Académique Documents
Professionnel Documents
Culture Documents
MAC Address
connected to a MikroTik RouterBOARD 750 c. FQDN Address
with a correct U.T.P. RJ45 functioning cable. d. Interface Address
The device is configured with an IPv4
address of 192.168.100.70 using a subnet 7. How many usable IP addresses are there
mask of 255.255.255.252. What will be a in a 23-bit (255.255.254.0) subnet?
valid IPv4 address for the RouterBOARD a. 512
750 for a successful connection to the b. 510
device? c. 508
a. 192.168.100.70/255.255.255.252 d. 254
b. 192.168.100.69/255.255.255.252
c. 192.168.100.71/255.255.255.252 8. Is ARP used in the IPv6 protocol ?
d. 192.168.100.68/255.255.255.252 False
True
2. In MikroTik RouterOS, Layer-3
communication between 2 hosts can be 9. Which of the following protocols / port s
achieved by using an address subnet of: are used for SNMP. (Simple Network
a. /31 Management Protocol)
b. /29 a. TCP 162
c. /32 b. UDP 162
d. /30 c. UDP 161
d. TCP 25
3. Which computers would be able to e. TCP 123
communicate directly (without any routers f. TCP 161
involved)
a. 192.168.17.15/29 and 192.168.17.20/28 10. If ARP=reply-only is configured on an
b. 192.168.0.5/26 and 192.168.0.100 interface, what will this interface do a.
c. 10.5.5.1/24 and 10.5.5.100/25 Accept all IP/MAC combinations listed in
d. 10.10.0.17/22 and 10.10.1.30/23 /ip arp as static entries
b. Accept all IP addresses listed in /ip arp
4. How many IP addresses can one find in as static entries
the header of an IP packet? c. Add new MAC addresses in /ip arp list
a. 1 d. Accept all MAC-addresses listed in /ip
b. 3 arp as static entries
c. 2 e. Add new IP addresses in /ip arp list
d. 4
5. The network address is 11. Select which of the following are ‘Public
a. The first usable address of the subnet IP addresses’:
b. The last address of the subnet a. 192.168.0.1
c. The first address of the subnet b. 172.168.254.2
c. 172.28.73.21
6. What is term for the hardware coded d. 10.110.50.37
address found on an interface? e. 11.63.72.21
a. IP Address
12. Which of the following IP addresses are
publicly routable? 18. MAC layer by OSI model is also known
a. 127.34.155.3 as
b. 192.168.1.4 a. Layer 3
c. 172.16.13.23 b. Layer 7
d. 11.3.10.4 c. Layer 1
d. Layer 2
13. If ARP=reply-only is enabled on one e. Layer 6
router interface, router can add dynamic
ARP entries for the particular interface. 19. Select valid MAC-address
False a. G2:60:CF:21:99:H0
True b. 00:00:5E:80:EE:B0
c. AEC8:21F1:AA44:54FF:1111:DD
14. The basic unit of a physical network d. AE:0212:1201
(OSI Layer 1) is the: e. 192.168.0.0/16
a. Header
b. Byte 20. How many layers does Open Systems
c. Bit Interconnection model have?
d. Frame a. 7
b. 6
15. Which ones of the following are valid IP c. 5
addresses? d. 12
a. 192.168.13.255 e. 9
b. 10.10.14.0
c. 192.168.256.1
d. 1.27.14.254 -------------------------------------------------------
------------------------------ SET - 2 --------------
16. How many usable IP addresses are -------------------------------------------------------
there in a 20-bit subnet? ----------------
a. 2046
b. 2047
c. 4094
d. 4096 1. Action=redirect is applied in
e. 2048 a. chain=srcnat
b. chain=dstnat
17. Which of the following is NOT a valid c. chain=forward
MAC Address?
a. 13:16:86:53:89:43 2. You have 802.11b/g wireless card. What
b. 80:GF:AA:67:13:5D frequencies are available to you?
c. 88:0C:00:99:5F:EF a. 5800MHz
d. EA:BA:AA:EE:FF:CB b. 2412MHz
e. 95:B5:DD:EE:78:8A c. 5210MHz
d. 2422MHz
e. 2327MHz
3. Mark all correct statements about d. /ip firewall nat add
/export (rsc file). action=masquerade chain=srcnat out-
a. Exports logs from /log print interface=ether1
b. Exports full configuration of the router
c. Exports only part of the configuration 9. What letters appear next to a route,
(for example /ip firewall) which is automatically created by RouterOS
d. Exports scripts from /system script when user adds a valid address to an active
e. Exports files could not edited interface?
a. I
4. What wireless card can we use to achieve b. D
100 Mbps actual wireless throughput? c. A
a. 802.11 b/g d. S
b. 802.11 a/b/g e. C
c. 802.11 a
d. 802.11 a/n 10. Mark all features that are compatible
e. 802.11 a/b/g/n with Nstreme
a. WDS between a device in station-wds
5. It is possible to add user-defined chains mode and a device in station-wds mode
in ip firewall mangle b. Encryption
True c. WDS between a device in ap-bridge
False mode with a device in station-wds mode
d. Bridging a device in station mode with a
6. Choose all valid hosts address range for device in ap-bridge mode
subnet 15.242.55.62/27
a. 15.242.55.31-15.242.55.62 11. Can you manually add drivers to
b. 15.242.55.32-15.242.55.63 RouterOS in case your PCI Ethernet card is
c. 15.242.55.33-15.242.55.62 not recognized, and it’s a driver issue?
d. 15.242.55.33-15.242.55.63 a. Yes
b. No
7. Action=redirect allows you to make
a. Transparent DNS Cache 12. For static routing functionality,
b. Forward DNS to another device IP additionally to the RouterOS system
address package, you will also need the following
c. Enable Local Service software package:
d. Transparent HTTP Proxy a. none
b. dhcp
8. Which is correct masquerade rule for c. routing
192.168.0.0/24 network on the router with d. advanced-tools
outgoing interface=ether1?
a. /ip firewall nat add action=masquerade 13. Which are necessary sections in /queue
chain=srcnat simple to set bandwidth limitation?
b. /ip firewall nat add action=masquerade a. target-address, max-limit
chain=srcnat src-address=192.168.0.0/24 b. target-address, dst-address, max-limit
c. /ip firewall nat add action=masquerade c. target-address, dst-address
out-interface=ether1 chain=dstnat d. max-limit
set Router A to use “/ppp secret” accounts
14. What protocol is used for Ping and from Router B to authenticate PPPoE
Trace route? customers ?
a. DHCP Yes No
b. IP
c. TCP d. ICMP - ping 20. MikroTik RouterOS DHCP client can
e. UDP – trace route receive following options
a. Byte limit
15. From which of the following locations b. IP Gateway
can you obtain Winbox? c. Rate limit
a. Router’s webpage d. Uptime limit
b. Files menu in your router e. IP Address and Subnet
c. Via the console cable
d. mikrotik.com
-------------------------------------------------------
16. Two hosts, A and B, are connected to a ------------------------------ SET - 3 --------------
broadcast LAN. Select all the answers -------------------------------------------------------
showing pairs of IP address/mask which ----------------
would allow IP connections to be
established between the two hosts.
a. A: 10.1.2.66/25 and B: 10.1.2.109/26
b. A: 10.2.2.1/23 and B: 10.2.0.1/22 1. If you need to make sure that one
c. A: 10.1.2.192/24 and B: 10.1.2.129/26 computer in your HotSpot network can
d. A: 10.2.1.0/23 and B: 10.2.0.1/22 access the Internet without HotSpot
authentication, which menu allows you to
17. Why is it useful to set a Radio Name on do this?
the radio interface? a. Users
a. To identify a station in a list of b. IP bindings
connected clients c. Walled-garden
b. To identify a station in the Access List d. Walled-garden IP
c. To identify a station in Neighbor
discovery 2. How many different priorities can be
selected for queues in MikroTik RouterOS?
18. What kind of users are listed in the a. 8
Secrets window of the PPP menu? b. 16
a. pptp users c. 0
b. l2tp users d. 1
c. winbox users
d. wireless users 3. Which default route will be active? /ip
e. pppoe users route add disabled=no distance=10 dst-
f. hotspot users address=0.0.0.0/0 gateway=1.1.1.1 add
disabled=no distance=5 dst-
19. Router A and B are both running as address=0.0.0.0/0 gateway=2.2.2.2
PPPoE servers on different broadcast a. Route via gateway 1.1.1.1
domains of your network. Is it possible to b. Route via gateway 2.2.2.2
a router that an IP packet can experience
4. How long is level 1 (demo) license before it will be discarded ?
valid? a. 60
a. 24 hours b. 30
b. Infinite time c. 1
c. 1 month d. 64
d. 1 year
10. The network address is
5. Is ARP used in the IPv6 protocol ? a. The first usable address of the subnet
True b. The last address of the subnet
False c. The first address of the subnet
6. In MikroTik RouterOS, Layer-3 11. Which ones of the following are valid IP
communication between 2 hosts can be addresses? [multiple answers]
achieved by using an address subnet of: a. 192.168.13.255
a. /30 b. 1.27.14.254
b. /29 c. 10.10.14.0
c. /32 d. 192.168.256.1
d. /31
12. Which of the following is NOT a valid
7. A PC with IP 192.168.1.2 can access MAC Address?
internet, and static ARP has been set for a. 95:B5:DD:EE:78:8A
that IP address on gateway. When the PC b. 13:16:86:53:89:43
Ethernet card failed, the user change it with c. 80:GF:AA:67:13:5D
a new card and set the same IP for it. What d. 88:0C:00:99:5F:EF
else should be done? [multiple answers] e. EA:BA:AA:EE:FF:CB
16. What protocol does ping use? 1. You have a router with configuration
a. UDP - Public IP :202.168.125.45/24
b. TCP - Default gateway:202.168.125.1
c. ARP - DNS server: 248.115.148.136,
d. ICMP 248.115.148.137
- Local IP: 192.168.2.1/24
17. MAC layer by OSI model is also known Mark the correct configuration on client PC
as to access to the Internet
a. Layer 3 a. IP:192.168.0.1/24 gateway:192.168.2.1
b. Layer 7 b. IP:192.168.2.253/24
c. Layer 2 gateway:202.168.0.1
d. Layer 6 c. IP:192.168.1.223/24
e. Layer 1 gateway:248.115.148.136
d. IP:192.168.2.115/24 gateway:
18. How many layers does Open Systems 192.168.2.1
Interconnection model have? e. IP:192.168.2.2/24
a. 12 gateway:202.168.125.45
b. 6
c. 9 2. On the advanced menu of the wireless
d. 5 setup there is a parameter called “Area”, it
e. 7 works directly with:
a. Connect List
19. How many IP addresses can one find in b. Access List
the header of an IP packet? c. None of these
a. 3 d. Security Profile
b. 4
c. 1 3. What menus should be used to allow
d. 2 certain websites to be accessed from
behind a hotspot interface, without client
20. The basic unit of a physical network authentication
(OSI Layer 1) is the: a. ip hotspot ip-binding
a. Byte b. ip hotspot profile
b. Frame c. ip hotspot walled-garden
c. Bit d. ip hotspot walled-garden ip
d. Header
4. You want to use PCQ and allow 256k
maximum download and upload for each
client. Choose correct argument values for
the required queue. importing a previously exported rsc file to
a. kind=pcq pcq-limit=1256000 pcq- activate the new configuration.
classifier=dst-address True
b. kind=pcq pcq-limit=256000 pcq- False
classifier=dst-address
c. kind=pcq pcq-limit=5000000 pcq- 9. It is impossible to disable user “admin” at
classifier=src-address the menu “/user”
d. kind=pcq pcq-limit=256000 pcq- True
classifier=src-address False
e. kind=pcq pcq-limit=5000000 pcq-
classifier=dst-address 10. If a packet comes to a router and starts
a new, previously unseen connection,
5. Which of the following is true for which connection state
connection tracking a. no connection state would be applied to
a. Enabling connection tracking reduces such packet
CPU usage in RouterOS b. new
b. Connection tracking must be enabled c. unknown
for firewall to be effective d. invalid
c. Connection tracking must be enable e. established
for NAT’ed network
d. Disable connection tracking for mangle 11. We have two radio cards in a point-to-
to work point link with settings:
Card Nr 1.: mode=ap-bridge ssid=”office”
6. Which of these are possible solutions to frequency=2447 band=2.4ghz-b/g default-
bridge two networks over a wireless authentication=yes default-forwarding=yes
link: a. Both devices in AP mode and security-profile=wpa
enable WDS mode Card Nr 2.: mode=station ssid=”office”
b. One device in AP mode, another one in frequency=2412 band=2.4ghz-b/g default-
station-pseudobridge-clone authentication=yes default-forwarding=yes
c. One device in AP mode, another one in security-profile=wpa2
station-pseudobridge Is Card Nr2. able to connect to Card Nr 1.?
d. One device in AP mode, another one in a. Yes, if Nstreme is enabled or disabled on
station both
b. Yes, when security profile settings are
7. When backing up your router by using compatible with each other and Nstreme is
the ‘Export’ command, the following enabled or disabled on both
happens: c. No, because of the different frequencies
a. Winbox usernames and passwords are d. No, because of the different security
backed up profiles
b. The Export file can be edited with a
standard text editor after its creation 12. If you need to make sure that one
c. You are requested to give the export computer in your HotSpot network can
file a name access the Internet without HotSpot
authentication, which menu allows you to
8. You need to reboot a RouterBoard after do this?
a. Walled-garden IP e. PCQ – Per Connection Queuing
b. Walled-garden f. RED – Random Early Detect (or Drop)
c. Users
d. IP bindings 16. A network ready device is directly
connected to a MikroTik RouterBOARD 750
13. Consider the following network with a correct U.T.P. RJ45 functioning cable.
diagram. In R1, you have the following The device is configured with an IPv4
configuration: address of 192.168.100.70 using a subnet
/ip route mask of 255.255.255.252. What will be a
add dst-address=192.168.1.0/24 valid IPv4 address for the RouterBOARD
gateway=192.168.99.2 750 for a successful connection to the
/ip firewall nat device?
add chain=srcnat out-interface=Ether1 a. 192.168.100.70/255.255.255.252
action=masquerade b. 192.168.100.69/255.255.255.252
On R2, if you wish to prevent all access to a c. 192.168.100.71/255.255.255.252
server located at 192.168.1.10 from LAN1 d. 192.168.100.68/255.255.255.252
devices, which of the following rules would
be needed? 17. How many usable IP addresses are
a. /ip firewall filter add chain=forward src- there in a 23-bit (255.255.254.0) subnet?
address=192.168.99.1 dst- a. 512
address=192.168.1.10 action=drop b. 510
b. /ip firewall filter add chain=input src- c. 508
address=192.168.99.1 dst- d. 254
address=192.168.1.10 action=drop
c. /ip firewall nat add chain=dstnat src- 18. Is ARP used in the IPv6 protocol ?
address=192.168.99.1 dst- True
address=192.168.1.10 action=drop False
d. /ip firewall filter add chain=forward src-
address=192.168.0.0/24 dst- 19. Which of the following protocols / port
address=192.168.1.10 action=drop s are used for SNMP. (Simple Network
Managemnt Protocol)
14. What is the default protocol/port of a. TCP 162
(secure) winbox? b. UDP 162
a. UDP/5678 c. UDP 161
b. TCP/8291 d. TCP 25
c. TCP/22 e. TCP 123
d. TCP/8080 f. TCP 161
15. Mark the queue types that are available 20. Select which of the following are ‘Public
in RouterOS IP addresses’:
a. SFQ – Stochastic Fairness Queuing a. 192.168.0.1
b. DRR – Deficit Round Robin b. 172.168.254.2
c. FIFO – First In First Out (for Bytes or c. 172.28.73.21
for Packets) d. 10.110.50.37
d. LIFO – Last In First Out e. 11.63.72.21
c. l2tp users
21. If ARP=reply-only is enabled on one d. pptp users
router interface, router can add dynamic e. pppoe users
ARP entries for the particular interface. f. winbox users
False
True
2. What configuration is added by /ip
22. MAC layer by OSI model is also known hotspot setup command? (select all that
as apply)
a. Layer 3 a. /ip service
b. Layer 7 b. /ip hotspot user
c. Layer 1 c. /ip hotspot walled-garden
d. Layer 2 d. /ip dhcp-server
e. Layer 6 e. /queue tree
9. Which options should be used when you 13. Check the allowed input formats for
want to prevent access from one specific wireless scan-list.
address to your router web interface? a. 5500 5700
a. Firewall Filter Chain Forward b. 5500-5700
b. Firewall Filter Chain Input c. 5500,5700
c. Group settings for System users d. 5500 - 5700
d. WWW service from IP Services e. 5500/5700
10. Which of the following would prevent 14. Choose all valid hosts address range for
unknown clients from connecting to your subnet 15.242.55.62/27
AP? Choose the BEST answer. a. 15.242.55.31-15.242.55.62
a. Check the "Do not permit unknown b. 15.242.55.33-15.242.55.63
client" box in the wireless configuration c. 15.242.55.33-15.242.55.62
b. Uncheck "Default Authenticate" in the d. 15.242.55.32-15.242.55.63
wireless card configuration, and add each
known client's MAC address to your access- 15. After putting this rule: /ipfirewall add
list configuration ensuring that you enable chain=input action=drop, you will still be
"authenticate" in the entry able to access the Router using the mac-
c. Add each known client's MAC address to address.
your access-list configuration is the only Yes
step needed
d. Uncheck "Default Authenticate" in the 16. You need to reboot a RouterBoard after
importing a previously exported rsc file to 21. Collisions are possible in full-duplex
activate the new configuration. Ethernet networks
True True
False False
1. Choose correct statements for MikroTik 7. You want to limit bandwidth for your
proxy. HotSpot users. HotSpot can create dynamic
a. Destination NAT rule is required to queues on user login to do the speed
utilize transparent proxy facility limitations.
b. To deny access to a specific website, a. Yes/ True
caching should be enabled b. No/ False
c. Controls domains or servers which are
allowed to cache by Proxy 8. For static routing functionality,
d. Can deny access to a specific domains or additionally to the RouterOS system
servers, but not specific web pages package, you will also need the following
software package:
2. Collisions are possible in full-duplex a. dhcp
Ethernet networks b. none
True c. advanced-tools
False d. routing
3. Which of the following is NOT a valid 9. You start a scan for wireless networks on
MAC Address? you access point. What will happen ?
a. 13:16:86:53:89:43 a. All connected clients will disconnect
b. 80:GF:AA:67:13:5D b. You'll see all connected clients
c. 88:0C:00:99:5F:EF c. You'll see available frequencies
d. EA:BA:AA:EE:FF:CB
e. 95:B5:DD:EE:78:8A 10. What kind of users are listed in the
"/user" menu?
4. The default value of 'target-scope' for a a. pptp users
static route is: b. wireless users
a. 30 c. hotspot users
b. 1 d. router users
c. 10
d. 255 11. Which is correct masquerade rule for
192.168.0.0/24 network on the router with
5. Which firewall chain would be used to outgoing interface=ether1?
block a client's MSN traffic on a router? a. /ip firewall nat add action=masquerade
a. output chain=srcnat out-interface=ether1
b. static b. /ip firewall nat add action=masquerade
chain=srcnat src-address=192.168.0.0/24 drop rule (3rd rule)
c. /ip firewall nat add action=masquerade b. Router will log it with prefix: JUMP-
out-interface=ether1 chain=dstnat ICMP-DENY
d. /ip firewall nat add action=masquerade c. Router will drop the packet at ICMP
chain=srcnat (jump) chain drop rule (5th rule)
d. Router will log it with prefix: ICMP-
12. Which firewall chain should you use to DENY
filter ICMP packets from the router itself?
a. input 16. MikroTik proxy features are:
b. forward a. POP3 caching
c. postrouting b. DNS name filtering
d. output c. SMTP caching d. HTTP caching
e. FTP caching
13. Which software version can be installed
onto the following RouterBoard types? 17. What does this simple queue do (check
a. routeros-mipsbe-x.xx.npk on a the image)?
RB433 b. routeros-powerpc-x.xx.npk on a. Queue limits host 192.168.1.10
a RB333 download data rate to one megabit per
c. routeros-mipsle-x.xx.npk on RB133 second.
d. routeros-x86-x.xx.npk on a RB1100 b. Queue limits host 192.168.1.10
e. routeros-mipsbe-x.xx.npk on a RB133 upload data rate to one megabit per
second.
14. The highest queue priority is c. Queue guarantees download data rate of
a. 16 one megabit per second for host
b. 8 192.16SID="WAN1"mode="ap-bridge" and
c. 256 a VirtualAP with SSID="VAP1" on the
d. 1 router. Is it possibl8.1.10
d. Queue guarantees upload data rate of
15. Firewall configuration is the following: one megabit per second for host
1) /ip firewall filter add chain=input 192.168.1.10
protocol=icmp action=jump jump-
target=ICMP 18. You have a wireless interface with Se to
2) /ip firewall filter add chain=input use nstreme protocol?
protocol=icmp action=log log-prefix=ICMP- a. Yes, but Nstreme will be used for all SSID
DENY assigned for that physical interface
3) /ip firewall filter add chain=input b. Yes, but Nstreme can be used only for
protocol=icmp action=drop SSID=WLAN1.
4) /ip firewall filter add chain=ICMP c. No, Nstreme can not be used on wireless
protocol=icmp action=log log-prefix=JUMP- interface if a VirtualAP is on it.
ICMP-DENY d. Yes, but Nstreme can be used only for
5) /ip firewall filter add chain=ICMP SSID=VAP1.
protocol=icmp action=drop
Client sends "ping" to router. What will the 19. /store allows you to save to external
router do? disk
a. Router will drop the packet at the Input a. User-Manager data
b. dude data
c. web-proxy data 25. EoiP is:
d. system configuration a. MikroTik proprietary tunnel protocol
b. Layer-3 tunnel
20. /ip route configuration on router, c. Layer-2 tunnel, that can be bridged
/ip route add gateway=192.168.0.1
/ip route add dst-address=192.168.1.0/24
gateway=192.168.0.2 -------------------------------------------------------
/ip route add dst-address=192.168.2.0/24 ------------------------------ SET - 8 --------------
gateway=192.168.0.3 -------------------------------------------------------
/ip route add dst-address=192.168.3.0/26 ----------------
gateway=192.168.0.4
Router needs to send packets to
192.168.3.240. Which gateway will be
used? 1. log messages are stored on disk by
a. 192.168.0.2 default
b. 192.168.0.1
c. 192.168.0.3 2. Router OS can set vlan-id value from - to :
d. 192.168.0.4 a. 1-2048
b. 1-2049
21. What is the meaning of letter "R" on an c. 1-4096
active session in the menu PPP Active d. 1-4095
Connections?
a. Running 3. Can you manually add drivers to
b. Radius RouterOS in case your PCI Ethernet card is
c. Remote not recognized, and you suspect it is a
driver issue?
22. A station can connect to AP if they both a. Yes
use different country regulation settings, b. No
but the frequency chosen is allowed in both
countries 4. Which of the following is true for
connection tracking
23. Hotspot ip-binding is used to allow a. Enabling connection tracking reduces
access to remote host specifying the IP CPU usage in RouterOS
address of the remote host. b. Disable connection tracking for mangle
to work
24. Router has Wireless and Ethernet client c. Connection tracking must be enable
interfaces, all client interfaces are bridged. for NAT'ed network
To create a DHCP service for all clients you d. Connection tracking must be enabled
must configure DHCP server on for firewall to be effective
a. every bridge port
b. only on bridge interface 5. What letters appear next to a route,
c. Ethernet and wireless interfaces which is automatically created by RouterOS
d. DHCP service is not possible in this when user adds a valid address to an active
setup interface?
a. I d. dhcp
b. S
c. C 10. To avoid looping on this network, you
d. D need to:
e. A a. Enable RSTP on AP1 and AP3
b. Enable RSTP on AP1
6. Which is the default port of IP-Winbox? c. Enable RSTP on AP1, AP2 and AP3
a. TCP 8192
b. UDP 8291 11. To make the masquerading of the
c. TCP 8291 network 192.168.0.0/24, configured on the
d. TCP 80 interface Ether1, you should add rule
a. /ip firewall nat add chain=dstnat in-
7. You want to use PCQ and allow 256k interface=ether1 src-
maximum download and upload for each address=192.168.0.0/24
client. Choose correct argument values for action=masquerade
the required queue. b. /ip firewall nat add chain=srcnatsrc-
a. kind=pcqpcq-limit=5000000 pcq- address=192.168.0.0/24
classifier=dst-address action=masquerade
b. kind=pcqpcq-limit=256000 pcq- c. /ip firewall nat add chain=dstnat out-
classifier=src-address interface=ether1 src-
c. kind=pcqpcq-limit=256000 pcq- address=192.168.0.0/24
classifier=dst-address action=masquerade
d. kind=pcqpcq-limit=5000000 pcq- d. /ip firewall nat add chain=srcnat out-
classifier=src-address interface=ether1 src-
e. kind=pcqpcq-limit=1256000 pcq- address=192.168.0.0/24
classifier=dst-address action=masquerade
8. To limit wireless access for your HotSpot 12. On the advanced menu of the wireless
users setup there is a parameter called "Area", it
a. Create MAC Address restriction on PPP works directly with:
user login a. None of these
b. Create IP Address restriction in the b. Connect List
Wireless Access List c. Access List
c. Create MAC Address restriction on d. Security Profile
HotSpot user login
d. Create MAC Address restriction in the 13. The basic unit of a physical network
Wireless Access List (OSI Layer 1) is the:
a. Header
9. For static routing functionality, b. Bit
additionally to the RouterOS system c. Byte
package, you will also need the following d. Frame
software package:
a. routing 14. It is impossible to disable user "admin"
b. advanced-tools at the menu "/user"
c. none
True
False 21. Which default route will be active?
15.HotSpot is required on the interfaces /ip route
ether2, ether3, wlan1 (in ap-bridge mode). add disabled=no distance=10 dst-
These interfaces are bridged in the bridge1 address=0.0.0.0/0 gateway=1.1.1.1
interface. add disabled=no distance=5 dst-
Which interface should the HotSpot server address=0.0.0.0/0 gateway=2.2.2.2
be configured on? a. Route via gateway 1.1.1.1
a. On ether2 interface b. Route via gateway 2.2.2.2
b. On ether3 interface
c. On wlan1 interface 22. An IP address pool can contain
d. On bridge1 interface addresses from more than one subnet.
a. True
16. The highest queue priority is b. False
a. 256
b. 1 23. Is it possible to use the serial port of
c. 16 MikroTik to communicate with an external
d. 8 device connected by null-modem cable?
a. Yes, if port is not being used
17. What is necessary for PPPoE client b. Yes, when other is a MikroTik router.
configuration? c. Yes, it is always possible by /system
a. Static IP address on PPPoE client serial-terminal command.
interface
b. ip firewall nat masquerade rule c. 24. It is required to make a web server on a
Interface (on which PPPoE client is private LAN visible on the Public Internet.
going to work) Only the web server port should be visible
to the public. Which of the following
18. To be able to do NAT the connection configuration steps must be met. (select all
tracking does not need to be enabled. that apply)
a. True a. A route between the NAT Router and the
b. False webserver must exist
b. LAN address of the webserver should be
19. Check the allowed input formats for routable on the internet
wireless scan-list. c. in ip firewall NAT there should be a
a. 5500,5700 dst-nat between the public ip of the
b. 5500-5700 router and the private ip of the
c. 5500/5700 webserver
d. 5500 - 5700 d. Connection Tracking must be enabled
e. 5500 5700 on NAT router
e. Public IP address of the webserver must
20. To connect your MikroTik router to a be installed on the NAT Router
wireless access point, you have to:
a. Use the same Radio Name 25. Collisions are possible in full-duplex
b. Use the same SSID as on accesspoint Ethernet networks
c. Use the same Band (5 GHz, 2.4 GHz, ...)
True are possible?
False a. S = Static
b. C = Connected
c. D = Drop
d. A = Active
-------------------------------------------------------
------------------------------ SET - 9 -------------- 7. You have to connect to a RouterBOARD
------------------------------------------------------- without any previous configuration. Select
---------------- all possibilities to connect and do some
basic configuration
a. Telnet
b. Attach monitor/keyboard
1. Is it possible to have PPTP Client and c. MAC-Winbox
PPTP server on one MikroTik router at the d. Serial Connection
same time?
a. Yes/ True 8. A network ready device is directly
b. No/ False connected to a MikroTik RouterBOARD 750
with a correct U.T.P. RJ45 functioning cable.
2. For static routing functionality, The device is configured with an IPv4
additionally to the RouterOS system address of 192.168.100.70 using a subnet
package, you will also need the following mask of 255.255.255.252. What will be a
software package: valid IPv4 address for the RouterBOARD
a. dhcp 750 for a successful connection to the
b. none device?
c. advanced-tools a. 192.168.100.70/255.255.255.252
d. routing b. 192.168.100.68/255.255.255.252
c. 192.168.100.69/255.255.255.252
3. What could be monitored by Torch? d. 192.168.100.71/255.255.255.252
a. Dst. Address
b. Dst. Port 9. Netinstall can be used to
c. None of the above is correct a. Install package for different hardware
d. Src. Address architecture
e. Vlan ID b. Reinstall software without losing
f. Protocol licence
c. Keep configuration, but reset a lost
4. The highest queue priority is admin password
a. 16 d. Install different software version
b. 8 (upgrade or downgrade)
c. 1
d. 256 10. Consider the following network
diagram. In R1, you have the following
5. Wireless clients (mode=station) will configuration:
work properly if bridged to ethernet /ip route
add dst-address=192.168.1.0/24
6. Which of the following Routes statuses gateway=192.168.99.2
/ip firewall nat address=192.168.0.0/24
add chain=srcnat out-interface=Ether1 action=masquerade
action=masquerade
On R2, if you wish to prevent all access to a 13. RouterOS DHCP server is able to send
server located at 192.168.1.10 from LAN1 any DHCP options (specified in RFCs) to
devices, which of the following rules would DHCP clients
be needed? a. Yes
a. /ip firewall nat add chain=dstnat src- b. No
address=192.168.99.1 dst-
address=192.168.1.10 action=drop 14. You would like to allow multiple logins
b. /ip firewall filter add chain=input src- with one user name on a HotSpot server.
address=192.168.99.1 dst- How should this be configured?
address=192.168.1.10 action=drop a. Set "only-one=no' at /ip hotspot
c. /ip firewall filter add chain=forward src- b. Set "Shared Users" option at /ip
address=192.168.0.0/24 dst- hotspot user profile
address=192.168.1.10 action=drop c. It's not possible
d. /ip firewall filter add chain=forward src- d. Set "Shared Users" option at /ip hotspot
address=192.168.99.1 dst-
address=192.168.1.10 action=drop 15. You are planning a migration from a
wireless link using 802.11a on 5GHz (with
11. /interface wireless access-list is used no nstreme) to one using Nv2 on 5GHz.
for When you change the AP from 802.11a to
a. Contains the security profiles settings Nv2, you do not wish a client to disconnect
b. Handles a list of Client's MAC Address to for more than a few seconds during the
permit/deny connection to AP upgrade.
c. Shows a list of Client's MAC Address that Assuming the client is capable of operating
are already registered at AP with Nv2 (correct hardware, correct
d. Authenticate Hotspot users encryption key and ROS version), which
setting(s) for 'wireless-protocol' should be
12. To make the masquerading of the enabled on the client so that the client can
network 192.168.0.0/24, configured on the auto-detect the protocol used by the AP
interface Ether1, you should add rule and still make connection with 802.11a or
a. /ip firewall nat add chain=srcnat out- Nv2 : (select all that apply)
interface=ether1 src- a. unspecified
address=192.168.0.0/24 b. any
action=masquerade c. Nv2
b. /ip firewall nat add chain=dstnat in- d. nv2-nstreme-802.11
interface=ether1 src-
address=192.168.0.0/24 16. Using wireless connect-list it’s possible
action=masquerade to prioritize connection to one Access Point
c. /ip firewall nat add chain=dstnat out- over another Access Point by changing the
interface=ether1 src- order of the entries.
address=192.168.0.0/24
action=masquerade
d. /ip firewall nat add chain=srcnat src-
a.False
b. True 22. Which RouterOS packages should be
installed on router for SSH server
support?
a. advanced-tools
17. The total-max-limit under Simple b. system
Queues will limit the combined upload and c. ssh
download of the target-address of your d. security
simple queue.
a. Yes 23. There is an HTTP server 10.0.0.1 in
b. No your private network. You have made a
DST-NAT rule that sends all HTTP traffic
18. Two mangle rules defining different received on your router's address
mangle marks for the same traffic type, will 80.232.50.100 to this server. If you make a
make it have both mangle marks. firewall rule on the router to disallow
a. Yes address 159.148.20.30 to communicate
b. No with the server, how would you identify
this communication in this rule?
19. Where are HotSpot authorized clients a. src-address=159.148.20.30 dst-
shown? address=80.232.50.100
a. /ip hotspot host b. src-address=159.148.20.30 dst-
b. /ip hotspot active address=10.0.0.1
c. /ip hotspot c. src-address=80.232.50.100 dst-
d. /ip hotspot user address=10.0.0.1
d. src-address=80.232.50.100 dst-
20. A PC with IP 192.168.1.2 can access address=159.148.20.30
internet, and static ARP has been set for
that IP address on gateway. When the PC 24. Router A and B are both running as
Ethernet card failed, the user change it with PPPoE servers on different broadcast
a new card and set the same IP for it. domains of your network. It is possible to
What else should be done? set Router A to use "/ppp secret" accounts
a. Old static ARP entry on gateway has to from Router B to authenticate PPPoE
be updated for the new card customers.
b. MAC-address of the new card has to be a. False
changed to MAC address of old card b. True
c. Another IP has to be added for Internet
access 25. Define a routing loop (choose the most
d. Nothing - it will work as before precise description)
a. situation where the packet is routed
21. Is it possible for a client to get an IP through the same sequence of routers
address but no gateway after a successful until the TTL expires
DHCP request? b. Situation where the packet does not
a. False reach it\'s destination
b. True c. situation where the TTL of the packet
expires
d. situation where the packet is routed 5. What is necessary for PPPoE client
through the same router twice configuration?
a. ip firewall nat masquerade rule
b. Static IP address on PPPoE client
------------------------------------------------------- interface
------------------------------ SET - 10 ------------- c. Interface (on which PPPoE client is
------------------------------------------------------- going to work)
-----------------
6. Mark all correct answers
a. Wireless access-list could allow and deny
access to your AP
1. You start a scan for wireless networks on b. Default-Forwarding could be enabled for
you access point. What will happen ? a specific clients by wireless access-list
a. All connected clients will disconnect c. /ip firewall filter allows to deny
b. You'll see all connected clients authentication to AP
c. You'll see available frequencies d. The only way to prevent wireless clients
connections - disable wireless interface
2. Is action=masquerade allowed in
chain=dstnat? 7. You want to limit bandwidth for your
a. no HotSpot users. HotSpot can create dynamic
b. yes queues on user login to do the speed
c. yes, but it works only for incoming limitations.
connections a. Yes/ True
d. yes, but only if dst-addr is specified b. No/ False
3. Which route will be used to reach host 8. A routing table has following entries:
192.168.1.55? 0 dst-address=10.0.0.0/24
/ip route gateway=10.1.5.126
add disabled=no distance=1 dst- 1 dst-address=10.1.5.0/24
address=192.168.1.0/24 gateway=1.1.1.1 gateway=10.1.1.1
add disabled=no distance=1 dst- 2 dst-address=10.1.0.0/24
address=192.168.1.0/25 gateway=2.2.2.2 gateway=25.1.1.1
add disabled=no distance=1 dst- 3 dst-address=10.1.5.0/25
address=192.168.0.0/16 gateway=3.3.3.3 gateway=10.1.1.2
a. Route via gateway 2.2.2.2 Which gateway will be used for a packet
b. Route via gateway 1.1.1.1 with destination address 10.1.5.126?
c. Route via gateway 3.3.3.3 a. 25.1.1.1
b. 10.1.1.1
4. Can you manually add drivers to c. 10.1.1.2
RouterOS in case your PCI Ethernet card is d. 10.1.5.126
not recognized, and you suspect it is a
driver issue? 9. Which is the default port of IP-Winbox?
a. No a. TCP 8192
b. Yes b. TCP 8291
c. TCP 80
d. UDP 8291 b. No/ False
10. In case when router login password is 16. MikroTik RouterOS commands can be
lost, it is necessary to reinstall RouterOS or run once a day by:
use hardware reset funcion. a. /system watchdog
a. Yes/ True b. /system scheduler
b. No/ False c. /system cron
11. On the advanced menu of the wireless 17. What is term for the hardware coded
setup there is a parameter called "Area", it address found on an interface?
works directly with: a. FQDN Address
a. Security Profile b. MAC Address
b. Connect List c. Interface Address
c. Access List d. IP Address
d. None of these
18. For user in local ppp secrets/ppp
12. Is it possible that the same IP address is profiles database, it is possible to
included in multiple address lists and still a. Allow/deny use of more than one login
be used by these multiple address lists? by this user
a. Destination NAT rule is required to b. Allow only pppoe login
utilize transparent proxy facility c. Allow login by pppoe and pptp, but deny
b. To deny access to a specific website, login by l2tp
caching should be enabled d. Deny services (like telnet) only for this
c. Controls domains or servers which are user or for one group of users
allowed to cache by Proxy e. Set max values for total transferred bytes
d. Can deny access to a specific domains or (up- and download)
servers, but not specific web pages
19. You have a DHCP server on your
13. What protocol does ping use? MikroTik router. The IP addresses 10.1.2.2-
a. ICMP 10.2.2.20 are distributed in the DHCP
b. ARP network. Additionally, 3 static IP address
c. TCP are defined for your servers: 10.1.2.31-
d. UDP 10.1.2.33. After a while 20 more IP
addresses need to be distributed in the
14. Which firewall chain should you use to network. Is it possible to distribute the
filter clients HTTP traffic going through the extra IP address without adding another
router? DHCP Server?
a. prerouting
b. output 20. You wish to secure your RouterOS
c. input system. You do not want the RouterOS to
d. forward be discoverable using MNDP or CDP locally.
You also want to deny management via the
15. Connection marks are stored in the MAC addresses on all interfaces. Select the
connection tracking table. correct actions to accomplish this.
a. Yes/ True a. Remove/Disable all interfaces under
mac-server telnet classifier=dst-address
b. Remove/Disable all discovery interfaces e. kind=pcq pcq-limit=256000 pcq-
c. Place a proper forward firewall rule to classifier=dst-address
block mac discovery
d. Remove/Disable the Interfaces 24. To avoid looping on this network, you
e. Place a proper input firewall rule to block need to:
mac discovery a. Enable RSTP on AP1, AP2 and AP3
f. Remove/Disable all interfaces under mac- b. Enable RSTP on AP1
Server winbox c. Enable RSTP on AP1 and AP3
g. Add a Deny All input firewall rule
25. HotSpot server is installed on the
21. What does this simple queue do (check router. All IP-phones are required to have
the image)? access to outside networks without any
a. Queue guarantees download data rate of HotSpot authentication. Select the
one megabit per second for host configuration options you can use to
192.168.1.10 achieve this setup.
b. Queue guarantees upload data rate of a. /ip hotspot walled-garden ip
one megabit per second for host b. /ip hotspot service-ports
192.168.1.10 c. /ip hotspot ip-binding
c. Queue limits host 192.168.1.10 download
data rate to one megabit per second.
d. Queue limits host 192.168.1.10 -------------------------------------------------------
upload data rate to one megabit per ------------------------------ SET - 11 -------------
second. -------------------------------------------------------
-----------------
22. For static routing functionality,
additionally to the RouterOS system
package, you will also need the following
software package: 1. DHCP server is configured on a router’s
a. none ether1 interface. IP address
b. advanced-tools 192.168.0.100/24 is assigned to the
c. routing interface. Possible IP pools, that can be
d. dhcp used by this DHCP server, are:
a. 192.168.0.1-192.168.0.255
23. You want to use PCQ and allow 256k b. 192.169.0.1-192.169.0.254
maximum download and upload for each c. 192.168.0.1-192.168.0.14
client. Choose correct argument values for d. 192.168.0.1-
the required queue. 192.168.0.99,192.168.0.101-
a. kind=pcq pcq-limit=256000 pcq- 192.168.0.254
classifier=src-address
b. kind=pcq pcq-limit=1256000 pcq- 2. Collisions are possible in full-duplex
classifier=dst-address Ethernet networks
c. kind=pcq pcq-limit=5000000 pcq- True
classifier=src-address False
d. kind=pcq pcq-limit=5000000 pcq-
3. What is possible with Netinstall? second.
a. MikroTikRouterOS reinstall
b. MikroTikRouterOS configuration 8. What wireless modes can be used in a
reset WDS setup?
c. MikroTikRouterOS password reset with a. bridge
saving router's configuration b. nstreme-dual-slave
c. station-wds
4. Action=redirect allows you to make d. ap-bridge
a. Transparent DNS Cache e. station
b. Enable Local Service
c. Forward DNS to another device IP 9. You want to use PCQ and allow 256k
address maximum download and upload for each
d. Transparent HTTP Proxy client. Choose correct argument values for
the required queue.
5. Which software version can be installed a. kind=pcqpcq-limit=256000 pcq-
onto the following RouterBoard types? classifier=src-address
a. routeros-mipsle-x.xx.npk on RB133 b. kind=pcqpcq-limit=1256000 pcq-
b. routeros-x86-x.xx.npk on a RB1100 classifier=dst-address
c. routeros-mipsbe-x.xx.npk on a c. kind=pcqpcq-limit=5000000 pcq-
RB433 classifier=dst-address
d. routeros-powerpc-x.xx.npk on a d. kind=pcqpcq-limit=256000 pcq-
RB333 classifier=dst-address
e. routeros-mipsbe-x.xx.npk on a RB133 e. kind=pcqpcq-limit=5000000 pcq-
classifier=src-address
6. What does the firewall action "Redirect"
do? Select all true statements. 10. Firewall NAT rules process only the
a. Redirects a packet to a specified IP first packet of each connection.
b. Redirects a packet to a specified port on
a host in the network 11. Select all the RouterOS software
c. Redirects a packet to a specified port on packages required for configuring a
the router wireless AP
d. Redirects a packet to the router a. wireless
b. advanced-tools
7. What does this simple queue do (check c. dhcp
the image)? d. routing
a. Queue limits host 192.168.1.10 e. system
download data rate to one megabit per
second. 12. Router OS can set vlan-id value from -
b. Queue guarantees download data rate of to :
one megabit per second for host a. 1-2048
192.168.1.10 b. 1-4096
c. Queue guarantees upload data rate of one c. 1-2049
megabit per second for host 192.168.1.10 d. 1-4095
d. Queue limits host 192.168.1.10
upload data rate to one megabit per 13. For static routing functionality,
additionally to the RouterOS system These interfaces are bridged in the bridge1
package, you will also need the following interface.
software package: Which interface should the HotSpot server
a. none be configured on?
b. advanced-tools a. On wlan1 interface
c. dhcp b. On ether3 interface
d. routing c. On bridge1 interface
d. On ether2 interface
14. Please select valid scan-list values in
interface wireless configuration: 20. Using wireless connect-list it’s possible
a. 5540,5560,5620+5700 to prioritize connection to one Access Point
b. 5640~5680 over another Access Point by changing the
c. 5560,5620-5700 order of the entries.
d. default,5560,5600,5660-5700 a.False
b. True
15. Can you manually add drivers to
RouterOS in case your PCI Ethernet card is 21. MikroTik proxy features are:
not recognized, and you suspect it is a a. HTTP caching
driver issue? b. POP3 caching
a. Yes c. SMTP caching
b. No d. FTP caching
e. DNS name filtering
16. What configuration is added by /ip
hotspot setup command? (select all that 22. Which computers would be able to
apply) communicate directly (without any routers
a. /queue tree involved)
b. /ip hotspot walled-garden a. 192.168.0.5/26 and 192.168.0.100
c. /ipdhcp-server b. 192.168.17.15/29 and
d. /ip hotspot user 192.168.17.20/28
e. /ip service c. 10.10.0.17/22 and 10.10.1.30/23
d. 10.5.5.1/24 and 10.5.5.100/25
17. Mark all correct answers: destination
NAT will take place... 23. Is it possible to have PPTP Client and
a. after ip firewall filter, chain forward PPTP server on one MikroTik router at the
b. before ip firewall filter, chain forward same time?
c. before routing decision a. Yes/ True
d. after routing decision b. No/ False
18. It is possible to access MikroTik Graphs 24. Which default route will be active?
on a different port than HTTP port 80. /ip route
a. Yes add disabled=no distance=10 dst-
b. No address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-
19. HotSpot is required on the interfaces address=0.0.0.0/0 gateway=2.2.2.2
ether2, ether3, wlan1 (in ap-bridge mode). a. Route via gateway 1.1.1.1
b. Route via gateway 2.2.2.2 b. ICMP
c. ARP
25. You can not use OSPF and RIP routing d. TCP
protocols simultaneously on the RouterOS.
a. Yes/ True 5. Select valid MAC-address
b. No/ False a.192.168.0.0/16
b. 00:00:5E:80:EE:B0
d.
AEC8:21F1:AA44:54FF:1111:DDAE:0212:1
------------------------------------------------------- 201
------------------------------ SET - 12 ------------- e. G2:60:CF:21:99:H0
-------------------------------------------------------
----------------- 6. Which computers would be able to
communicate directly (without any routers
involved)
a. 10.5.5.1/24 and 10.5.5.100/25
1. How many usable IP addresses are there b. 192.168.0.5/26 and 192.168.0.100
in a 23-bit (255.255.254.0) subnet? c. 10.10.0.17/22 and 10.10.1.30/23
a. 254 d. 192.168.17.15/29 and
b. 512 192.168.17.20/28
c. 510
d. 508 7. How many IP addresses can one find in
the header of an IP packet?
2. A network ready device is directly a. 4
connected to a MikroTik RouterBOARD 750 b. 1
with a correct U.T.P. RJ45 functioning cable. c. 2
The device is configured with an IPv4 d. 3
address of 192.168.100.70 using a subnet
mask of 255.255.255.252. What will be a 8. Which of the following protocols / port s
valid IPv4 address for the RouterBOARD are used for SNMP. (Simple Network
750 for a successful connection to the Managemnt Protocol)
device? a. TCP 25
a. 192.168.100.69/255.255.255.252 b. TCP 161
b. 192.168.100.71/255.255.255.252 c. UDP 161
c. 192.168.100.70/255.255.255.252 d. UDP 162
d. 192.168.100.68/255.255.255.252 e. TCP 123
f. TCP 162
3. Select valid subnet masks:
a. 192.0.0.0 9. How many usable IP addresses are there
b. 255.255.224.0 in a 20-bit subnet?
c. 255.255.192.255 a. 2046
d. 255.192.0.0 b. 2047
d. 4094
4. What protocol does ping use? e. 2048
a. UDP f. 4096
d. Layer 6
10. A PC with IP 192.168.1.2 can access e. Layer 1
internet, and static ARP has been set for 14. Which of the following IP addresses are
that IP address on gateway. When the PC publicly routable?
Ethernet card failed, the user change it with a. 127.34.155.3
a new card and set the same IP for it. b. 11.3.10.4
What else should be done? c. 172.16.13.23
a. Nothing - it will work as before d. 192.168.1.4
b. MAC-address of the new card has to be 15. The network address is
changed to MAC address of old card a. The first usable address of the subnet
c. Old static ARP entry on gateway has to b. The first address of the subnet
be updated for the new card c. The last address of the subnet
d. Another IP has to be added for Internet 16. Select which of the following are 'Public
access IP addresses':
a. 10.110.50.37
11. You have a router with configuration b. 11.63.72.21
- Public IP :202.168.125.45/24 c. 172.168.254.2
- Default gateway:202.168.125.1 d. 172.28.73.21
- DNS server: 248.115.148.136, e. 192.168.0.1
248.115.148.137
- Local IP: 192.168.2.1/24 17. Is ARP used in the IPv6 protocol ?
Mark the correct configuration on client PC True
to access to the Internet False
a. IP:192.168.0.1/24 gateway:192.168.2.1
b. IP:192.168.2.115/24 gateway: 18. What is term for the hardware coded
192.168.2.1 address found on an interface?
c. IP:192.168.2.2/24 a. MAC Address
gateway:202.168.125.45 b. Interface Address
d. IP:192.168.2.253/24 c. IP Address
gateway:202.168.0.1 d. FQDN Address
e. IP:192.168.1.223/24
gateway:248.115.148.136 19. How many layers does Open Systems
Interconnection model have?
12. Which ones of the following are valid IP a. 12
addresses? b. 7
a. 192.168.13.255 c. 6
b. 10.10.14.0 d. 9
c. 1.27.14.254 e. 5
d. 192.168.256.1 20. In MikroTik RouterOS, Layer-3
communication between 2 hosts can be
13. MAC layer by OSI model is also known achieved by using an address subnet of: a.
as /30
a. Layer 7 b. /31 c. /29
b. Layer 2 e. /32
c. Layer 3
c. 15.242.55.33-15.242.55.62
d. 15.242.55.33-15.242.55.63
24. Which default route will be active? 3. NStreme works only on 40mhz channel
/ip route width
add disabled=no distance=10 dst- true
address=0.0.0.0/0 gateway=1.1.1.1 false
8. Possible actions of ip firewall filter are: 14. Router A and B are both running as
a. tarpit PPPoE servers on different broadcast
b. tarp domains of your network. Is it possible to
c. bounce set Router A to use “/ppp secret” accounts
d. add-to-address-list from Router B to authenticate PPPoE
e. log customers ?
f. accept false
true
9. In case when router login password is
lost, it is necessary to reinstall RouterOS or 15. Which of the following actions are
use hardware reset funcion. available for ‘/ip firewall mangle’ (select all
a. Yes/ True valid actions)
b. No/ False a. change MSS
b. mark connection
10. Which software version can be installed c. accept
onto the following RouterBoard types? d. jump
a. routeros-x86-x.xx.npk on a RB1100 e. drop
b. routeros-mipsbe-x.xx.npk on a RB133 f. mark packet
c. routeros-mipsle-x.xx.npk on RB133
d. routeros-powerpc-x.xx.npk on a 16. OSFP area ID does not need to be
RB333 unique within the AS.
e. routeros-mipsbe-x.xx.npk on a RB433 true
false
11. PPP Secrets are used for
a. L2TP clients 17. What configuration is added by /ip
b. Router users hotspot setup command? (select all that
c. PPtP clients apply)
d. IPSec clients a. /ip dhcp-server
e. PPPoE clients b. /ip service
f. PPP clients c. /queue tree
d. /ip hotspot user
12. Choose all valid hosts address range for e. /ip hotspot walled-garden
subnet 15.242.55.62/27
a. 15.242.55.32-15.242.55.63 18. Mode wireless apakah yang bisa
b. 15.242.55.33-15.242.55.63
digunakan untuk mengkonfigurasikan Mark the correct configuration on client PC
WDS? to access to the Internet
a. ap-bridge a. IP:192.168.2.115/24 gateway:
b. nstreme-dual-slave 192.168.2.1
c. bridge b. IP:192.168.0.1/24 gateway:192.168.2.1
d. station-wds c. IP:192.168.2.2/24
e. station gateway:202.168.125.45
d. IP:192.168.1.223/24
19. Check all of the DHCP Server Options gateway:248.115.148.136
that are implemented for DHCP-Client and e. IP:192.168.2.253/24
not Custom. gateway:202.168.0.1
a. WINS Server
b. ntp server 23. Mark queue type that uses fairness
c. DNS Server principle between sub-queues, allows users
d. subnet mask to choose classifier for sub-queues, and
e. tftp apply a limit to each sub-queue
f. gateway a. SFQ
b. RED
20. Anda akan menyimpan website yang c. PCQ
telah dikunjungi ke dalam sebuah log dari d. BFIFO
web proxy. Manakah konfigurasi yang
benar ?
a. /system logging add topics=web-
proxy,debug action=memory 24. How many different priorities can be
b. /system logging add topics=web- selected for queues in MikroTik RouterOS?
proxy,!debug action=memory a. 1
c. /system logging add topics=web- b. 8
proxy,!debug action=remote b. 0
d. /system logging add topics=web- d. 16
proxy,!debug action=disk
25. An IP address pool can contain
21. You need to set up an E1(T1) addresses from more than one subnet.
connection with PPP configured. a. True
Which License level is needed? b. False
a. Level 4
b. It cannot be done in RouterOS
c. Level 5
-------------------------------------------------------
22. You have a router with configuration ------------------------------ SET - 15 -------------
- Public IP :202.168.125.45/24 -------------------------------------------------------
- Default gateway:202.168.125.1 -----------------
- DNS server: 248.115.148.136,
248.115.148.137
- Local IP: 192.168.2.1/24
1. Two hosts, A and B, are connected to a
broadcast LAN. Select all the answers
showing pairs of IP address/mask which 6. You have a queue structure as follows:
would allow IP connections to be
established between the two hosts.
a. A: 10.1.2.192/24 and B: 10.1.2.129/26 queue “GP” max-limit=10M
b. A: 10.1.2.66/25 and B: 10.1.2.109/26
c. A: 10.2.1.0/23 and B: 10.2.0.1/22
d. A: 10.2.2.1/23 and B: 10.2.0.1/22 - queue “M” parent=”GP” limit-at=4M max-
limit=6M
2. Which features are removed when
advanced-tools package is uninstalled?
a. neighbors - – queue “C1″ parent=”M” limit-at=1M
b. ip-scan max-limit=7M priority=4
c. netwatch
d. LCD support
- – queue “C2″ parent=”M” limit-at=1M
e. ping
max-limit=4M priority=1
f. bandwidth-test
7. The DoD model (also called the TCP/IP 12. Which statements are true regarding
stack) has four layers. Which layer of the ICMP packets?
DoD model is equivalent to the Network They acknowledge receipt of a TCP
layer of the OSI model? segment.
a. Application They guarantee datagram delivery.
b. Host-to-Host They can provide hosts with information
c. Internet about network problems.
d. Network Access They are encapsulated within IP
datagrams.
8. Which of the following services use UDP? a. 1 only
DHCP b. 2 and 3
SMTP c. 3 and 4
SNMP d 2, 3 and 4
FTP
HTTP 13. Which of the following are layers in the
TFTP TCP/IP model?
a. 1, 3 and 6 Application
b. 2 and 4 Session
c. 1, 2 and 4 Transport
d. All of the above Internet
Data Link
9. Which class of IP address provides a Physical
maximum of only 254 host addresses per a. 1 and 2
network ID? b. 1, 3 and 4
a. Class A c. 2, 3 and 5
b. Class B d. 3, 4 and 5
b. Class C
d. Class D 14. Which layer 4 protocol is used for a
Telnet connection?
10. If you use either Telnet or FTP, which is a. IP
the highest layer you are using to transmit b. TCP
data? c. TCP/IP
a. Application d. UDP
b. Presentation
c. Session 15. Which statements are true regarding
d. Transport ICMP packets?
ICMP guarantees datagram delivery.
11. Which of the following is the decimal ICMP can provide hosts with information
about network problems.
ICMP is encapsulated within IP datagrams.
ICMP is encapsulated within UDP
datagrams.
a. 1 only
b. 2 and 3
c. 1 and 4
b. All of the above