Mikrotik Mtcna Test 16 20

Download as pdf or txt
Download as pdf or txt
You are on page 1of 5

14.

When adding a static route, you must always ensure that you add both the gateway and the
interface.
False
True

15. You would like to allow multiple logins with one user name on a HotSpot server. How should
this be configured?
a. Set "Shared Users" option at /ip hotspot user profile
b. It's not possible
c. Set "Shared Users" option at /ip hotspot
d. Set "only-one=no' at /ip hotspot

16. In which order are the entries in Access List and Connect List processed?
a. In sequence order
b. In a random order
c. By Signal Strength Range
d. By interface name

17. What protocol does ping use?


a. TCP
b. ICMP
c. UDP
d. ARP

18. Is it possible for a client to get an IP address but no gateway after a successful DHCP
request?
a. False
b. True

19. Firewall configuration is the following:


1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP
2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY
3) /ip firewall filter add chain=input protocol=icmp action=drop
4) /ip firewall filter add chain=ICMP protocol=icmp action=log log-prefix=JUMP-ICMP-DENY
5) /ip firewall filter add chain=ICMP protocol=icmp action=drop

Client sends "ping" to router. What will the router do?

a. Router will drop the packet at ICMP (jump) chain drop rule (5th rule)
b. Router will log it with prefix: ICMP-DENY
c. Router will drop the packet at the Input drop rule (3rd rule)
d. Router will log it with prefix: JUMP-ICMP-DENY

20. /ip firewall nat


add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to-
address=192.168.1.2 to-ports=81

The command shown above:


a. Adds IP address 192.168.1.2 to the interface ether1
b. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the
internal host 192.168.1.2
c. Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1
d. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host
192.168.1.2

21. While troubleshooting a network from inside the network, you discover that you can ping the
gateway reliably, but you cannot browse the Internet. Skype, however, works flawlessly. What is
the most likely issue?
a. DNS is not available
b. The computer did not get an IP address
c. Network card and/or cable is not working
d. Masquerading rule is not applied

22. What is marked by connection-state=established matcher?


a. Packet begins a new TCP connection
b. Packet does not correspond to any known connection
c. Packet belongs to an existing connection,for example a reply packet or a packet which
belongs to already replied connection
d. Packet is related to, but not part of an existing connection

23. For static routing functionality, additionally to the RouterOS system package, you will also
need the following software package:

a. routing
b. none
c. dhcp
d. advanced-tools

24. You are planning a migration from a wireless link using 802.11a on 5GHz (with no nstreme)
to one using Nv2 on 5GHz. When you change the AP from 802.11a to Nv2, you do not wish a
client to disconnect for more than a few seconds during the upgrade.

Assuming the client is capable of operating with Nv2 (correct hardware, correct encryption key
and ROS version), which setting(s) for 'wireless-protocol' should be enabled on the client so that
the client can auto-detect the protocol used by the AP and still make connection with 802.11a or
Nv2 : (select all that apply)
a. Nv2
b. nv2-nstreme-802.11
c. any
d. unspecified

25. What does this simple queue do (check the image)?


a. Queue limits host 192.168.1.10 upload data rate to one megabit per second.
b. Queue guarantees download data rate of one megabit per second for host 192.168.1.10
c. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10
d. Queue limits host 192.168.1.10 download data rate to one megabit per second.

------------------------------------------------------------------------------------- SET - 6 ---------------------


----------------------------------------------------------------

1. What can you do with Netinstall?


a. Reset password in RouterOS
b. Install Linux
c. Add configuration to RouterOS
d. Reinstall RouterOS

2. Consider the attached diagram:


In order for Router 1 to see all of the networks the following commands could be used (choose all
answers that could work)

a. /routing add dst-address=0.0.0.0/0 gateway=10.10.0.2


b. /ip route add dst-address=0.0.0.0/0 gateway=10.10.0.2
c. /ip route add dst-address=172.16.0.0/24 gateway=10.10.0.2, /ip route add dst-
address=172.32.0.0/24 gateway=10.10.0.2
d. /ip route add dst-address=172.16.0.0/24 gateway=10.10.0.2, /ip route add dst-
address=172.32.0.0/24 gateway=10.50.0.2

3. Configuring HotSpot is possible on MikroTikRouterOS only with a wireless interface.

Yes

No

4. What menus should be used to allow certain websites to be accessed from behind a hotspot
interface, without client authentication
a. ip hotspot ip-binding
b. ip hotspot profile
c. ip hotspot walled-garden ip
d. ip hotspot walled-garden

5. For static routing functionality, additionally to the RouterOS system package, you will also
need the following software package:
a. none
b. routing
c. advanced-tools
d. dhcp

6. Netinstall can be used to


a. Install different software version (upgrade or downgrade)
b. Keep configuration, but reset a lost admin password
c. Reinstall software without losing licence
d. Install package for different hardware architecture

7. In which order are the entries in Access List and Connect List processed?
a. By interface name
b. In sequence order
c. By Signal Strength Range
d. In a random order

8. In Winbox, Hide Passwords unchecked shows passwords for the following


a. RouterOS user
b. Hotspot User
c. RADIUS shared secret
d. PPP secrets

9. Which options should be used when you want to prevent access from one specific address to
your router web interface?
a. Firewall Filter Chain Forward
b. Firewall Filter Chain Input
c. Group settings for System users
d. WWW service from IP Services

10. Which of the following would prevent unknown clients from connecting to your AP? Choose
the BEST answer.
a. Check the "Do not permit unknown client" box in the wireless configuration
b. Uncheck "Default Authenticate" in the wireless card configuration, and add each known
client's MAC address to your access-list configuration ensuring that you enable "authenticate" in
the entry
c. Add each known client's MAC address to your access-list configuration is the only step needed
d. Uncheck "Default Authenticate" in the wireless card configuration, and add each known
client's MAC address to your connect-list configuration
e. Configure the radius server under "/radius"
11. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized,
and you suspect it is a driver issue?
a. Yes
b. No

12. Mark the queue types that are available in RouterOS


a. SFQ – Stochastic Fairness Queuing
b. RED – Random Early Detect (or Drop)
c. FIFO - First In First Out (for Bytes or for Packets)
d. DRR - Deficit Round Robin
e. LIFO - Last In First Out
f. PCQ – Per Connection Queuing

13. Check the allowed input formats for wireless scan-list.


a. 5500 5700
b. 5500-5700
c. 5500,5700
d. 5500 - 5700
e. 5500/5700

14. Choose all valid hosts address range for subnet 15.242.55.62/27
a. 15.242.55.31-15.242.55.62
b. 15.242.55.33-15.242.55.63
c. 15.242.55.33-15.242.55.62
d. 15.242.55.32-15.242.55.63

15. After putting this rule: /ipfirewall add chain=input action=drop, you will still be able to
access the Router using the mac-address.
Yes

16. You need to reboot a RouterBoard after importing a previously exported rsc file to activate
the new configuration.

True
False

17. What is necessary for PPPoE client configuration?


a. ip firewall nat masquerade rule
b. Interface (on which PPPoE client is going to work)
c. Static IP address on PPPoE client interface

18. In order to use dynamic keys in your security profile for an AP, you MUST set up the dhcp
server to provide the dynamic keys.

19. You have a router with configuration


- Public IP :202.168.125.45/24

You might also like