencies
D. No, because of the different security profiles
Correct Answer: B
Section: (none)
We have two radio cards in a point-to-point link with settings:
Card Nr 1.: mode=ap-bridge ssid="office"
frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa
Card Nr 2.: mode=station ssid="office"
frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2
Is Card Nr2. able to connect to Card Nr 1.?
A. Yes, if Nstreme is enabled or disabled on both
B. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on
both
C. No, because of the different frequencies
D. No, because of the different security profiles
Correct Answer: B
Section: (none)
QUESTION 33
What is the default protocol/port of (secure) winbox?
A. UDP/5678
B. TCP/8291
C. TCP/22
D. TCP/8080
Correct Answer: B
Section: (none)
What is the default protocol/port of (secure) winbox?
A. UDP/5678
B. TCP/8291
C. TCP/22
D. TCP/8080
Correct Answer: B
Section: (none)
QUESTION 34
Select which of the following are 'Public IP addresses':
A. 10.110.50.37
B. 11.63.72.21
C. 172.28.73.21
D. 192.168.0.1
E. 172.168.254.2
Correct Answer: BE
Section: (none)
Select which of the following are 'Public IP addresses':
A. 10.110.50.37
B. 11.63.72.21
C. 172.28.73.21
D. 192.168.0.1
E. 172.168.254.2
Correct Answer: BE
Section: (none)
QUESTION 35
Is ARP used in the IPv6 protocol ?
A. True
B. False
Correct Answer: B
Section: (none)
Is ARP used in the IPv6 protocol ?
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 36
Select which of the following are ‘Public IP addresses’:
A. 192.168.0.1
B. 11.63.72.21
C. 172.28.73.21
D. 10.110.50.37
E. 172.168.254.2
Correct Answer: BE
Section: (none)
Select which of the following are ‘Public IP addresses’:
A. 192.168.0.1
B. 11.63.72.21
C. 172.28.73.21
D. 10.110.50.37
E. 172.168.254.2
Correct Answer: BE
Section: (none)
QUESTION 37
How many usable IP addresses are there in a 20-bit subnet?
A. 2047
B. 4096
C. 2048
D. 2046
E. 4094
Correct Answer: E
Section: (none)
How many usable IP addresses are there in a 20-bit subnet?
A. 2047
B. 4096
C. 2048
D. 2046
E. 4094
Correct Answer: E
Section: (none)
QUESTION 38
What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ?
A. 60
B. 30
C. 1
D. 64
Correct Answer: ABD
Section: (none)
What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ?
A. 60
B. 30
C. 1
D. 64
Correct Answer: ABD
Section: (none)
QUESTION 39
The network address is
A. The first usable address of the subnet
B. The last address of the subnet
C. The first address of the subnet
Correct Answer: C
Section: (none)
The network address is
A. The first usable address of the subnet
B. The last address of the subnet
C. The first address of the subnet
Correct Answer: C
Section: (none)
QUESTION 40
Choose all valid hosts address range for subnet 15.242.55.62/27
A. 15.242.55.32-15.242.55.63
B. 15.242.55.33-15.242.55.63
C. 15.242.55.33-15.242.55.62
D. 15.242.55.31-15.242.55.62
Correct Answer: C
Section: (none)
Choose all valid hosts address range for subnet 15.242.55.62/27
A. 15.242.55.32-15.242.55.63
B. 15.242.55.33-15.242.55.63
C. 15.242.55.33-15.242.55.62
D. 15.242.55.31-15.242.55.62
Correct Answer: C
Section: (none)
QUESTION 41
What is term for the hardware coded address found on an interface?
A. IP Address
B. Interface Address
C. MAC Address
D. FQDN Address
Correct Answer: C
Section: (none)
What is term for the hardware coded address found on an interface?
A. IP Address
B. Interface Address
C. MAC Address
D. FQDN Address
Correct Answer: C
Section: (none)
QUESTION 42
Which of the following IP addresses are publicly routable?
A. 127.34.155.3
B. 192.168.1.4
C. 172.16.13.23
D. 11.3.10.4
Correct Answer: AD
Section: (none)
Which of the following IP addresses are publicly routable?
A. 127.34.155.3
B. 192.168.1.4
C. 172.16.13.23
D. 11.3.10.4
Correct Answer: AD
Section: (none)
QUESTION 43
How many IP addresses can one find in the header of an IP packet?
A. 3
B. 4
C. 1
D. 2
Correct Answer: D
Section: (none)
How many IP addresses can one find in the header of an IP packet?
A. 3
B. 4
C. 1
D. 2
Correct Answer: D
Section: (none)
QUESTION 44
You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24
Mark the correct configuration on client PC to access to the Internet
A. IP:192.168.0.1/24 gateway:192.168.2.1
B. IP:192.168.2.253/24 gateway:202.168.0.1
C. IP:192.168.1.223/24 gateway:248.115.148.136
D. IP:192.168.2.115/24 gateway: 192.168.2.1
E. IP:192.168.2.2/24 gateway:202.168.125.45
Correct Answer: D
Section: (none)
You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24
Mark the correct configuration on client PC to access to the Internet
A. IP:192.168.0.1/24 gateway:192.168.2.1
B. IP:192.168.2.253/24 gateway:202.168.0.1
C. IP:192.168.1.223/24 gateway:248.115.148.136
D. IP:192.168.2.115/24 gateway: 192.168.2.1
E. IP:192.168.2.2/24 gateway:202.168.125.45
Correct Answer: D
Section: (none)
QUESTION 45
What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without
client authentication
A. ip hotspot ip-binding
B. ip hotspot profile
C. ip hotspot walled-garden
D. ip hotspot walled-garden ip
Correct Answer: C
Section: (none)
What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without
client authentication
A. ip hotspot ip-binding
B. ip hotspot profile
C. ip hotspot walled-garden
D. ip hotspot walled-garden ip
Correct Answer: C
Section: (none)
QUESTION 46
It is possible to add user-defined chains in ip firewall mangle
A. True
B. False
Correct Answer: A
Section: (none)
It is possible to add user-defined chains in ip firewall mangle
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 47
Action=redirect allows you to make
A. Transparent DNS Cache
B. Forward DNS to another device IP address
C. Enable Local Service
D. Transparent HTTP Proxy
Correct Answer: AD
Section: (none)
Action=redirect allows you to make
A. Transparent DNS Cache
B. Forward DNS to another device IP address
C. Enable Local Service
D. Transparent HTTP Proxy
Correct Answer: AD
Section: (none)
QUESTION 48
Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1?
A. /ip firewall nat add action=masquerade chain=srcnat
B. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
C. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
D. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
Correct Answer: ABD
Section: (none)
Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1?
A. /ip firewall nat add action=masquerade chain=srcnat
B. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
C. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
D. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
Correct Answer: ABD
Section: (none)
QUESTION 49
What letters appear next to a route, which is automatically created by RouterOS when user adds a valid
address to an active interface?
A. I
B. D
C. A
D. S
E. C
Correct Answer: BCE
Section: (none)
What letters appear next to a route, which is automatically created by RouterOS when user adds a valid
address to an active interface?
A. I
B. D
C. A
D. S
E. C
Correct Answer: BCE
Section: (none)
QUESTION 50
For static routing functionality, additionally to the RouterOS system package, you will also need the following
software package:
A. none
B. dhcp
C. routing
D. advanced-tools
Correct Answer: A
Section: (none)
For static routing functionality, additionally to the RouterOS system package, you will also need the following
software package:
A. none
B. dhcp
C. routing
D. advanced-tools
Correct Answer: A
Section: (none)
QUESTION 51
Which are necessary sections in /queue simple to set bandwidth limitation?
A. target-address, max-limit
B. target-address, dst-address, max-limit
C. target-address, dst-address
D. max-limit
Correct Answer: A
Section: (none)
Which are necessary sections in /queue simple to set bandwidth limitation?
A. target-address, max-limit
B. target-address, dst-address, max-limit
C. target-address, dst-address
D. max-limit
Correct Answer: A
Section: (none)
QUESTION 52
Two hosts, A and B, are connected to a broadcast LAN. Select all the answers showing pairs of IP address/
mask which would allow IP connections to be established between the two hosts.
A. A: 10.1.2.66/25 and B: 10.1.2.109/26
B. A: 10.2.2.1/23 and B: 10.2.0.1/22
C. A: 10.1.2.192/24 and B: 10.1.2.129/26
D. A: 10.2.1.0/23 and B: 10.2.0.1/22
Correct Answer: ABD
Section: (none)
Two hosts, A and B, are connected to a broadcast LAN. Select all the answers showing pairs of IP address/
mask which would allow IP connections to be established between the two hosts.
A. A: 10.1.2.66/25 and B: 10.1.2.109/26
B. A: 10.2.2.1/23 and B: 10.2.0.1/22
C. A: 10.1.2.192/24 and B: 10.1.2.129/26
D. A: 10.2.1.0/23 and B: 10.2.0.1/22
Correct Answer: ABD
Section: (none)
QUESTION 53
Why is it useful to set a Radio Name on the radio interface?
A. To identify a station in a list of connected clients
B. To identify a station in the Access List
C. To identify a station in Neighbor discovery
Correct Answer: A
Section: (none)
Why is it useful to set a Radio Name on the radio interface?
A. To identify a station in a list of connected clients
B. To identify a station in the Access List
C. To identify a station in Neighbor discovery
Correct Answer: A
Section: (none)
QUESTION 54
Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it
possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ?
A. True
B. False
Correct Answer: B
Section: (none)
Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it
possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ?
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 55
MikroTik RouterOS DHCP client can receive following options
A. Byte limit
B. IP Gateway
C. Rate limit
D. Uptime limit
E. IP Address and Subnet
Correct Answer: BDE
Section: (none)
MikroTik RouterOS DHCP client can receive following options
A. Byte limit
B. IP Gateway
C. Rate limit
D. Uptime limit
E. IP Address and Subnet
Correct Answer: BDE
Section: (none)
QUESTION 56
The HotSpot feature can be used only on ethernet interfaces. You have to use a separate access point if you
want to use this feature with wireless.
A. True
B. False
Correct Answer: B
Section: (none)
The HotSpot feature can be used only on ethernet interfaces. You have to use a separate access point if you
want to use this feature with wireless.
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 57
How many different priorities can be selected for queues in MikroTik RouterOS?
A. 8
B. 16
C. 0
D. 1
Correct Answer: A
Section: (none)
How many different priorities can be selected for queues in MikroTik RouterOS?
A. 8
B. 16
C. 0
D. 1
Correct Answer: A
Section: (none)
QUESTION 58
Which default route will be active?
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
A. Route via gateway 1.1.1.1
B. Route via gateway 2.2.2.2
Correct Answer: B
Section: (none)
Which default route will be active?
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
A. Route via gateway 1.1.1.1
B. Route via gateway 2.2.2.2
Correct Answer: B
Section: (none)
QUESTION 59
How long is level 1 (demo) license valid?
A. 24 hours
B. Infinite time
C. 1 month
D. 1 year
Correct Answer: A
Section: (none)
How long is level 1 (demo) license valid?
A. 24 hours
B. Infinite time
C. 1 month
D. 1 year
Correct Answer: A
Section: (none)
QUESTION 60
How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
A. 510
B. 254
C. 508
D. 512
Correct Answer: A
Section: (none)
How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
A. 510
B. 254
C. 508
D. 512
Correct Answer: A
Section: (none)
QUESTION 61
A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway.
When the PC Ethernet card failed, the user change it with a new card and set the same IP for it.
What else should be done?
A. Old static ARP entry on gateway has to be updated for the new card
B. Nothing – it will work as before
C. MAC-address of the new card has to be changed to MAC address of old card
D. Another IP has to be added for Internet access
Correct Answer: B
Section: (none)
A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway.
When the PC Ethernet card failed, the user change it with a new card and set the same IP for it.
What else should be done?
A. Old static ARP entry on gateway has to be updated for the new card
B. Nothing – it will work as before
C. MAC-address of the new card has to be changed to MAC address of old card
D. Another IP has to be added for Internet access
Correct Answer: B
Section: (none)
QUESTION 62
Hotspot is required on the interfaces ether2, ehter3, wlan1 (in ap-bridge mode).
These interfaces are bridged in the bridge1 interface.
Which interface should the Hotspot server be configured on?
A. ether2
B. ether3
C. bridge1
D. wlan1
Correct Answer: C
Section: (none)
Hotspot is required on the interfaces ether2, ehter3, wlan1 (in ap-bridge mode).
These interfaces are bridged in the bridge1 interface.
Which interface should the Hotspot server be configured on?
A. ether2
B. ether3
C. bridge1
D. wlan1
Correct Answer: C
Section: (none)
QUESTION 63
Mark all the configuration where RouterOS is utilizing the DNS feature
A. Layer-7 packet filter configuration
B. Hotspot configuration
C. Web-proxy configuration
D. PPP Configuration
Correct Answer: B
Section: (none)
Mark all the configuration where RouterOS is utilizing the DNS feature
A. Layer-7 packet filter configuration
B. Hotspot configuration
C. Web-proxy configuration
D. PPP Configuration
Correct Answer: B
Section: (none)
QUESTION 64
Which facility should be used, to ensure that clients with radio signal strength poorer than -90 dBm can't
connect to interface wlan1 on Mikrotik Access Point?
A. Access List
B. Connecttion List
C. Registered List
D. Hotspot User Profile
Correct Answer: A
Section: (none)
Which facility should be used, to ensure that clients with radio signal strength poorer than -90 dBm can't
connect to interface wlan1 on Mikrotik Access Point?
A. Access List
B. Connecttion List
C. Registered List
D. Hotspot User Profile
Correct Answer: A
Section: (none)
QUESTION 65
/ip firewall nat
add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to-address=192.168.1.2 to-
ports=81
The command shown above:
A. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192.168.1.2
B. Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1
C. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.168.1.2
D. Adds IP address 192.168.1.2 to the interface ether1
Correct Answer: C
Section: (none)
/ip firewall nat
add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to-address=192.168.1.2 to-
ports=81
The command shown above:
A. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192.168.1.2
B. Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1
C. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.168.1.2
D. Adds IP address 192.168.1.2 to the interface ether1
Correct Answer: C
Section: (none)
QUESTION 66
How many layers does Open Systems Interconnection model have?
A. 5
B. 6
C. 7
D. 12
Correct Answer: C
Section: (none)
How many layers does Open Systems Interconnection model have?
A. 5
B. 6
C. 7
D. 12
Correct Answer: C
Section: (none)
QUESTION 67
Select all the RouterOS software packages required for configuring a wireless AP
A. advanced-tools
B. wireless
C. routing
D. dhcp
E. system
Correct Answer: BE
Section: (none)
Select all the RouterOS software packages required for configuring a wireless AP
A. advanced-tools
B. wireless
C. routing
D. dhcp
E. system
Correct Answer: BE
Section: (none)
QUESTION 68
Mark the queue types that are available in RouterOS
A. FIFO - First In First Out (for Bytes or for Packets)
B. SFQ – Stochastic Fairness Queuing
C. DRR - Deficit Round Robin
D. RED – Random Early Detect (or Drop)
E. PCQ – Per Connection Queuing
F. LIFO - Last In First Out
Correct Answer: ABDE
Section: (none)
Mark the queue types that are available in RouterOS
A. FIFO - First In First Out (for Bytes or for Packets)
B. SFQ – Stochastic Fairness Queuing
C. DRR - Deficit Round Robin
D. RED – Random Early Detect (or Drop)
E. PCQ – Per Connection Queuing
F. LIFO - Last In First Out
Correct Answer: ABDE
Section: (none)
QUESTION 69
A MikoTik PPPoE Server can be used only within a broadcast domain, that is, users can not run PPPoE
protocol with a server if there is a router between the customer and that PPPoE server.
A. true
B. false
Correct Answer: A
Section: (none)
A MikoTik PPPoE Server can be used only within a broadcast domain, that is, users can not run PPPoE
protocol with a server if there is a router between the customer and that PPPoE server.
A. true
B. false
Correct Answer: A
Section: (none)
QUESTION 70
To limit wireless access for your HotSpot users
A. Create MAC Address restriction on HotSpot user login
B. Create MAC Address restriction on PPP user login
C. Create MAC Address restriction in the Wireless Access List
D. Create IP Address restriction in the Wireless Access List
Correct Answer: AC
Section: (none)
To limit wireless access for your HotSpot users
A. Create MAC Address restriction on HotSpot user login
B. Create MAC Address restriction on PPP user login
C. Create MAC Address restriction in the Wireless Access List
D. Create IP Address restriction in the Wireless Access List
Correct Answer: AC
Section: (none)
QUESTION 71
Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time?
A. true
B. false
Correct Answer: A
Section: (none)
Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time?
A. true
B. false
Correct Answer: A
Section: (none)
QUESTION 72
Is it possible for a client to get an IP address but no gateway after a successful DHCP request?
A. true
B. false
Correct Answer: A
Section: (none)
Is it possible for a client to get an IP address but no gateway after a successful DHCP request?
A. true
B. false
Correct Answer: A
Section: (none)
QUESTION 73
You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best
possible way to do:
A. Create backup, edit backup file and restore on target router
B. Export global configuration and remove everything apart from '/ip firewall filter'
C. Export only '/ip firewall filter'
D. Create backup only of '/ip firewall filter' rules
Correct Answer: C
Section: (none)
You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best
possible way to do:
A. Create backup, edit backup file and restore on target router
B. Export global configuration and remove everything apart from '/ip firewall filter'
C. Export only '/ip firewall filter'
D. Create backup only of '/ip firewall filter' rules
Correct Answer: C
Section: (none)
QUESTION 74
Mark all features that can be help to assign bandwidth limitation for a group of users?
A. NAT
B. Mangle
C. Queue Tree
D. Address-list
Correct Answer: BCD
Section: (none)
Mark all features that can be help to assign bandwidth limitation for a group of users?
A. NAT
B. Mangle
C. Queue Tree
D. Address-list
Correct Answer: BCD
Section: (none)
QUESTION 75
Connection state in MikroTik RouterOS is the same thing as TCP state elsewhere?
A. true
B. false
Correct Answer: B
Section: (none)
QUESTION 76
To block access to web proxies running on TCP port 8080, you have to create a firewall rule and specify:
A. "chain", "action", "port"
B. "chain", "action", "protocol", "limit"
C. "chain", "action", "protocol"
D. "chain", "action", "protocol", "port"
Correct Answer: D
Section: (none)
Connection state in MikroTik RouterOS is the same thing as TCP state elsewhere?
A. true
B. false
Correct Answer: B
Section: (none)
QUESTION 76
To block access to web proxies running on TCP port 8080, you have to create a firewall rule and specify:
A. "chain", "action", "port"
B. "chain", "action", "protocol", "limit"
C. "chain", "action", "protocol"
D. "chain", "action", "protocol", "port"
Correct Answer: D
Section: (none)
QUESTION 77
What is possible with Netinstall?
A. MikroTik RouterOS install
B. MikroTik RouterOS reinstall
C. MikroTik RouterOS configuration reset
D. MikroTik RouterOS password reset with saving router's configuration
Correct Answer: ABCD
Section: (none)
What is possible with Netinstall?
A. MikroTik RouterOS install
B. MikroTik RouterOS reinstall
C. MikroTik RouterOS configuration reset
D. MikroTik RouterOS password reset with saving router's configuration
Correct Answer: ABCD
Section: (none)
QUESTION 78
Check the allowed input formats for wireless scan-list.
A. 5500 - 5700
B. 5500 5700
C. 5500-5700
D. 5500/5700
E. 5500,5700
Correct Answer: ACE
Section: (none)
Check the allowed input formats for wireless scan-list.
A. 5500 - 5700
B. 5500 5700
C. 5500-5700
D. 5500/5700
E. 5500,5700
Correct Answer: ACE
Section: (none)
QUESTION 79
NStreme works only on 40mhz Channel width
A. True
B. False
Correct Answer: B
Section: (none)
NStreme works only on 40mhz Channel width
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 80
You have to connect to a RouterBOARD without any previous configuration. Select all possibilities to connect
and do some basic configuration
A. Serial Connection
B. MAC-Winbox
C. Attach-monitor/keyboard
D. Telnet
Correct Answer: ABD
Section: (none)
You have to connect to a RouterBOARD without any previous configuration. Select all possibilities to connect
and do some basic configuration
A. Serial Connection
B. MAC-Winbox
C. Attach-monitor/keyboard
D. Telnet
Correct Answer: ABD
Section: (none)
QUESTION 81
It is necessary to configure a local DNS server to be able to give out a DNS setting to clients via DHCP server
A. True
B. False
Correct Answer: A
Section: (none)
It is necessary to configure a local DNS server to be able to give out a DNS setting to clients via DHCP server
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 82
Which option in the configuration of a wireless card must be disabled to cause the router to permit ONLY
known clients listed in the access
A. Default Forward
B. Enable Access List
C. Default Authenticate
D. Security Profile
Correct Answer: C
Section: (none)
Which option in the configuration of a wireless card must be disabled to cause the router to permit ONLY
known clients listed in the access
A. Default Forward
B. Enable Access List
C. Default Authenticate
D. Security Profile
Correct Answer: C
Section: (none)
QUESTION 83
MikroTik RouterOS commands can be run once a day by:
A. /system clock
B. /system watchdog
C. /system shcheduler
Correct Answer: C
Section: (none)
MikroTik RouterOS commands can be run once a day by:
A. /system clock
B. /system watchdog
C. /system shcheduler
Correct Answer: C
Section: (none)
QUESTION 84
Mark correct statements.
A. Export files are not editable
B. Backup files are not editable
C. Backup files are editable
Correct Answer: B
Section: (none)
Mark correct statements.
A. Export files are not editable
B. Backup files are not editable
C. Backup files are editable
Correct Answer: B
Section: (none)
QUESTION 85
Mark possible TCP states in the connection tracking table
A. New
B. Sycn
C. Related
D. Invalid
E. Estabilished
F. Closed
Correct Answer: ACDE
Section: (none)
Mark possible TCP states in the connection tracking table
A. New
B. Sycn
C. Related
D. Invalid
E. Estabilished
F. Closed
Correct Answer: ACDE
Section: (none)
QUESTION 86
What packages allow ROS to perform static routing?
A. system
B. routing
C. multicast
D. wireless
Correct Answer: A
Section: (none)
What packages allow ROS to perform static routing?
A. system
B. routing
C. multicast
D. wireless
Correct Answer: A
Section: (none)
QUESTION 87
When sending out an ARP request, an IP host is expecting what kind of address for an answer?
A. VLAN ID
B. IP Address
C. MAC Address
D. 802.11g
Correct Answer: C
Section: (none)
When sending out an ARP request, an IP host is expecting what kind of address for an answer?
A. VLAN ID
B. IP Address
C. MAC Address
D. 802.11g
Correct Answer: C
Section: (none)
QUESTION 88
Which of the following actions are available for '/ip firewall mangle' (select all valid actions)
A. Change MSS
B. Mark Connection
C. Accept
D. Jump
E. Drop
F. Mark Packet
Correct Answer: ABCDF
Section: (none)
Which of the following actions are available for '/ip firewall mangle' (select all valid actions)
A. Change MSS
B. Mark Connection
C. Accept
D. Jump
E. Drop
F. Mark Packet
Correct Answer: ABCDF
Section: (none)
QUESTION 89
What is the maximum number of ARP entries on a Mikrotik RouterOS device ?
A. Unlimited
B. 2048
C. 8192
D. 10240
Correct Answer: C
Section: (none)
What is the maximum number of ARP entries on a Mikrotik RouterOS device ?
A. Unlimited
B. 2048
C. 8192
D. 10240
Correct Answer: C
Section: (none)
QUESTION 90
You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or
CDP. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions
to accomplish this
A. Remove/Disable all interfaces under mac-server telnet
B. Remove/Disable all discovery interfaces
C. Remove/Disable all interfaces under mac-Server winbox
D. Add a Deny All input firewall rule
E. Remove/Disable the Interfaces
F. Place a proper forward firewall rule to block mac discovery
G. Place a proper input firewall rule to block mac discovery
Correct Answer: ABC
Section: (none)
You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or
CDP. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions
to accomplish this
A. Remove/Disable all interfaces under mac-server telnet
B. Remove/Disable all discovery interfaces
C. Remove/Disable all interfaces under mac-Server winbox
D. Add a Deny All input firewall rule
E. Remove/Disable the Interfaces
F. Place a proper forward firewall rule to block mac discovery
G. Place a proper input firewall rule to block mac discovery
Correct Answer: ABC
Section: (none)
QUESTION 91
What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a
specified mail server?
A. Redirect
B. Dst-nat
C. Passtrough
D. Tarpit
Correct Answer: B
Section: (none)
What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a
specified mail server?
A. Redirect
B. Dst-nat
C. Passtrough
D. Tarpit
Correct Answer: B
Section: (none)
QUESTION 92
To be able to do NAT the connection tracking does not need to be enabled
A. True
B. False
Correct Answer: B
Section: (none)
To be able to do NAT the connection tracking does not need to be enabled
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 93
Which port does PPTP use by default?
A. UDP 1723
B. TCP 1723
C. UDP 1721
D. TCP 1721
Correct Answer: B
Section: (none)
Which port does PPTP use by default?
A. UDP 1723
B. TCP 1723
C. UDP 1721
D. TCP 1721
Correct Answer: B
Section: (none)
QUESTION 94
What will happen if "Default forward" is disabled in wireless menu on a RouterOS AP?
A. Only clients with matching access control list rule will be able to connect to the AP
B. AP will not be able to connect to the clients
C. Clients will not be able to connect to each other
D. Clients will not be able to connect to the AP
Correct Answer: C
Section: (none)
What will happen if "Default forward" is disabled in wireless menu on a RouterOS AP?
A. Only clients with matching access control list rule will be able to connect to the AP
B. AP will not be able to connect to the clients
C. Clients will not be able to connect to each other
D. Clients will not be able to connect to the AP
Correct Answer: C
Section: (none)
QUESTION 95
PPPoE server only works within one Ethernet broadcast domain that it is connected to. If there is a router
between server and end-user host, it will not be able to create PPPoE tunnel to that PPPoE server
A. True
B. False
Correct Answer: A
Section: (none)
PPPoE server only works within one Ethernet broadcast domain that it is connected to. If there is a router
between server and end-user host, it will not be able to create PPPoE tunnel to that PPPoE server
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 96
In the Route List, the identification DAb for a route stands for
A. direct - active - bgp
B. direct - acknowledge - backup
C. dynamic - active - bgp
D. dynamic - active – backup
Correct Answer: C
Section: (none)
In the Route List, the identification DAb for a route stands for
A. direct - active - bgp
B. direct - acknowledge - backup
C. dynamic - active - bgp
D. dynamic - active – backup
Correct Answer: C
Section: (none)
QUESTION 97
Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33.
Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client 10.10.0.33 is be
able to obtain
A. 4M upload/download
B. 0M upload/download
C. 2M upload/download
D. 6M upload/download
Correct Answer: C
Section: (none)
Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33.
Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client 10.10.0.33 is be
able to obtain
A. 4M upload/download
B. 0M upload/download
C. 2M upload/download
D. 6M upload/download
Correct Answer: C
Section: (none)
QUESTION 98
What does the firewall action "Redirect" do? Select all true statements
A. Redirects a packet to a specified IP
B. Redirects a packet to a specified port on the router
C. Redirects a packet to a specified port on a host in the network
D. Redirects a packet to the router
Correct Answer: BD
Section: (none)
What does the firewall action "Redirect" do? Select all true statements
A. Redirects a packet to a specified IP
B. Redirects a packet to a specified port on the router
C. Redirects a packet to a specified port on a host in the network
D. Redirects a packet to the router
Correct Answer: BD
Section: (none)
QUESTION 99
If you wish to block user access to MSN messenger, which chain should the firewall rule be placed in?
A. input
B. output
C. forward
D. process
Correct Answer: C
Section: (none)
If you wish to block user access to MSN messenger, which chain should the firewall rule be placed in?
A. input
B. output
C. forward
D. process
Correct Answer: C
Section: (none)
QUESTION 100
/interface wireless access-list is used for
A. Authenticate Hotspot users
B. Contains the security profiles settings
C. Shows a list of Client's MAC Address that are already registered at AP
D. Handles a list of Client's MAC Address to permit/deny connection to AP
Correct Answer: D
Section: (none)
/interface wireless access-list is used for
A. Authenticate Hotspot users
B. Contains the security profiles settings
C. Shows a list of Client's MAC Address that are already registered at AP
D. Handles a list of Client's MAC Address to permit/deny connection to AP
Correct Answer: D
Section: (none)
QUESTION 101
Which configuration menu should you use to change router's Winbox default port?
A. /ip firewall service-ports
B. /ip service
C. /system resource
D. /ip firewall filter
Correct Answer: B
Section: (none)
Which configuration menu should you use to change router's Winbox default port?
A. /ip firewall service-ports
B. /ip service
C. /system resource
D. /ip firewall filter
Correct Answer: B
Section: (none)
QUESTION 102
There can be more than one PPPoE server in a single broadcast domain:
A. True
B. False
Correct Answer: A
Section: (none)
There can be more than one PPPoE server in a single broadcast domain:
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 103
In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?
A. The router does not have an operating system
B. The password of the router is not known
C. The router is connected only to a secondary Ethernet port
D. The router is connected only to a wireless network
Correct Answer: ACD
Section: (none)
In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?
A. The router does not have an operating system
B. The password of the router is not known
C. The router is connected only to a secondary Ethernet port
D. The router is connected only to a wireless network
Correct Answer: ACD
Section: (none)
QUESTION 104
Select true statements about Mikrotik RouterOS backup file:
A. Files from /files are included in the backup file
B. /user menu usernames and passwords are saved in the backup file
C. Entire router configuration is saved
D. Backup file is editable
Correct Answer: BC
Section: (none)
Select true statements about Mikrotik RouterOS backup file:
A. Files from /files are included in the backup file
B. /user menu usernames and passwords are saved in the backup file
C. Entire router configuration is saved
D. Backup file is editable
Correct Answer: BC
Section: (none)
QUESTION 105
It is possible to create an encrypted PPPoE tunnel in RouterOS
A. True
B. False
Correct Answer: A
Section: (none)
It is possible to create an encrypted PPPoE tunnel in RouterOS
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 106
In case when router login password is lostm it is necessary to reinstall RouterOS or use hardware reset
function.
A. True
B. False
Correct Answer: A
Section: (none)
In case when router login password is lostm it is necessary to reinstall RouterOS or use hardware reset
function.
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 107
Which options should be used when you want to prevent access from one spesific address to your router web
A. WWW service from IP Services
B. Firewall Filter Chain Input
C. Firewall Filter Chain Forward
D. Group setting for System users
Correct Answer: B
Section: (none)
Which options should be used when you want to prevent access from one spesific address to your router web
A. WWW service from IP Services
B. Firewall Filter Chain Input
C. Firewall Filter Chain Forward
D. Group setting for System users
Correct Answer: B
Section: (none)
QUESTION 108
WPA 2 Pre Shared key (PSK) is enabled on AP, all your clients have to use the same PSK. Only Virtual AP
could be used to allow clients to connect with a different PSK
A. True
B. False
Correct Answer: B
Section: (none)
WPA 2 Pre Shared key (PSK) is enabled on AP, all your clients have to use the same PSK. Only Virtual AP
could be used to allow clients to connect with a different PSK
A. True
B. False
Correct Answer: B
Section: (none)
QUESTION 109
You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured?
A. Set “Shared Users” option at /ip hotspot
B. It’s not possible
C. Set “only-one=no’ at /ip hotspot
D. Set “Shared Users” option at /ip hotspot user profile
Correct Answer: D
Section: (none)
You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured?
A. Set “Shared Users” option at /ip hotspot
B. It’s not possible
C. Set “only-one=no’ at /ip hotspot
D. Set “Shared Users” option at /ip hotspot user profile
Correct Answer: D
Section: (none)
QUESTION 110
Using wireless connect-list it’s possible to prioritize connection to one Access Point over another Access Point
by changing the order of the entries.
A. True
B. False
Correct Answer: A
Section: (none)
Using wireless connect-list it’s possible to prioritize connection to one Access Point over another Access Point
by changing the order of the entries.
A. True
B. False
Correct Answer: A
Section: (none)
QUESTION 111
How many DHCP servers could you run on one interface?
A. 255
B. 1024
C. 4
D. 1
Correct Answer: D
Section: (none)
How many DHCP servers could you run on one interface?
A. 255
B. 1024
C. 4
D. 1
Correct Answer: D
Section: (none)
QUESTION 112
What configuration is added by /ip hotspot setup command? (select all that apply)
A. /ip hotspot user
B. /queue tree
C. /ip service
D. /ip dhcp-server
E. /ip hotspot walled-garden
Correct Answer: AD
Section: (none)
What configuration is added by /ip hotspot setup command? (select all that apply)
A. /ip hotspot user
B. /queue tree
C. /ip service
D. /ip dhcp-server
E. /ip hotspot walled-garden
Correct Answer: AD
Section: (none)
QUESTION 113
Router has Wireless and Ethernet client interfaces, all client interfaces are bridged.
To create a DHCP service for all clients you must configure DHCP server on
A. only on bridge interface
B. every bridge port
C. DHCP service is not possible in this setup
D. Ethernet and wireless interfaces
Correct Answer: A
Section: (none)
Router has Wireless and Ethernet client interfaces, all client interfaces are bridged.
To create a DHCP service for all clients you must configure DHCP server on
A. only on bridge interface
B. every bridge port
C. DHCP service is not possible in this setup
D. Ethernet and wireless interfaces
Correct Answer: A
Section: (none)
QUESTION 114
A routing table has following entries:
0 dst-address=10.0.0.0/24 gateway=10.1.5.126
1 dst-address=10.1.5.0/24 gateway=10.1.1.1
2 dst-address=10.1.0.0/24 gateway=25.1.1.1
3 dst-address=10.1.5.0/25 gateway=10.1.1.2
Which gateway will be used for a packet with destination address 10.1.5.126?
A. 10.1.1.1
B. 10.1.1.2
C. 10.1.5.126
D. 25.1.1.1
Correct Answer: C
Section: (none)
A routing table has following entries:
0 dst-address=10.0.0.0/24 gateway=10.1.5.126
1 dst-address=10.1.5.0/24 gateway=10.1.1.1
2 dst-address=10.1.0.0/24 gateway=25.1.1.1
3 dst-address=10.1.5.0/25 gateway=10.1.1.2
Which gateway will be used for a packet with destination address 10.1.5.126?
A. 10.1.1.1
B. 10.1.1.2
C. 10.1.5.126
D. 25.1.1.1
Correct Answer: C
Section: (none)
QUESTION 115
You want to skip HotSpot (authorization, accounting, etc.) for a specific host. What should you use?
A. /ip hotspot ip-binding
B. /ip hotspot walled-garden ip
C. /ip hotspot walled-garden
D. /ip address
Correct Answer: A
Section: (none)
You want to skip HotSpot (authorization, accounting, etc.) for a specific host. What should you use?
A. /ip hotspot ip-binding
B. /ip hotspot walled-garden ip
C. /ip hotspot walled-garden
D. /ip address
Correct Answer: A
Section: (none)
QUESTION 116
Which wireless mode allows you to connect to any standard AP (not only MikroTik) and to be able to bridge this
wireless interface to an Ethernet?
A. station
B. bridge
C. station-pseudobridge
D. station-wds
Correct Answer: C
Section: (none)
Which wireless mode allows you to connect to any standard AP (not only MikroTik) and to be able to bridge this
wireless interface to an Ethernet?
A. station
B. bridge
C. station-pseudobridge
D. station-wds
Correct Answer: C
Section: (none)
QUESTION 117
Which configuration menu should you use to change router's Winbox default port?
A. /ip service
B. /ip firewall service-ports
C. /ip firewall filter
D. /system resource
Correct Answer: A
Section: (none)
Which configuration menu should you use to change router's Winbox default port?
A. /ip service
B. /ip firewall service-ports
C. /ip firewall filter
D. /system resource
Correct Answer: A
Section: (none)
QUESTION 118
What kind of users are listed in the "/user" menu in routerOS?
A. pptp users
B. hotspot users
C. router users
D. wireless user
Correct Answer: C
Section: (none)
What kind of users are listed in the "/user" menu in routerOS?
A. pptp users
B. hotspot users
C. router users
D. wireless user
Correct Answer: C
Section: (none)
