236481211-2-Kisi-kisi-Mikrotik-MTCNA-pdf.pdf

Page |1

KISI – KISI UAS Mikrotik Academy (MTCNA) STMIK & POLITEKNIK KOMPUTER NIAGA LPKIA BANDUNG

Program Studi : Manajemen Informatika & Teknik Informatika Konsentrasi

: MI, TI & IF

Semester

: Genap

Mata Kuliah

: P. Jaringan Komputer Sertifikasi (Mikrotik MTCNA)

Pengajar

: Team Mikrotik Academy

Durasi Ujian

: 120 Menit

Sifat

: Open Book & Internet

1. Pada simple queue, untuk melakukan limitasi untuk client yang berada pada masquerade network, harus menggunakan connection-mark dan packet marking terlebih dahulu. a. Benar b. Salah 2. Dengan parameter yang ada pada DHCP client di routeros, client dapat menentukan: a. Menerima atau tidak IP Address b. Distance Default Route c. Menentukan delay threshold DHCP d. Menerima atau tidak informasi NTP peer e. Menerima atau tidak default route f. Menentukan subnet IP Address yang akan digunakan 3. Manakah di antara static-route di bawah ini yang akan berfungsi sebagai prioritas satu untuk ip address tujuan 192.168.0.18? a. dst-address=192.168.0.0/26 gateway=192.168.2.1 distance=2 b. dst-address=192.168.0.0/28 gateway=192.168.3.1 distance=1 c. dst-address=192.168.0.0/24 gateway=192.168.3.1 distance=1 d. dst-address=192.168.0.0/26 gateway=192.168.1.1 distance=3 e. dst-address=192.168.0.0/28 gateway=192.168.4.1 distance=5 4. Manakah parameter berikut ini yang tidak terdapat pada packet header. a. mac-address b. header checksum c. IP version d. type of services e. src-address

Team Mikrotik Academy LPKIA © 2014

Page |2 5. Beberapa pernyataan berikut ini bisa dilakukan pada PPTP tunnel : ( Pilih lebih dari satu ) a. PPTP client harus memiliki ip public untuk dial ke PPTP server b. menggunakan pool ip address (ip-pool) untuk "remote-address" c. pembatasan bandwith untuk tiap client secara otomatis d. server dan client harus sama-sama menggunakan mikrotik e. bisa digunakan sebagai "gateway-interface" di static route 6. Pada simple queue, yang dimaksud dengan parameter interface adalah : a. interface yang berhubungan dengan target ip address b. interface di router yang berhubungan dengan gateway atau backbone c. interface localhost d. interface yang berhubungan dengan client e. interface virtual global-in dan global-out 7. Konfigurasi manakah yang mungkin dilakukan apabila kita ingin melakukan masquerade untuk network lokal ? a. action=masquerade, out-interface, chain=dst-nat b. action=accept, in-interface, chain=src-nat c. action=masquerade, out-interface, chain=src-nat d. action=masquerade, in-interface, chain=src-nat e. action=accept, out-interface, chain=src-nat 8. Jika kita menonaktifkan default authenticated pada CPE, supaya CPE tersebut bisa terkoneksi ke sebuah Access Point maka: a. CPE tersebut tidak bisa terkoneksi ke AP manapun b. Kita harus mendaftarkan mac address CPE pada access-list di AP c. Menonaktifkan setting hidden-ssid pada AP d. Kita harus menonaktifkan juga default forward pada CPE e. frekuensi pada AP harus berada dalam scan list CPE f. melakukan konfigurasi security-profile pada CPE g. Kita mendaftarkan mac address AP pada connect-list di CPE 9. Jika kita memiliki sebuah IP Address yang terpasang pada sebuah interface ethernet, dan kemudian kita memasukkan ethernet tersebut ke sebuah bridge port. Untuk membuat IP Address tersebut bisa diakses dari jaringan brdige tersebut, maka: a. Kita tidak perlu melakukan apapun, IP tersebut sudah bisa diakses di jaringan bridge tersebut b. Kita harus memasang satu buah IP Address yang baru dan berbeda subnet dengan IP Address yang lama c. Kita perlu memindahkan IP Address tersebut ke interface bridge d. Kita harus memasang satu buah IP Address yang baru dengan subnet yang sama dengan IP Address yang lama 10. Kita bisa me-redirect url ketika user kita melakukan browsing ke site tertentu, menggunakan fitur: a. web-proxy cache-list b. web-proxy access-list


Page |3 c. firewall - redirect d. web-proxy direct-list 11. Untuk membebaskan akses email pada user yang belum terkoneksi ke server hotspot, kita menggunakan: a. Walled Garden b. IP Binding c. Static Mac Address d. IP Walled Garden 12. Apa yang terjadi jika waktu akses sebuah client sudah melampaui batas "session-timeout" : a. client akan log-off dan bisa melakukan login kembali b. username dari Client akan expired dan tidak dapat login lagi c. tidak terjadi apa-apa d. pencatatan total waktu akses dari client akan di reset 13. Sebuah hotspot server menggunakan setting berikut : a. /ip hotspot profile print detail b. login-by=mac,http-chap,trial c. trial-uptime=30m d. trial-uptime-reset=24m 14. Apa yang terjadi pada user-user yang menggunakan layanan akses hotspot trial ? a. bisa login kembali setelah 24 menit log-off b. bisa akses selama 54 menit c. bisa menggunakan akses hotspot maksimal 24 menit d. bisa akses selama 30 menit e. tidak bisa melakukan login kembali setelah 30 menit 15. Pada router, kita menemui firewall rule sebagai berikut : #0 chain=prerouting in-interface=ether1 action=drop #1 chain=forward in-interface=ether1 action=accept Jika Anda terkoneksi ke router pada port ether1, dan melakukan ping ke router, maka rule yang mempengaruhi adalah : a. b. c. d.

Kedua rule tidak berpengaruh Rule #0 Kedua rule berpengaruh Rule #1

16. Untuk mendapatkan burst selama-lamanya 5 detik, maka kita menggunakan konfigurasi: a. burst-limit 500k, burst threshold 200k, burst-time 25 b. burst-limit 1M, burst threshold 200k, burst-time 30 c. burst-limit 1M, burst threshold 256k, burst-time 20 d. burst-limit 1M, burst threshold 500k, burst-time 25 17. Konfigurasi minimum yang harus kita lakukan pada AP adalah : Team Mikrotik Academy LPKIA © 2014

Page |4 ( Pilihlah lebih dari satu ) a. b. c. d. e. f. g. h.

mode band ssid DHCP server Frequency Hotspot server scan-list radio-name

18. RouterA ===eoip=== RouterB ===eoip=== RouterC RouterA terkoneksi ke RouterB menggunakan EoIP dan RouterB juga terkoneksi ke RouterC menggunakan EoIP, maka Tunnel-ID di kedua EoIP tunnel antara RouterA ke RouterB dan RouterB ke RouterC harus sama. a. Benar b. Salah

19. Router A (ether1) -------- (ether1) Router B (ether2) -------- (ether1) Router C Berikut ini adalah IP Address yang terpasang pada setiap router : Router A : 10.10.1.1/24 (ether1) 10.10.2.1/24 (ether1) Router B : 10.10.2.2/24 (ether1) 10.10.3.2/24 (ether1) 10.10.4.1/24 (ether2) 10.10.5.1/24 (ether2) Router C : 10.10.5.2/24 (ether1) 10.10.6.2/24 (ether1) Router A adalah gateway untuk Router B, dan router B adalah gateway untuk router C. Manakah IP Address gateway (default route) yang seharusnya kita pasang pada router B? a. b. c. d.

10.10.1.1 10.10.2.1 10.10.3.2 10.10.2.2


Page |5 20. Di antara protokol berikut ini, manakah yang tidak memiliki kemampuan untuk melakukan acknowledgment? a. UDP b. ICMP c. TCP 21. Supaya client yang bisa terkoneksi hanyalah yang mendapatkan IP Address dari proses DHCP dan bukan dari pengisian manual, maka konfigurasi yang harus dilakukan adalah : a. mac address kita catat secara manual b. dhcp make-static c. dhcp always-broadcast d. arp=reply-only 22. Jika kita melihat suatu connection yang memiliki source IP address A dan destination IP Address B, maka berarti : a. pengiriman data tersebut dikirimkan dari IP Address A b. pengiriman data tersebut menuju IP address A c. connection tersebut dimulai dengan request dari IP Address A d. pengiriman data tersebut dari A menuju ke B

23. Kita melakukan scan menggunakan interface wireless yang bermode AP-bridge. Apa yang akan terjadi? a. Kita bisa melihat daftar client yang sedang terkoneksi. b. Kita bisa melihat frekuensi di lokasi tersebut yang tidak terpakai. c. Tidak terjadi apa-apa. AP-bridge tidak bisa digunakan untuk melakukan scan. d. Semua client yang sedang terkoneksi ke AP tersebut akan terputus

24. Jika sebuah router memiliki 2 interface (wireless dan ethernet) yang sudah di bridge maka Hotspot harus diinstall di interface ethernet, karena secara otomaits hotspot akan menyebar di wireless dan ethernet. a. Benar b. Salah 25. Kita memiliki router dengan satu buah bridge interface. ETher1 dan ether2 merupakan bridge port untuk interface bridge tersebut. a. Kita dapat memasang DHCP server pada ether1 ataupun ether2 b. Kita harus memasang DHCP server pada ether1, ether2, dan bridge c. Kita dapat memasang DHCP server pada bridge interface d. Kita tidak bisa memasang DHCP server pada router tersebut 26. Jika kita ingin memasukkan ke address-list IP Address mesin yang melakukan serangan ke router kita, maka di firewall kita menggunakan action: a. tarpit b. add-dst-to-address-list c. jump ke chain lain d. add-src-to-address-list Team Mikrotik Academy LPKIA © 2014

Page |6 27. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device? a. 192.168.100.69/255.255.255.252 b. 192.168.100.70/255.255.255.252 c. 192.168.100.71/255.255.255.252 d. 192.168.100.68/255.255.255.252 28. Which of the following IP addresses are publicly routable? a. 192.168.1.4 b. 127.34.155.3 c. 172.16.13.23 d. 11.3.10.4 29. Which of the following is NOT a valid MAC Address? a. EA:BA:AA:EE:FF:CB b. 80:GF:AA:67:13:5D c. 95:B5:DD:EE:78:8A d. 13:16:86:53:89:43 e. 88:0C:00:99:5F:EF 30. Is it possible that the same IP address is included in multiple address lists and still be used by these multiple address lists? a. True b. False 31. SFQ queue types increase the drop probability even if the queue is not full. This is useful to equalize similar connections. a. True b. False 32. An IP packet has matched all the conditions of a firewall rule and the action reject and the option icmp-network-unreachable was initiated for that packet. What will happen with the packet content ? a. The whole packet will be forwarded back to the sender regardless of its contents b. The packet will be discarded regardless of its content c. The packet header will receive a flag of \\\"icmp-network-unreacheble\\\" d. The packet will be rejected only if the destination network is unreachable 33. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply) A. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver a. A route between the NAT Router and the webserver must exist b. Connection Tracking must be enabled on NAT router c. Public IP address of the webserver must be installed on the NAT Router d. LAN address of the webserver should be routable on the internet


Page |7 34. You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or CDP locally. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions to accomplish this. a. Place a proper input firewall rule to block mac discovery b. Remove/Disable all interfaces under mac-server telnet c. Add a Deny All input firewall rule d. Remove/Disable all discovery interfaces e. Remove/Disable the Interfaces f. Remove/Disable all interfaces under mac-Server winbox g. Place a proper forward firewall rule to block mac discovery 35. You have masqueraded network 192.168.1.0/24. To place upload/download limitations for each client you can A. mark traffic in mangle chain "prerouting", and place limitations in interface HTB a. mark traffic in mangle chain "postrouting", and place limitations in interface HTB b. mark traffic in mangle chain "forward", and place limitations in "global-in" HTB c. mark traffic in mangle chain "forward", and place limitations in "global-out" HTB d. mark traffic in mangle chain "postrouting", and place limitations in "global-out" HTB 36. Packet sniffer can stream results to a. Neighbor MAC address b. Local file c. IP address d. MAC address 37. customise the look of the hotspot login page, you can edit a. alogin.html b. template.html c. login.htm d. redirect.html 38. what RouterOS feature should be used to redirect user WEB browsing? a. web-proxy cache-list b. web-proxy access-list c. web-proxy direct-list d. firewall nat action redirect 39. When adding a user to your local ppp secrets/ppp profiles database, it is possible to Set max values for total transferred bytes (up- and download) a. Allow only pppoe login b. Deny services (like telnet) only for this user or for one group of users c. Allow/deny use of more than one login by this user d. Allow login by pppoe and pptp, but deny login by l2tp 40. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time? a. True b. False


Page |8 41. In case when router login password is lost, it is necessary to reinstall RouterOS or use hardware reset funcion. a. True b. False 42. Firewall NAT rules process only the first packet of each connection. a. True b. False 43. after putting this rule: /ip firewall add chain=input action=drop, you will still be able to access the Router using the mac-address. a. True b. False 44. Action=redirect is applied in a. chain=srcnat b. chain=dstnat c. chain=forward 45. You have 802.11b/g wireless card. What frequencies are available to you? a. 5800MHz b. 2412MHz c. 5210MHz d. 2422MHz e. 2327MHz 46. Mark all correct statements about /export (rsc file). a. Exports logs from /log print b. Exports full configuration of the router c. Exports only part of the configuration (for example /ip firewall) d. Exports scripts from /system script e. Exports files could not edited 47. What wireless card can we use to achieve 100 Mbps actual wireless throughput? a. 802.11 b/g b. 802.11 a/b/g c. 802.11 a d. 802.11 a/n e. 802.11 a/b/g/n 48. It is possible to add user-defined chains in ip firewall mangle a. True b. False 49. Choose all valid hosts address range for subnet 15.242.55.62/27 a. 15.242.55.31-15.242.55.62 b. 15.242.55.32-15.242.55.63 c. 15.242.55.33-15.242.55.62


Page |9 d. 15.242.55.33-15.242.55.63 50. Action=redirect allows you to make a. Transparent DNS Cache b. Forward DNS to another device IP address c. Enable Local Service d. Transparent HTTP Proxy 51. Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1? a. /ip firewall nat add action=masquerade chain=srcnat b. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24 c. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat d. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 52. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface? a. I b. D c. A d. S e. C 53. Mark all features that are compatible with Nstreme a. WDS between a device in station-wds mode and a device in station-wds mode -> GA BISA b. Encryption -> GA BISA c. WDS between a device in ap-bridge mode with a device in station-wds mode -> BISA d. Bridging a device in station mode with a device in ap-bridge mode -> BISA (????) 54. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and it's a driver issue? a. Yes b. No 55. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package: a. none b. dhcp c. routing d. advanced-tools 56. Which are necessary sections in /queue simple to set bandwidth limitation? a. target-address, max-limit b. target-address, dst-address, max-limit c. target-address, dst-address d. max-limit


P a g e | 10 57. What protocol is used for Ping and Trace route? a. DHCP b. IP c. TCP d. ICMP e. UDP 58. From which of the following locations can you obtain Winbox? a. Router's webpage b. Files menu in your router c. Via the console cable d. mikrotik.com 59. Two hosts, A and B, are connected to a broadcast LAN. Select all the answers showing pairs of IP address/mask. which would allow IP connections to be established between the two hosts. a. A: 10.1.2.66/25 and B: 10.1.2.109/26 b. A: 10.2.2.1/23 and B: 10.2.0.1/22 c. A: 10.1.2.192/24 and B: 10.1.2.129/26 --> 10.1.2.1-10.1.2.254 d. A: 10.2.1.0/23 and B: 10.2.0.1/22 60. Why is it useful to set a Radio Name on the radio interface? a. To identify a station in a list of connected clients b. To identify a station in the Access List c. To identify a station in Neighbor discovery 61. What kind of users are listed in the Secrets window of the PPP menu? a. pptp users b. l2tp users c. winbox users d. wireless users e. pppoe users f. hotspot users 62. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? a. Yes b. No 63. MikroTik RouterOS DHCP client can receive following options a. Byte limit b. IP Gateway c. Rate limit d. Uptime limit e. IP Address and Subnet


P a g e | 11 64. The HotSpot feature can be used only on ethernet interfaces. You have to use a separate access point if you want to use this feature with wireless. a. True b. False 65. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this? a. Users b. IP bindings c. Walled-garden d. Walled-garden IP 66. How many different priorities can be selected for queues in MikroTik RouterOS? a. 8 b. 16 c. 0 d. 1 67. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1 add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2 a. Route via gateway 1.1.1.1 b. Route via gateway 2.2.2.2 68. How long is level 1 (demo) license valid? a. 24 hours b. Infinite time c. 1 month d. 1 year 69. On the advanced menu of the wireless setup there is a parameter called "Area", it works directly with: a. Connect List +++ b. Access List c. None of these d. Security Profile 70. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication a. ip hotspot ip-binding b. ip hotspot profile c. ip hotspot walled-garden +++ d. ip hotspot walled-garden ip 71. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue. a. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address


P a g e | 12 b. c. d. e.

kind=pcq pcq-limit=256000 pcq-classifier=dst-address kind=pcq pcq-limit=5000000 pcq-classifier=src-address kind=pcq pcq-limit=256000 pcq-classifier=src-address kind=pcq pcq-limit=5000000 pcq-classifier=dst-address

72. Which of the following is true for connection tracking a. Enabling connection tracking reduces CPU usage in RouterOS b. Connection tracking must be enabled for firewall to be effective c. Connection tracking must be enable for NAT'ed network d. Disable connection tracking for mangle to work 73. Which of these are possible solutions to bridge two networks over a wireless link: a. Both devices in AP mode and enable WDS mode b. One device in AP mode, another one in station-pseudobridge-clone c. One device in AP mode, another one in station-pseudobridge d. One device in AP mode, another one in station 74. What kind of users are listed in the Secrets window of the PPP menu? a. hotspot users b. pppoe users c. pptp users d. l2tp users e. wireless users f. winbox users 75. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? 76. You have a 802.11b/g wireless card. Which frequencies can be set? a. 5210MHz b. 2327MHz c. 2422MHz d. 2412MHz e. 5800MHz 77. Which of the following Routes statuses are possible? a. C = Connected b. S = Static c. A = Active d. D = Drop 78. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue? a. No b. Yes


P a g e | 13 79. Action=redirect applies to a. Route rules b. DST-NAT rules c. Firewall Filter rules d. SRC-NAT rules 80. When backing up your router by using the 'Export' command, the following happens: a. Winbox usernames and passwords are backed up b. The Export file can be edited with a standard text editor after its creation c. You are requested to give the export file a name 81. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration. 82. If ARP=reply-only is configured on an interface, what will this interface do a. Add new IP addresses in /ip arp list b. Accept all IP/MAC combinations listed in /ip arp as static entries c. Add new MAC addresses in /ip arp list d. Accept all IP addresses listed in /ip arp as static entries e. Accept all MAC-addresses listed in /ip arp as static entries 83. It is impossible to disable user "admin" at the menu "/user" 84. If a packet comes to a router and starts a new, previously unseen connection, which connection state would be applied to it? a. no connection state would be applied to such packet b. new c. unknown d. invalid e. established 85. We have two radio cards in a point-to-point link with settings: Card Nr 1.: mode=ap-bridge ssid="office" frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa Card Nr 2.: mode=station ssid="office" frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2 Is Card Nr2. able to connect to Card Nr 1.? a. Yes, if Nstreme is enabled or disabled on both b. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on both c. No, because of the different frequencies d. No, because of the different security profiles


P a g e | 14 86. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this? a. Walled-garden IP b. Walled-garden c. Users d. IP bindings 87. Consider the following network diagram. In R1, you have the following configuration: /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed? a. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop b. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop c. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop d. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dstaddress=192.168.1.10 action=drop 88. What is the default protocol/port of (secure) winbox? a. UDP/5678 b. TCP/8291 c. TCP/22 d. TCP/8080 89. What protocol is used for Ping and Trace route? a. UDP b. ICMP c. IP d. TCP e. DHCP 90. Mark the queue types that are available in RouterOS a. SFQ – Stochastic Fairness Queuing b. DRR - Deficit Round Robin c. FIFO - First In First Out (for Bytes or for Packets) d. LIFO - Last In First Out e. PCQ – Per Connection Queuing f. RED – Random Early Detect (or Drop) 91. Select which of the following are 'Public IP addresses': a. 10.110.50.37


P a g e | 15 b. c. d. e.

11.63.72.21 172.28.73.21 192.168.0.1 172.168.254.2

92. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface? a. S b. I c. A d. D e. C 93. Which is the default port of IP-Winbox? a. TCP 80 b. TCP 8291 c. TCP 8192 d. UDP 8291 94. Is ARP used in the IPv6 protocol ? a. True b. False 95. Select which of the following are 'Public IP addresses': [multiple answers] a. 192.168.0.1 b. 11.63.72.21 c. 172.28.73.21 d. 10.110.50.37 e. 172.168.254.2 96. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by using an address subnet of: [multiple answers] a. b. c. d.

/30 /29 /32 /31

97. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway. When the PC Ethernet card failed, the user change it with a new card and set the same IP for it. What else should be done?[multiple answers] a. Old static ARP entry on gateway has to be updated for the new card b. Nothing - it will work as before c. MAC-address of the new card has to be changed to MAC address of old card d. Another IP has to be added for Internet access


P a g e | 16 98. How many usable IP addresses are there in a 20-bit subnet? a. 2047 b. 4096 c. 2048 d. 2046 e. 4094 99. What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ?[multiple answers] a. 60 b. 30 c. 1 d. 64 100. The network address is [multiple answers] a. The first usable address of the subnet b. The last address of the subnet c. The first address of the subnet 101. Choose all valid hosts address range for subnet 15.242.55.62/27 [single answer] a. 15.242.55.32-15.242.55.63 b. 15.242.55.33-15.242.55.63 c. 15.242.55.33-15.242.55.62 d. 15.242.55.31-15.242.55.62 102. Which ones of the following are valid IP addresses? [multiple answers] a. 192.168.13.255 b. 1.27.14.254 c. 10.10.14.0 d. 192.168.256.1 103. Which of the following is NOT a valid MAC Address? [multiple answers] a. 95:B5D:EE:78:8A b. 13:16:86:53:89:43 c. 80:GF:AA:67:13:5D d. 88:0C:00:99:5F:EF e. EA:BA:AA:EE:FF:CB 104. If ARP=reply-only is configured on an interface, what will this interface do [multiple answers] a. Add new IP addresses in /ip arp list b. Accept all IP/MAC combinations listed in /ip arp as static entries c. Accept all MAC-addresses listed in /ip arp as static entries d. Add new MAC addresses in /ip arp list e. Accept all IP addresses listed in /ip arp as static entries


P a g e | 17 105. What is term for the hardware coded address found on an interface? [single answer] a. IP Address b. Interface Address c. MAC Address d. FQDN Address 106. Which of the following IP addresses are publicly routable? [multiple answers] a. 127.34.155.3 b. 192.168.1.4 c. 172.16.13.23 d. 11.3.10.4 107. What protocol does ping use? [single answer] a. UDP b. TCP c. ARP d. ICMP 108. MAC layer by OSI model is also known as [single answer] a. Layer 3 b. Layer 7 c. Layer 2 d. Layer 6 e. Layer 1 109. How many layers does Open Systems Interconnection model have? [single answer] a. 12 b. 6 c. 9 d. 5 e. 7 110. How many IP addresses can one find in the header of an IP packet? [single answer] a. 3 b. 4 c. 1 d. 2 111. Select valid MAC-address [single answer] a. G2:60:CF:21:99:H0 b. 00:00:5E:80:EE:B0


P a g e | 18 c. 192.168.0.0/16 d. AEC8:21F1:AA44:54FF:1111DAE:0212:1201 112. The basic unit of a physical network (OSI Layer 1) is the: [single answer] a. Byte b. Frame c. Bit d. Header 113. You have a router with configuration - Public IP :202.168.125.45/24 - Default gateway:202.168.125.1 - DNS server: 248.115.148.136, 248.115.148.137 - Local IP: 192.168.2.1/24 Mark the correct configuration on client PC to access to the Internet [single answer] a. IP:192.168.0.1/24 gateway:192.168.2.1 b. IP:192.168.2.253/24 gateway:202.168.0.1 c. IP:192.168.1.223/24 gateway:248.115.148.136 d. IP:192.168.2.115/24 gateway: 192.168.2.1 e. IP:192.168.2.2/24 gateway:202.168.125.45 114. On the advanced menu of the wireless setup there is a parameter called “Area”, it works directly with: A. Connect List B. Access List C. None of these D. Security Profile 115. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication A. ip hotspot ip-binding B. ip hotspot profile C. ip hotspot walled-garden D. ip hotspot walled-garden ip 116. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue. A. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address B. kind=pcq pcq-limit=256000 pcq-classifier=dst-address C. kind=pcq pcq-limit=5000000 pcq-classifier=src-address D. kind=pcq pcq-limit=256000 pcq-classifier=src-address E. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address 117. Which of the following is true for connection tracking A. Enabling connection tracking reduces CPU usage in RouterOS B. Connection tracking must be enabled for firewall to be effective


P a g e | 19 C. Connection tracking must be enable for NAT’ed network D. Disable connection tracking for mangle to work 118. Which of these are possible solutions to bridge two networks over a wireless link: A. Both devices in AP mode and enable WDS mode B. One device in AP mode, another one in station-pseudobridge-clone C. One device in AP mode, another one in station-pseudobridge D. One device in AP mode, another one in station 119. What kind of users are listed in the Secrets window of the PPP menu? A. hotspot users B. pppoe users C. pptp users D. l2tp users E. wireless users F. winbox users 120. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use “/ppp secret” accounts from Router B to authenticate PPPoE customers ? True / false 121. You have a 802.11b/g wireless card. Which frequencies can be set? A. 5210MHz B. 2327MHz C. 2422MHz D. 2412MHz E. 5800MHz 122. Which of the following Routes statuses are possible? A. C = Connected B. S = Static C. A = Active D. D = Drop 123. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue? True / False 124. Action=redirect applies to A. Route rules B. DST-NAT rules C. Firewall Filter rules D. SRC-NAT rules 125. When backing up your router by using the ‘Export’ command, the following happens: A. Winbox usernames and passwords are backed up B. The Export file can be edited with a standard text editor after its creation C. You are requested to give the export file a name 126. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration. ( True /False )


P a g e | 20 127. If ARP=reply-only is configured on an interface, what will this interface do A. Add new IP addresses in /ip arp list B. Accept all IP/MAC combinations listed in /ip arp as static entries C. Add new MAC addresses in /ip arp list D. Accept all IP addresses listed in /ip arp as static entries E. Accept all MAC-addresses listed in /ip arp as static entries 128. It is impossible to disable user “admin” at the menu “/user” ( True / False ) 129. If a packet comes to a router and starts a new, previously unseen connection, which connection state would be applied to it? A. no connection state would be applied to such packet B. new C. unknown D. invalid E. Established 130. We have two radio cards in a point-to-point link with settings: Card Nr 1.: mode=ap-bridge ssid=”office” frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa Card Nr 2.: mode=station ssid=”office” frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2 Is Card Nr2. able to connect to Card Nr 1.? A. Yes, if Nstreme is enabled or disabled on both B. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on both C. No, because of the different frequencies D. No, because of the different security profiles 131. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this? A. Walled-garden IP B. Walled-garden C. Users D. IP bindings 132. Consider the following network diagram. In R1, you have the following configuration: /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed? A. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop B. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop C. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10


P a g e | 21 action=drop D. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dstaddress=192.168.1.10 action=drop 133. What is the default protocol/port of (secure) winbox? A. UDP/5678 B. TCP/8291 C. TCP/22 D. TCP/8080 134. What protocol is used for Ping and Trace route? A. UDP B. ICMP C. IP D. TCP E. DHCP 135. Mark the queue types that are available in RouterOS A. SFQ – Stochastic Fairness Queuing B. DRR – Deficit Round Robin C. FIFO – First In First Out (for Bytes or for Packets) D. LIFO – Last In First Out E. PCQ – Per Connection Queuing F. RED – Random Early Detect (or Drop) 136. Select which of the following are ‘Public IP addresses’: A. 10.110.50.37 B. 11.63.72.21 C. 172.28.73.21 D. 192.168.0.1 E. 172.168.254.2 137. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface? A. S B. I C. A D. D =dynamic E. C =conected 138. Which is the default port of IP-Winbox? A. TCP 80 B. TCP 8291 C. TCP 8192 D. UDP 8291 139. Which of the following is true for connection tracking A. Enabling connection tracking reduces CPU usage in RouterOS B. Disable connection tracking for mangle to work C. Connection tracking must be enable for NAT'ed network


P a g e | 22 D. Connection tracking must be enabled for firewall to be effective 140. What kind of users are listed in the "/user" menu? A. router users B. pptp users C. hotspot users D. wireless users 141. What is the maximum number of ARP entries on a Mikrotik RouterOS device ? A. Unlimited B. 2048 C. 8192 D. 10240 142. Mark all correct answers: destination NAT will take place... A. before ip firewall filter, chain forward B. after routing decision C. before routing decision D. after ip firewall filter, chain forward 143. It is possible to add user-defined chains in ip firewall mangle? True / False 144. Which configuration menu should you use to change router's Winbox default port? A. /ip firewall service-ports B. /ip firewall filter C. /system resource D. /ip service 145. MikroTik RouterOS is sending logs to an external syslog server. Which protocol and port is used by RouterOS for sending logs (by default)? A. UDP 113 B. TCP 110 C. UDP 514 D. UDP 21 146. What is marked by connection-state=established matcher? A. Packet is related to, but not part of an existing connection B. Packet begins a new TCP connection C. Packet does not correspond to any known connection D. Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection 147. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue? A. Yes B. No


P a g e | 23 148. What wireless modes can be used in a WDS setup? A. ap-bridge B. station C. station-wds D. bridge E. nstreme-dual-slave 149. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package: A. advanced-tools B. none C. routing D. dhcp 150. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? True / False

151. The following image shows a RouterOS Wireless Access List configuration. Wireless interface "Default Authenticate" is unchecked. What will happen with clients connecting to this AP? A. No client is able to connect to the Wireless Access Point. B. Client with mac-address 00:0C:42:31:38:A2 will connect to wlan1 C. 00:0C:42:61:6C:90 client will connect to wlan1 D. 00:0C:42:31:38:A2 will connect to wlan1 when the signal strength is greater than -60 152. Mark all correct answers A. Default-Forwarding could be enabled for a specific clients by wireless access-list B. The only way to prevent wireless clients connections - disable wireless interface C. Wireless access-list could allow and deny access to your AP D. /ip firewall filter allows to deny authentication to AP 153. Is it possible for a client to get an IP address but no gateway after a successful DHCP request? True / False 154. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue. A. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address B. kind=pcq pcq-limit=256000 pcq-classifier=dst-address C. kind=pcq pcq-limit=256000 pcq-classifier=src-address D. kind=pcq pcq-limit=5000000 pcq-classifier=src-address E. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address 155. You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured? A. Set "Shared Users" option at /ip hotspot B. It's not possible C. Set "only-one=no' at /ip hotspot D. Set "Shared Users" option at /ip hotspot user profile


P a g e | 24 156. Check the allowed input formats for wireless scan-list. A. 5500,5700 B. 5500 5700 C. 5500/5700 D. 5500 - 5700 E. 5500-5700 157. Hotspot ip-binding is used to allow access to Internet web servers specifing the IP address of the web server instead of the URL. (True / False) 158. What kind of users are listed in the Secrets window of the PPP menu? A. pptp users B. l2tp users C. hotspot users D. wireless users E. pppoe users F. winbox users 159. There are two routes in the routing table: 0 dst-addr=10.1.1.0/24 gateway=5.5.5.5 1 dst-addr=10.1.1.4/30 gateway=5.6.6.6 Which gateway will be used to get to the IP address 10.1.1.6? A. 5.6.6.6 B. the required route is not in the routing table C. 5.5.5.5 D. both - half of the traffic will be routed through one gateway, half through the other 160. Select which of the following are 'Public IP addresses': A. 11.63.72.21 B. 192.168.0.1 C. 172.28.73.21 D. 10.110.50.37 E. 172.168.254.2 161. You have a router with configuration - Public IP :202.168.125.45/24 - Default gateway:202.168.125.1 - DNS server: 248.115.148.136, 248.115.148.137 - Local IP: 192.168.2.1/24 Mark the correct configuration on client PC to access to the Internet A. IP:192.168.2.115/24 gateway: 192.168.2.1 B. IP:192.168.2.2/24 gateway:202.168.125.45 C. IP:192.168.2.253/24 gateway:202.168.0.1 D. IP:192.168.1.223/24 gateway:248.115.148.136 E. IP:192.168.0.1/24 gateway:192.168.2.1 162. Collisions are possible in full-duplex Ethernet networks (True/False) 163. Please select correct scan-list values in wireless interface configuration A. 5560,5620-5700 B. 5540,5560,5620+5700


P a g e | 25 C. 5640~5680 D. default,5560,5600,5660-5700 164. Collisions are possible in full-duplex Ethernet networks (True/False) 165. The default value of 'target-scope' for a static route is: A. 10 B. 1 C. 30 D. 255 166. When we would like to establish Dual Nstreme link, radio card mode must be set as ? A. nstreme-dual-slave B. ap-bridge C. bridge 166. What can be used as ’target-address’ in the simple queue? A. server’s address B. client’s address C. address list name D. client’s MAC address 167. We have two radio cards in a point-to-point link with settings: Card Nr 1.: mode=ap-bridge ssid="office" frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa Card Nr 2.: mode=station ssid="office" frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2 Is Card Nr2. able to connect to Card Nr 1.? A. Yes, if Nstreme is enabled or disabled on both B. No, because of the different security profiles C. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on both D. No, because of the different frequencies 167. You need to set up an E1(T1) connection with PPP configured.Which License level is needed? A. It cannot be done in RouterOS B. Level 4 C. Level 5 168. In order to create a rule to drop all traffic from and to Bogon IPs, in the firewall you should: A. Use the address-list function to create a list of IP's and specify it in the Advanced tab of the firewall rule B. Use a Layer7 filter rule to specify the Bogon Regular Expression and drop it C. Create a rule to drop all addresses of dst-address-type:local 169. What kind of users are listed in the Secrets window of the PPP menu? A. winbox users B. wireless users C. pptp users


P a g e | 26 D. l2tp users E. pppoe users F. hotspot users 170. Which of the following protocols are proprietary to MikroTik A. Nstreme B. Nstreme Dual C. Nv2 D. WMM E. WiMax 171. OSFP area ID does not need to be unique within the AS. (True or False) 172. You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured? A. It's not possible B. Set "only-one=no' at /ip hotspot C. Set "Shared Users" option at /ip hotspot D. Set "Shared Users" option at /ip hotspot user profile 173. You are about to configure DNS Cache and make a static DNS rule. Your router should resolve any domain name. Which are the minimum settings you will need? A. Configure Primary DNS server B. Set cache size to 4096 C. Add a new static DNS entry D. Enable "Allow Remote Requests" E. Configure both Primary and Secondary DNS servers 174. RouterOS DHCP server is able to send any DHCP options (specified in RFCs) to DHCP clients True or False 175. You want to skip HotSpot (authorization, accounting, etc.) for a specific host. What should you use? A. /ip hotspot walled-garden B. /ip hotspot ip-binding C. /ip hotspot walled-garden ip D. /ip address 176. There is an HTTP server 10.0.0.1 in your private network. You have made a DNS-NAT rule that sends all HTTP traffic received on your router's address 80.232.50.100 to this server. If you make a firewall rule on the router to disallow address 159.148.20.30 to communicate with the server, how would you identify this communication in this rule? A. src-address=80.232.50.100 dst-address=10.0.0.1 B. src-address=80.232.50.100 dst-address=159.148.20.30 C. src-address=159.148.20.30 dst-address=10.0.0.1 D. src-address=159.148.20.30 dst-address=80.232.50.100 177. After putting this rule: /ip firewall add chain=input action=drop, you will still be able to access the Router using the mac-address. ( True / False )


P a g e | 27 178. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package: A. advanced-tools B. dhcp C. routing D. none 179. The total-max-limit under Simple Queues will limit the combined upload and download of the target-address of your simple queue. (True/False) 180. MikroTik DHCP CLIENT can be set on : A. /interface bridge B. /interface ipip node C. /interface pppoe-server server D. Virtual Access Point E. /interface eoip node 181. Which is the default port of IP-Winbox? A. TCP 8192 B. UDP 8291 C. TCP 80 D. TCP 8291 182. Select valid network masks: A. 192.0.0.0 B. 255.255.224.0 C. 255.192.0.0 D. 255.255.192.255 183. On the advanced menu of the wireless setup there is a parameter called “Area”, it works directly with: A. Connect List B. Access List C. None of these D. Security Profile 184. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication A. ip hotspot ip-binding B. ip hotspot profile C. ip hotspot walled-garden D. ip hotspot walled-garden ip 185. Which of the following is true for connection tracking A. Enabling connection tracking reduces CPU usage in RouterOS B. Connection tracking must be enabled for firewall to be effective C. Connection tracking must be enable for NAT’ed network D. Disable connection tracking for mangle to work


P a g e | 28 186. Which of these are possible solutions to bridge two networks over a wireless link: A. Both devices in AP mode and enable WDS mode B. One device in AP mode, another one in station-pseudobridge-clone C. One device in AP mode, another one in station-pseudobridge D. One device in AP mode, another one in station 187. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration. (True/false) 188. If ARP=reply-only is configured on an interface, what will this interface do A. Add new IP addresses in /ip arp list B. Accept all IP/MAC combinations listed in /ip arp as static entries C. Add new MAC addresses in /ip arp list D. Accept all IP addresses listed in /ip arp as static entries E. Accept all MAC-addresses listed in /ip arp as static entries 189. It is impossible to disable user “admin” at the menu “/user” (YES/NO) 190. If a packet comes to a router and starts a new, previously unseen connection, which connection state would be applied to it? A. no connection state would be applied to such packet B. new C. unknown D. invalid E. established 191. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this? A. Walled-garden IP B. Walled-garden C. Users D. IP bindings 192. Consider the following network diagram. In R1, you have the following configuration: /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed? A. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop B. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop C. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop D. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dstaddress=192.168.1.10 action=drop 193. Mark the queue types that are available in RouterOS A. SFQ – Stochastic Fairness Queuing B. DRR – Deficit Round Robin C. FIFO – First In First Out (for Bytes or for Packets)


P a g e | 29 D. LIFO – Last In First Out E. PCQ – Per Connection Queuing F. RED – Random Early Detect (or Drop) 194. Select which of the following are ‘Public IP addresses’: A. 10.110.50.37 B. 11.63.72.21 C. 172.28.73.21 D. 192.168.0.1 E. 172.168.254.2 195. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface? A. S B. I C. A D. D E. C 196. Please select correct scan-list values in wireless interface configuration A. 5560,5620-5700 B. 5540,5560,5620+5700 C. 5640~5680 D. default,5560,5600,5660-5700 197. The default value of 'target-scope' for a static route is: A. 10 B. 1 C. 30 D. 255 198. When we would like to establish Dual Nstreme link, radio card mode must be set as ? A. nstreme-dual-slave B. ap-bridge C. bridge 199. Two mangle rules defining different mangle marks for the same traffic type, will make it have both mangle marks. (True or False) 200. In order to create a rule to drop all traffic from and to Bogon IPs, in the firewall you should: A. Use the address-list function to create a list of IP's and specify it in the Advanced tab of the firewall rule B. Use a Layer7 filter rule to specify the Bogon Regular Expression and drop it C. Create a rule to drop all addresses of dst-address-type:local 201. You have a router with configuration - Public IP :202.168.125.45/24 - Default gateway:202.168.125.1 - DNS server: 248.115.148.136, 248.115.148.137 - Local IP: 192.168.2.1/24


P a g e | 30 Mark the correct configuration on client PC to access to the Internet A. IP:192.168.0.1/24 gateway:192.168.2.1 B. IP:192.168.2.253/24 gateway:202.168.0.1 C. IP:192.168.2.2/24 gateway:202.168.125.45 D. IP:192.168.2.115/24 gateway: 192.168.2.1 E. IP:192.168.1.223/24 gateway:248.115.148.136 202. Which of the following protocols are proprietary to MikroTik A. Nstreme B. Nstreme Dual C. Nv2 D. WMM E. WiMax 203. OSFP area ID does not need to be unique within the AS. (True or False) 204. You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured? A. It's not possible B. Set "only-one=no' at /ip hotspot C. Set "Shared Users" option at /ip hotspot D. Set "Shared Users" option at /ip hotspot user profile 205. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? True Or False 206. You are about to configure DNS Cache and make a static DNS rule. Your router should resolve any domain name. Which are the minimum settings you will need? A. Configure Primary DNS server B. Set cache size to 4096 C. Add a new static DNS entry D. Enable "Allow Remote Requests" E. Configure both Primary and Secondary DNS servers 207. RouterOS DHCP server is able to send any DHCP options (specified in RFCs) to DHCP clients True or False 208. MikroTik DHCP CLIENT can be set on : A. /interface bridge B. /interface ipip node C. /interface pppoe-server server D. Virtual Access Point E. /interface eoip node


236481211-2-Kisi-kisi-Mikrotik-MTCNA-pdf.pdf

Recommend Documents