1.

To authenticate wireless clients using radius-mac-authentication without the use of access-list, the
following are necessary

A. set appropriate entry under "/ip hotspot profile"

B. set appropriate entry under "/interface wireless security-profile"

C. add a radius server under "/radius"

D. set appropriate entry under "/ppp profile

E. MikroTik RouterOS of level6 license

2. Wireless Security Profile -> Management Protection Key is for:

A. Frame Protection on RouterOS Devices and any other devices with Frame Protection Support

B. Frame Protection only on RouterOS Devices

C. Frame Protection on any Device

3. Full duplex communication in point to point wireless links are possible with

A. MESH feature

B. Nstreme-Dual feature

C. WDS feature

D. 802.11g turbo feature

E. super channel feature

4. What changes if "WDS slave" wireless mode is set

A. Connect to an SSID in station mode

B. Adapts to Master WDS frequency

C. Enables WDS on AP

5. Which of the following would prevent unknown clients from connecting to your AP? Choose the BEST
answer.

A. Check the 'Do not permit unknown client' box in the wireless configuration

B. Uncheck 'Default Authenticate' in the wireless card configuration, and add each known client's MAC
address to your access-list configuration ensuring that you enable 'authenticate' in the entry
C. Uncheck 'Default Authenticate' in the wireless card configuration, and add each known client's MAC
address to your connect-list configuration

D. Configure the radius server under '/radius'

E. Add each known client's MAC address to your access-list configuration is the only step needed

6. WPA2 Pre-Shared Key (PSK) is enabled on AP, all the clients have to use the same PSK. Only Virtual AP
could be used to allow clients to connect with a different PSK.

true

false

7. You are planning a migration from a wireless link using 802.11a on 5GHz (with no nstreme) to one
using Nv2 on 5GHz. When you change the AP from 802.11a to Nv2, you do not wish a client to
disconnect for more than a few seconds during the upgrade.

Assuming the client is capable of operating with Nv2 (correct hardware, correct encryption key and ROS
version), which setting(s) for 'wireless-protocol' should be enabled on the client so that the client can
auto-detect the protocol used by the AP and still stay connected with 802.11a or Nv2 : (select all that
apply)

A. any

B. nv2-nstreme-802.11

C. Nv2

D. unspecified

8. Select which commands will analyze the spectrum on the channel 5180:

A. /interface wireless spectral-scan wlan1 range=5100,5280

B. /interface wireless spectral-history wlan1 range=5100-5280

C. /interface wireless spectral-scan wlan1 range=5100-5280

D. /interface wireless spectral-history wlan1 range=5100,5280

Select which commands will analyze the spectrum on the channel 5180:

A. /interface wireless spectral-scan wlan1 range=5100,5280

B. /interface wireless spectral-history wlan1 range=5100-5280

C. /interface wireless spectral-scan wlan1 range=5100-5280

D. /interface wireless spectral-history wlan1 range=5100,5280

9. Which WDS wireless modes are compatible with one other:

A. Static mode with Static-mesh mode

B. Dynamic mode with Static mode

C. Dynamic mode with Dynamic-mesh mode

D. Static-mesh mode with Dynamic mode

E. Static-mesh mode with Dynamic-mesh mode

F. Static mode with Dynamic-mesh mode

10. Can you establish wds connection between 2 RouterBOARDs running wlan interfaces in ap-bridge
mode on the same frequency and with the same SSID, dynamic wds and nstreme enabled?

true

false

11. Check the allowed input formats for wireless scan-list.

A. 5500 - 5700

B. 5500,5700

C. 5500 5700

D. 5500/5700

E. 5500-5700

12. What is the minimal required wireless configuration needed to be set (after interface configuration
is reset) to create an access point?

A. radio name

B. mode

C. WDS

D. DFS mode

E. scan-list
F. band

G. SSID

H. frequency

13. The 'access-list' of an AP is for:

A. Managing connectivity based on specific MAC, signal strength, time, private PSK

B. Limiting transfer speed from RouterOS clients

C. Managing connectivity based on a specific frequency

D. Limiting transfer speed from non-RouterOS clients

E. Limiting transfer speed to RouterOS clients

14. What will happen if "Default forward" is disabled in wireless menu on a RouterOS AP?

A. AP will not be able to communicate with the clients

B. Clients will not be able to communicate with each other

C. Only clients with matching access control list rule will be able to connect to the AP

D. Clients will not be able to connect to the AP

15. EAP-TLS authentication can be used on:

A. 802.11

B. Any of the following: 802.11, Nv2 and Nstreme (if the security profile is configured correctly)

C. Nv2 and Nstreme

D. Nv2

16. There are two wireless cards (wlan1 and wlan2) which are bridged together. On wlan1 card there is a
setting "Forwarding=no", wlan2 has default settings enabled. Choose the correct answer(s):

A. Stations on wlan1 will be able to communicate with stations on wlan1

B. Stations on wlan1 will be able to communicate with stations on wlan2

C. Stations on wlan2 will be able to communicate with stations on wlan2

D. Stations on wlan2 will be able to communicate with stations on wlan1

17. When several Virtual AP Interfaces are configured, you can add them to a bridge and apply layer 2
filter rules between them.

true

false

18. There is an access-list entry configured for wireless interfaces with the attribute 'area=abc123'. What
impact does this attribute have for an interface running in ap-bridge mode?

A. Only station with area-prefix=abc123 can connect to this access point

B. Stations with area-prefix=abc can connect to this access point

C. Any stations can connect to this access point

D. There is no attribute called 'area' for access-list

19. You have a PtP Wireless link that keeps failing. Which of the following may help determine the
cause? Select all that apply.

A. Tx/Rx Hardware Frames

B. Tx/Rx CCQ

C. Tx/Rx Frames

D. Framing Limit

E. Last IP

20. If the router's wireless interface is in 'station' mode and it is not able to connect to the access point
in the same band with the same SSID and using the same security profile, the possible reason for that
could be (mark all answers that are correct):

A. The station has setting "scan-list=default" and the APs frequency is not within the default range

B. The station has "wmm-support=disabled", but the AP has "wmm-support=enabled"

C. One of the wireless tools, e.g., scanner or snooper, is still running in active mode (not in background
mode)

D. The station has different frequency field setting from that of the AP

21. While aligning a wireless link, the Signal To Noise value should be:

A. the highest number possible

B. 0
C. the smallest number possible

D. ignored, Signal To Noise has no effect on a wireless link

22. When using RADIUS MAC authentication in a wireless security profile, which settings can be passed
from the RADIUS server to the AP for each accepted client:

A. Wireless protocol used (e.g. 802.11, Nv2, Nstreme)

B. WPA algorithm type to be used

C. WDS mode used

D. Pre-shared Key

E. Data rate limits

23. Access Point configuration is configured to "Management Protection=allowed" and a Management

Protection Key is set. Select which kind of clients can connect to the AP (Choose the most suitable
answer):

A. Mikrotik Client with Management Protection=allowed

B. Any Mikrotik Client

C. Mikrotik Client with Management Protection=required

D. Any wireless client

24. To limit the number of clients connected to AP you need to utilize

A. max-station-count option

B. Access List feature

C. Simple Queue feature

D. Connect List feature

25. Which of the following is used in standard 802.11 wireless networks?

A. FDD

B. CDMA

C. CSMA/CA

D. CSMA/CD