# data[].attributes.attachment_link.readable_text
1. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct
U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70
using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the
RouterBOARD 750 for a successful connection to the device?
a. 192.168.100.70/255.255.255.252
b. 192.168.100.69/255.255.255.252
c. 192.168.100.71/255.255.255.252
d. 192.168.100.68/255.255.255.252

5. The network address is
a. The first usable address of the subnet
b. The last address of the subnet
c. The first address of the subnet

7. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?

8. Is ARP used in the IPv6 protocol ?
False
True

9. Which of the following protocols / port s are used for SNMP. (Simple Network Management
Protocol)
a. TCP 162
b. UDP 162
c. UDP 161
d. TCP 25
e. TCP 123
f. TCP 161

13. If ARP=reply-only is enabled on one router interface, router can add dynamic ARP entries for
the particular interface.
False
True

14. The basic unit of a physical network (OSI Layer 1) is the:
a. Header
b. Byte

c. Bit
d. Frame

802. 15.55.11 a d. chain=dstnat c.33-15.242. What wireless card can we use to achieve 100 Mbps actual wireless throughput? a.168. 15.11 b/g b.11b/g wireless card.33-15.55. a. Transparent HTTP Proxy 8. Enable Local Service d. 5210MHz d.63 7.242.242.242. Mark all correct statements about /export (rsc file).242. Transparent DNS Cache b. 2422MHz e. chain=forward 2. It is possible to add user-defined chains in ip firewall mangle True False 6.55. Exports only part of the configuration (for example /ip firewall) d. Choose all valid hosts address range for subnet 15.55. 15.63 c.55. 2327MHz 3. You have 802.2 --------------------- ---------------------------------------------------------------- 1. 2412MHz c. 802.SET . 5800MHz b.55. 802. Which is correct masquerade rule for 192. Exports full configuration of the router c. Exports logs from /log print b.0.242.242.55.0/24 network on the router with outgoing . 15.62 d.31-15.11 a/n e. Forward DNS to another device IP address c. What frequencies are available to you? a. Action=redirect is applied in a.55.62/27 a.242.------------------------------------------------------------------------------------. 802. Exports scripts from /system script e.62 b.32-15.242. Action=redirect allows you to make a. Exports files could not edited 4.55.11 a/b/g c.11 a/b/g/n 5. chain=srcnat b. 802.

none b. I b. C 10. you will also need the following software package: a. WDS between a device in station-wds mode and a device in station-wds mode b. dst-address. DHCP b. which is automatically created by RouterOS when user adds a valid address to an active interface? a. ICMP . Yes b.ping e. What protocol is used for Ping and Trace route? a. Encryption c. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 9. WDS between a device in ap-bridge mode with a device in station-wds mode d.168. No 12. dhcp c. /ip firewall nat add action=masquerade chain=srcnat b. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat d. Which are necessary sections in /queue simple to set bandwidth limitation? a. Bridging a device in station mode with a device in ap-bridge mode 11. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized.0/24 c. TCP d. Router's webpage . S e. target-address. Mark all features that are compatible with Nstreme a. dst-address d.0. and it's a driver issue? a. advanced-tools 13. For static routing functionality. /ip firewall nat add action=masquerade chain=srcnat src-address=192. From which of the following locations can you obtain Winbox? a. A d. UDP - trace route 15. target-address.interface=ether1? a. routing d. max-limit b. IP c. max-limit c. additionally to the RouterOS system package. max-limit 14. target-address. What letters appear next to a route. D c.

b. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? Yes No 20.192/24 and B: 10. To identify a station in Neighbor discovery 18. IP Address and Subnet ------------------------------------------------------------------------------------.1.2. Rate limit d. winbox users d.1/22 c. mikrotik.2. which menu allows you to do this? a.3 --------------------- ---------------------------------------------------------------- 1. Walled-garden d.1/23 and B: 10.109/26 b. Files menu in your router c. Byte limit b.1.2.0. Two hosts. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication. are connected to a broadcast LAN. a.2.SET .2. Walled-garden IP .66/25 and B: 10. IP bindings c.com 16. A: 10. pppoe users f.1. To identify a station in a list of connected clients b. l2tp users c. A and B.2.2.0. wireless users e. What kind of users are listed in the Secrets window of the PPP menu? a. A: 10.2. A: 10.1/22 17.0/23 and B: 10. Uptime limit e. pptp users b.2. Select all the answers showing pairs of IP address/mask which would allow IP connections to be established between the two hosts.1. IP Gateway c.1. Why is it useful to set a Radio Name on the radio interface? a. MikroTik RouterOS DHCP client can receive following options a. Users b. Router A and B are both running as PPPoE servers on different broadcast domains of your network. A: 10. hotspot users 19. Via the console cable d.129/26 d. To identify a station in the Access List c.

1 add disabled=no distance=5 dst-address=0.168. Route via gateway 1. 0 d. 2046 e.0/0 gateway=1. the user change it with a new card and set the same IP for it.0/0 gateway=2. and static ARP has been set for that IP address on gateway. /31 7.1. 24 hours b.2. 1 month d.2.1. A PC with IP 192. Old static ARP entry on gateway has to be updated for the new card b. 2048 d.2 a.2 4. How many usable IP addresses are there in a 20-bit subnet? a. How long is level 1 (demo) license valid? a.2. Infinite time c. Route via gateway 2. Nothing - it will work as before c.2. How many different priorities can be selected for queues in MikroTik RouterOS? a. /30 b. /29 c.1 b. 16 c.2 can access internet. /32 d. 4094 .1. 1 year 5.0.0.0. 4096 c. MAC-address of the new card has to be changed to MAC address of old card d. What else should be done? [multiple answers] a. Is ARP used in the IPv6 protocol ? True False 6. Another IP has to be added for Internet access 8.0. Which default route will be active? /ip route add disabled=no distance=10 dst- address=0. In MikroTik RouterOS. When the PC Ethernet card failed. 2047 b.1.2. Layer-3 communication between 2 hosts can be achieved by using an address subnet of: a.1. 1 3. 8 b.

4 c. Which of the following IP addresses are publicly routable? a. Accept all MAC-addresses listed in /ip arp as static entries d. FQDN Address 15. The first address of the subnet 11. 1 d. IP Address b. Which of the following is NOT a valid MAC Address? a.9.254 c. What protocol does ping use? a.14. 172.155.3 b.34. 88:0C:00:99:5F:EF e. The first usable address of the subnet b.14. Interface Address c.168.0 d. 192. what will this interface do a.3. Accept all IP/MAC combinations listed in /ip arp as static entries c. 64 10.1.27. 80:GF:AA:67:13:5D d. 95:B5:DD:EE:78:8A b. UDP . MAC Address d. 30 c. 11.10. The network address is a.16. 13:16:86:53:89:43 c. 60 b. 1. Which ones of the following are valid IP addresses? [multiple answers] a. Accept all IP addresses listed in /ip arp as static entries 14.13.4 16. EA:BA:AA:EE:FF:CB 13.13. 192. The last address of the subnet c.255 b.168.168. 192. 10. If ARP=reply-only is configured on an interface.23 d. What is term for the hardware coded address found on an interface? a.10.1 12.256. Add new MAC addresses in /ip arp list e. Add new IP addresses in /ip arp list b. 127. What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ? a.

125.2. TCP c.253/24 gateway:202.168.0.168. 2 20.45/24 . 3 b.148.168. Layer 2 d.1 b.b. 4 c. Byte b. The basic unit of a physical network (OSI Layer 1) is the: a.4 --------------------- ---------------------------------------------------------------- 1. IP:192.168.168.2.168. 248.1 . IP:192.1 c. Header ------------------------------------------------------------------------------------.115/24 gateway: 192.125. 5 e.168.168.168.SET .115.1/24 Mark the correct configuration on client PC to access to the Internet a.0.1/24 gateway:192. 12 b. ICMP 17.2. IP:192.148.2. How many IP addresses can one find in the header of an IP packet? a. IP:192.168. Layer 1 18.DNS server: 248.168. You have a router with configuration . IP:192.2. Frame c.148. 1 d. MAC layer by OSI model is also known as a. Layer 7 c.168. Layer 3 b.125. How many layers does Open Systems Interconnection model have? a.223/24 gateway:248.2.Default gateway:202.2/24 gateway:202.Local IP: 192. 6 c.115. Bit d. 9 d.136 d. ARP d.Public IP :202.136.1 e.1. Layer 6 e.137 . 7 19.115.45 .

Which of these are possible solutions to bridge two networks over a wireless link: a. Disable connection tracking for mangle to work 6. Both devices in AP mode and enable WDS mode b. kind=pcq pcq-limit=5000000 pcq-classifier=src-address d. it works directly with: a. You want to use PCQ and allow 256k maximum download and upload for each client. Connection tracking must be enabled for firewall to be effective c. True False 9. kind=pcq pcq-limit=256000 pcq-classifier=dst-address c. On the advanced menu of the wireless setup there is a parameter called "Area". kind=pcq pcq-limit=256000 pcq-classifier=src-address e. What menus should be used to allow certain websites to be accessed from behind a hotspot interface. another one in station 7. a. It is impossible to disable user "admin" at the menu "/user" True False . One device in AP mode. another one in station-pseudobridge d. another one in station-pseudobridge-clone c. The Export file can be edited with a standard text editor after its creation c. One device in AP mode. When backing up your router by using the 'Export' command. One device in AP mode. Choose correct argument values for the required queue. Access List c. ip hotspot profile c. ip hotspot ip-binding b. Security Profile 3. Enabling connection tracking reduces CPU usage in RouterOS b.2. ip hotspot walled-garden d. Connection tracking must be enable for NAT'ed network d. the following happens: a. without client authentication a. Winbox usernames and passwords are backed up b. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address 5. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration. Which of the following is true for connection tracking a. ip hotspot walled-garden ip 4. None of these d. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address b. Connect List b. You are requested to give the export file a name 8.

Users d. which of the following rules would be needed? a.99.168. Walled-garden IP b.168. which menu allows you to do this? a.10. established 11. /ip firewall filter add chain=forward src-address=192.168.168. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication.1 dst-address=192. because of the different frequencies d.1.10 action=drop d.99. /ip firewall nat add chain=dstnat src-address=192.168. If a packet comes to a router and starts a new.99.168.1. previously unseen connection. Yes.10 action=drop b. if you wish to prevent all access to a server located at 192.168. new c.4ghz-b/g default-authentication=yes default-forwarding=yes security- profile=wpa Card Nr 2. because of the different security profiles 12.168. you have the following configuration: /ip route add dst-address=192.? a. /ip firewall filter add chain=input src-address=192. unknown d. invalid e.10 action=drop .168.1 dst-address=192.0/24 dst-address=192.99.1. able to connect to Card Nr 1. No. which connection state would be applied to it? a.: mode=ap-bridge ssid="office" frequency=2447 band=2.168. No.0.10 from LAN1 devices. no connection state would be applied to such packet b. We have two radio cards in a point-to-point link with settings: Card Nr 1. /ip firewall filter add chain=forward src-address=192.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2.168.0/24 gateway=192.: mode=station ssid="office" frequency=2412 band=2.1.4ghz-b/g default-authentication=yes default-forwarding=yes security- profile=wpa2 Is Card Nr2.1. Yes. In R1.1. Consider the following network diagram. when security profile settings are compatible with each other and Nstreme is enabled or disabled on both c. if Nstreme is enabled or disabled on both b. Walled-garden c.10 action=drop c.1 dst-address=192. IP bindings 13.

255.28.100.255. TCP 25 e.P. Select which of the following are 'Public IP addresses': a.73.255. FIFO - First In First Out (for Bytes or for Packets) d.69/255. UDP 161 d.255.68/255. 192.100.168.168. TCP/22 d. What is the default protocol/port of (secure) winbox? a. 172. 254 18.252 b. TCP/8080 15.14.100. TCP 161 20. TCP 123 f. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U. 10.254. 192.255. 172. (Simple Network Managemnt Protocol) a. 192.70 using a subnet mask of 255.168. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device? a. RJ45 functioning cable.T.110.252.0. PCQ - Per Connection Queuing f. The device is configured with an IPv4 address of 192.70/255. TCP/8291 c.252 17.37 .255.1 b.252 c.255.168.0) subnet? a. UDP 162 c.100.255.254. 512 b.255. UDP/5678 b. Mark the queue types that are available in RouterOS a. DRR - Deficit Round Robin c.255. SFQ - Stochastic Fairness Queuing b. 510 c. Is ARP used in the IPv6 protocol ? True False 19.71/255.2 c.255.168.168. 192. TCP 162 b.50. LIFO - Last In First Out e.252 d. 192.21 d. RED - Random Early Detect (or Drop) 16.100. Which of the following protocols / port s are used for SNMP. How many usable IP addresses are there in a 23-bit (255.168. 508 d.

0.30/2 ------------------------------------------------------------------------------------.15/29 and 192.100/25 d. Which computers would be able to communicate directly (without any routers involved) a. /ip service b.100 c. Layer 3 b.0.SET .0. 192. Layer 1 d.168.17/22 and 10.5. 192.5.10.72. l2tp users d.168.17.10.168.17.0/16 24. winbox users 2. G2:60:CF:21:99:H0 b.e.5 --------------------- ---------------------------------------------------------------- 1. Layer 2 e. Layer 6 23.1/24 and 10. 192. pppoe users f. What kind of users are listed in the Secrets window of the PPP menu? a. MAC layer by OSI model is also known as a. Layer 7 c. wireless users c.63. /ip hotspot walled-garden .5.168.5. /ip hotspot user c. False True 22. router can add dynamic ARP entries for the particular interface. hotspot users b. 10. 10.0.5/26 and 192. If ARP=reply-only is enabled on one router interface.168. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201 d.1. What configuration is added by /ip hotspot setup command? (select all that apply) a. Select valid MAC-address a. pptp users e. 00:00:5E:80:EE:B0 c.21 21. 11.20/28 b.

False b. False b. and you suspect it is a driver issue? a. No 7. what will this interface do a. a. address list name 8. If ARP=reply-only is configured on an interface. Using wireless connect-list it's possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Accept all IP addresses listed in /ip arp as static entries e. Add new MAC addresses in /ip arp list b. Add new IP addresses in /ip arp list d. Accept all MAC-addresses listed in /ip arp as static entries c. Which is the default port of IP-Winbox? a. server's address d. True 4. Accept all IP/MAC combinations listed in /ip arp as static entries 5. TCP 8291 b. Yes b. It is possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers.d. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized. client's address b. True 6. /queue tree 3. What can be used as 'target-address' in the simple queue? a. /ip dhcp-server e. TCP 80 . client's MAC address c. a.

MikroTik RouterOS is sending logs to an external syslog server.2. UDP 21 c. chain=src-nat b.3. action=accept. chain=src-nat c. UDP 514 b. action=masquerade. The router is connected only to a secondary Ethernet port 12. Which protocol and port is used by RouterOS for sending logs (by default)? a. You do not know the password of the router d. To use masquerade.1.168. UDP 113 d.5620-5700 b. default.2.3.1.0/24 gateway=1.2. The router does not have an operating system b. 5640~5680 c. TCP 8192 9. TCP 110 10.168.55? /ip route add disabled=no distance=1 dst-address=192. out-interface. chain=dst-nat 13. In which situations can Netinstall NOT be used to install a RouterBOARD? a.0/16 gateway=3. The router is connected only to a wireless network c.3. 5560. action=masquerade.5560.1. Which route will be used to reach host 192. action=masquerade. Route via gateway 3.2 add disabled=no distance=1 dst-address=192.168. Please select valid scan-list values in interface wireless configuration: a.5600.168.0/25 gateway=2. Route via gateway 2. out-interface.1.1.5560.c.1. out-interface.5620+5700 . UDP 8291 d.3 a.3 c.1 add disabled=no distance=1 dst-address=192.0. in-interface.3.1. Route via gateway 1.5660-5700 d. 5540. you need to specify a.2.1 b. chain=src-nat d.2 11.

you must always ensure that you add both the gateway and the interface. How should this be configured? a. What protocol does ping use? a. False b. Router will drop the packet at ICMP (jump) chain drop rule (5th rule) b. TCP b. By Signal Strength Range d. Set "only-one=no' at /ip hotspot 16. Router will drop the packet at the Input drop rule (3rd rule) . In a random order c. You would like to allow multiple logins with one user name on a HotSpot server. Firewall configuration is the following: 1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP 2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY 3) /ip firewall filter add chain=input protocol=icmp action=drop 4) /ip firewall filter add chain=ICMP protocol=icmp action=log log-prefix=JUMP-ICMP-DENY 5) /ip firewall filter add chain=ICMP protocol=icmp action=drop Client sends "ping" to router. Set "Shared Users" option at /ip hotspot d. In sequence order b. What will the router do? a. By interface name 17. ARP 18. False True 15. When adding a static route. Router will log it with prefix: ICMP-DENY c. It's not possible c. UDP d.14. ICMP c. In which order are the entries in Access List and Connect List processed? a. Is it possible for a client to get an IP address but no gateway after a successful DHCP request? a. Set "Shared Users" option at /ip hotspot user profile b. True 19.

works flawlessly. Packet begins a new TCP connection b. While troubleshooting a network from inside the network.d. which setting(s) for 'wireless-protocol' should be enabled on the client so that the client can auto-detect the protocol used by the AP and still make connection with 802.1.2 to-ports=81 The command shown above: a. routing b. additionally to the RouterOS system package. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192. What is the most likely issue? a. advanced-tools 24.1.1.2 21. Router will log it with prefix: JUMP-ICMP-DENY 20. you do not wish a client to disconnect for more than a few seconds during the upgrade. DNS is not available b. Packet belongs to an existing connection.2 to port 81 of the interface ether1 d. you discover that you can ping the gateway reliably.168.2 c. none c.11a or . however. but you cannot browse the Internet. Masquerading rule is not applied 22.11a to Nv2. You are planning a migration from a wireless link using 802. correct encryption key and ROS version). but not part of an existing connection 23. When you change the AP from 802.2 to the interface ether1 b. What is marked by connection-state=established matcher? a. Assuming the client is capable of operating with Nv2 (correct hardware.for example a reply packet or a packet which belongs to already replied connection d.168. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.1.168. dhcp d. The computer did not get an IP address c. Adds IP address 192. /ip firewall nat add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to- address=192. Packet is related to. Skype. For static routing functionality. Packet does not correspond to any known connection c. Network card and/or cable is not working d.11a on 5GHz (with no nstreme) to one using Nv2 on 5GHz. you will also need the following software package: a.1. Forwards all TCP traffic from 192.168.168.

2. Consider the attached diagram:
In order for Router 1 to see all of the networks the following commands could be used (choose all
answers that could work)

3. Configuring HotSpot is possible on MikroTikRouterOS only with a wireless interface.

Yes

No

4. What menus should be used to allow certain websites to be accessed from behind a hotspot
interface, without client authentication
a. ip hotspot ip-binding

b. ip hotspot profile
c. ip hotspot walled-garden ip
d. ip hotspot walled-garden

10. Which of the following would prevent unknown clients from connecting to your AP? Choose
the BEST answer.
a. Check the "Do not permit unknown client" box in the wireless configuration
b. Uncheck "Default Authenticate" in the wireless card configuration, and add each known
client's MAC address to your access-list configuration ensuring that you enable "authenticate" in
the entry
c. Add each known client's MAC address to your access-list configuration is the only step needed
d. Uncheck "Default Authenticate" in the wireless card configuration, and add each known
client's MAC address to your connect-list configuration
e. Configure the radius server under "/radius"

11. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized,
and you suspect it is a driver issue?
a. Yes
b. No

12. Mark the queue types that are available in RouterOS
a. SFQ - Stochastic Fairness Queuing
b. RED - Random Early Detect (or Drop)
c. FIFO - First In First Out (for Bytes or for Packets)
d. DRR - Deficit Round Robin
e. LIFO - Last In First Out
f. PCQ - Per Connection Queuing

15. After putting this rule: /ipfirewall add chain=input action=drop, you will still be able to
access the Router using the mac-address.
Yes

16. You need to reboot a RouterBoard after importing a previously exported rsc file to activate
the new configuration.

17. What is necessary for PPPoE client configuration?
a. ip firewall nat masquerade rule
b. Interface (on which PPPoE client is going to work)
c. Static IP address on PPPoE client interface

18. In order to use dynamic keys in your security profile for an AP, you MUST set up the dhcp
server to provide the dynamic keys.

19. You have a router with configuration
- Public IP :202.168.125.45/24

248.148. Firewall Filter rules d.1.148. Queue guarantees download data rate of one megabit per second for host 192.168.0.2. SRC-NAT rules b. Route rules 24.148.10 upload data rate to one megabit per second.168.10 c.1. Router OS can set vlan-id value from . Firewall Connection Tracking 23.168. 25. To deny access to a specific website.1 b.168.to : a.1/24 gateway:192. IP:192.10 download data rate to one megabit per second. Queue guarantees upload data rate of one megabit per second for host 192. Is it possible that the same IP address is included in multiple address lists and still be used by these multiple address lists? a.168.115.2. Queue Tree b.Local IP: 192.125.. Where can you monitor (see addresses and ports) real-time connections which are processed by the router? a. 1-2049 b.1 .168.10 d. Action=redirect applies to a.115/24 gateway: 192.168.Default gateway:202. Collisions are possible in full-duplex Ethernet networks True False 22.115.2.1. 1-2048 21. Firewall Counters d.168. b.136.DNS server: 248. DST-NAT rules c.253/24 gateway:202.1.2.223/24 gateway:248.1/24 Mark the correct configuration on client PC to access to the Internet a.0.115.168. IP:192. What does this simple queue do (check the image)? a. 1-4095 d.125.1 e.45 c. caching should be enabled .2. Tool Torch c.168.2/24 gateway:202. Destination NAT rule is required to utilize transparent proxy facility b. IP:192. 1-4096 c. IP:192.168.168.136 d.168.168. Queue limits host 192. Queue limits host 192. IP:192.137 .1.168.1 20.2.

7 --------------------- ---------------------------------------------------------------- 1. output b. a. default. 88:0C:00:99:5F:EF d. HotSpot can create dynamic queues on user login to do the speed limitations. Controls domains or servers which are allowed to cache by Proxy d.5620+5700 b. 5560. 10 d. Controls domains or servers which are allowed to cache by Proxy d. 30 b. caching should be enabled c. 255 5. 5640~5680 d. Destination NAT rule is required to utilize transparent proxy facility b. but not specific web pages 2. forward 6.c. The default value of 'target-scope' for a static route is: a. You want to limit bandwidth for your HotSpot users. Can deny access to a specific domains or servers.5560. 80:GF:AA:67:13:5D c. Which of the following is NOT a valid MAC Address? a. static c. Choose correct statements for MikroTik proxy. Collisions are possible in full-duplex Ethernet networks True False 3. 1 c. EA:BA:AA:EE:FF:CB e.SET . 13:16:86:53:89:43 b. input d. 95:B5:DD:EE:78:8A 4.5620-5700 c.5660-5700 7. . Which firewall chain would be used to block a client's MSN traffic on a router? a. Please select valid scan-list values in interface wireless configuration: a.5600. but not specific web pages ------------------------------------------------------------------------------------. Can deny access to a specific domains or servers.5560. 5540. To deny access to a specific website.

xx. additionally to the RouterOS system package.xx. routeros-mipsle-x. none c. 256 d. 8 c. Yes/ True b. router users 11. postrouting d. wireless users c. /ip firewall nat add action=masquerade chain=srcnat src-address=192.npk on a RB433 b. All connected clients will disconnect b.xx. hotspot users d. Which firewall chain should you use to filter ICMP packets from the router itself? a. 16 b. What will happen ? a. You start a scan for wireless networks on you access point. routeros-powerpc-x. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 b.xx.168. advanced-tools d. /ip firewall nat add action=masquerade chain=srcnat 12. output 13.npk on RB133 d. pptp users b. routeros-mipsbe-x. dhcp b. For static routing functionality. input b.0. you will also need the following software package: a.xx. Which software version can be installed onto the following RouterBoard types? a. routeros-mipsbe-x. What kind of users are listed in the "/user" menu? a.npk on a RB133 14.168.0/24 c. You'll see available frequencies 10. You'll see all connected clients c. No/ False 8. forward c. routing 9. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat d.0.npk on a RB1100 e. The highest queue priority is a. 1 . Which is correct masquerade rule for 192.a.npk on a RB333 c.0/24 network on the router with outgoing interface=ether1? a. routeros-x86-x.

168. DNS name filtering c. system configuration 20. dude data c. Router will drop the packet at the Input drop rule (3rd rule) b.168.10 upload data rate to one megabit per second. You have a wireless interface with Se to use nstreme protocol? a. /ip route configuration on router. What does this simple queue do (check the image)? a.168.15. c. /store allows you to save to external disk a.168. 19. d.168. but Nstreme can be used only for SSID=VAP1. User-Manager data b.1. Router will drop the packet at ICMP (jump) chain drop rule (5th rule) d.0.1. Queue guarantees download data rate of one megabit per second for host 192.168.1 /ip route add dst-address=192. web-proxy data d.2. FTP caching 17. Router will log it with prefix: JUMP-ICMP-DENY c. Nstreme can not be used on wireless interface if a VirtualAP is on it. No. but Nstreme can be used only for SSID=WLAN1. c. Yes.0. SMTP caching d. b.0/26 gateway=192.1. /ip route add gateway=192. Queue limits host 192.3 /ip route add dst-address=192. Queue guarantees upload data rate of one megabit per second for host 192.2 /ip route add dst-address=192.1. HTTP caching e. Queue limits host 192.168.10 d.16SID="WAN1"mode="ap-bridge" and a VirtualAP with SSID="VAP1" on the router.10 download data rate to one megabit per second.0.0/24 gateway=192.0. Router will log it with prefix: ICMP-DENY 16. Yes. Firewall configuration is the following: 1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP 2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY 3) /ip firewall filter add chain=input protocol=icmp action=drop 4) /ip firewall filter add chain=ICMP protocol=icmp action=log log-prefix=JUMP-ICMP-DENY 5) /ip firewall filter add chain=ICMP protocol=icmp action=drop Client sends "ping" to router.0/24 gateway=192. MikroTik proxy features are: a.3. POP3 caching b.168.10 18.1.4 .168. Is it possibl8.168. What will the router do? a. but Nstreme will be used for all SSID assigned for that physical interface b. Yes.

To create a DHCP service for all clients you must configure DHCP server on a. DHCP service is not possible in this setup 25. Ethernet and wireless interfaces d.SET .0. Layer-3 tunnel c.0. only on bridge interface c.to : a. 1-2049 c.4 21. Layer-2 tunnel. What is the meaning of letter "R" on an active session in the menu PPP Active Connections? a. 192.3. Which gateway will be used? a. 192. 1-2048 b.168. Remote 22. A station can connect to AP if they both use different country regulation settings. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized.0.240. 1-4095 3. Router OS can set vlan-id value from .1 c.168. .168.168. Running b. every bridge port b. Hotspot ip-binding is used to allow access to remote host specifying the IP address of the remote host. EoiP is: a.8 --------------------- ---------------------------------------------------------------- 1. but the frequency chosen is allowed in both countries 23.168.3 d. MikroTik proprietary tunnel protocol b. 192. log messages are stored on disk by default 2.2 b. 24. that can be bridged ------------------------------------------------------------------------------------.0.Router needs to send packets to 192. 1-4096 d. Router has Wireless and Ethernet client interfaces. Radius c. all client interfaces are bridged. 192.

routing b. TCP 8192 b. Yes b. S c. A 6. kind=pcqpcq-limit=5000000 pcq-classifier=dst-address b. Disable connection tracking for mangle to work c. none d. Create IP Address restriction in the Wireless Access List c. Choose correct argument values for the required queue. To limit wireless access for your HotSpot users a. dhcp 10. Enabling connection tracking reduces CPU usage in RouterOS b. No 4. Connection tracking must be enabled for firewall to be effective 5. I b. additionally to the RouterOS system package. kind=pcqpcq-limit=1256000 pcq-classifier=dst-address 8. Create MAC Address restriction in the Wireless Access List 9. advanced-tools c. For static routing functionality. Create MAC Address restriction on PPP user login b. UDP 8291 c.and you suspect it is a driver issue? a. kind=pcqpcq-limit=256000 pcq-classifier=dst-address d. What letters appear next to a route. C d. a. TCP 80 7. TCP 8291 d. To avoid looping on this network. Create MAC Address restriction on HotSpot user login d. Enable RSTP on AP1 and AP3 . Connection tracking must be enable for NAT'ed network d. which is automatically created by RouterOS when user adds a valid address to an active interface? a. kind=pcqpcq-limit=256000 pcq-classifier=src-address c. you need to: a. You want to use PCQ and allow 256k maximum download and upload for each client. kind=pcqpcq-limit=5000000 pcq-classifier=src-address e. Which of the following is true for connection tracking a. D e. you will also need the following software package: a. Which is the default port of IP-Winbox? a.

Bit c.168. wlan1 (in ap-bridge mode). Byte d.168. It is impossible to disable user "admin" at the menu "/user" True False 15. /ip firewall nat add chain=dstnat in-interface=ether1 src-address=192.168. 16 d. 256 b. On ether3 interface c. Frame 14. These interfaces are bridged in the bridge1 interface. On bridge1 interface 16. On ether2 interface b. /ip firewall nat add chain=srcnatsrc-address=192. you should add rule a. Enable RSTP on AP1. The basic unit of a physical network (OSI Layer 1) is the: a. On wlan1 interface d. it works directly with: a. Access List d. None of these b. What is necessary for PPPoE client configuration? .168.b.0/24.0.168.0.0. configured on the interface Ether1. /ip firewall nat add chain=srcnat out-interface=ether1 src-address=192. AP2 and AP3 11. 1 c.0. On the advanced menu of the wireless setup there is a parameter called "Area". Enable RSTP on AP1 c. ether3. Header b. Connect List c.0/24 action=masquerade d. To make the masquerading of the network 192.0/24 action=masquerade b.0.0/24 action=masquerade 12. The highest queue priority is a. 8 17.0/24 action=masquerade c. Security Profile 13. Which interface should the HotSpot server be configured on? a. /ip firewall nat add chain=dstnat out-interface=ether1 src-address=192.HotSpot is required on the interfaces ether2.

c.4 GHz. Route via gateway 2. Check the allowed input formats for wireless scan-list. True b.a. 5500 5700 20.. Is it possible to use the serial port of MikroTik to communicate with an external device connected by null-modem cable? a.2 22. To be able to do NAT the connection tracking does not need to be enabled.0. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0. you have to: a. False 19. False 23.0. Public IP address of the webserver must be installed on the NAT Router . 5500/5700 d.2. An IP address pool can contain addresses from more than one subnet. (select all that apply) a. To connect your MikroTik router to a wireless access point..1. 24.1. it is always possible by /system serial-terminal command. Yes. Use the same Radio Name b.5700 e. Which of the following configuration steps must be met.1 b.2.0/0 gateway=1. 5500-5700 c.1. if port is not being used b.2 a. Only the web server port should be visible to the public. .0. Yes.0/0 gateway=2. when other is a MikroTik router.2. Use the same SSID as on accesspoint c. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver d.1 add disabled=no distance=5 dst-address=0. 2.5700 b. Use the same Band (5 GHz. It is required to make a web server on a private LAN visible on the Public Internet.2. Connection Tracking must be enabled on NAT router e. A route between the NAT Router and the webserver must exist b. a. Static IP address on PPPoE client interface b. ip firewall nat masquerade rule c. LAN address of the webserver should be routable on the internet c.0.1. True b. 5500. a. Interface (on which PPPoE client is going to work) 18. Yes. 5500 . Route via gateway 1.) 21. a.

Dst. Vlan ID f.9 --------------------- ---------------------------------------------------------------- 1. 256 5. advanced-tools d. Yes/ True b. dhcp b. None of the above is correct d. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time? a. D = Drop d. routing 3. Which of the following Routes statuses are possible? a. For static routing functionality. Src. none c. Dst. Select all possibilities to connect and do some basic configuration . Wireless clients (mode=station) will work properly if bridged to ethernet 6. S = Static b. additionally to the RouterOS system package. Collisions are possible in full-duplex Ethernet networks True False ------------------------------------------------------------------------------------. You have to connect to a RouterBOARD without any previous configuration. 1 d. No/ False 2. What could be monitored by Torch? a.SET . 16 b. you will also need the following software package: a. Address b.25. Port c. Address e. Protocol 4. 8 c. The highest queue priority is a. C = Connected c. A = Active 7.

255.168.168. Consider the following network diagram.99. /ip firewall filter add chain=forward src-address=192.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2.252 d.168.100. /ip firewall nat add chain=srcnat out-interface=ether1 src-address=192.0. Contains the security profiles settings b. Reinstall software without losing licence c. MAC-Winbox d.252 b.100.0/24 . Install different software version (upgrade or downgrade) 10. The device is configured with an IPv4 address of 192.1.252 c.70/255.1.1. if you wish to prevent all access to a server located at 192.168.168. 192. 192.1 dst-address=192.255.168.69/255.10 action=drop 11. 192.168. 192.255.168. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.255.1.100.0/24 gateway=192. Attach monitor/keyboard c.0/24 dst-address=192.168. Keep configuration. /ip firewall filter add chain=forward src-address=192.168.10 from LAN1 devices.a. Shows a list of Client's MAC Address that are already registered at AP d.T.99. Install package for different hardware architecture b.168.255.168.71/255. /ip firewall nat add chain=dstnat src-address=192.70 using a subnet mask of 255.P. but reset a lost admin password d.10 action=drop b.255.1.0. Telnet b.68/255. In R1. /interface wireless access-list is used for a.252 9.100.168.168.1 dst-address=192. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device? a.168.255.168.168. To make the masquerading of the network 192. you have the following configuration: /ip route add dst-address=192.10 action=drop c. Serial Connection 8.99.0/24. RJ45 functioning cable.252. Authenticate Hotspot users 12. Handles a list of Client's MAC Address to permit/deny connection to AP c.0. Netinstall can be used to a.1 dst-address=192. which of the following rules would be needed? a. configured on the interface Ether1.99.10 action=drop d. you should add rule a. /ip firewall filter add chain=input src-address=192.255.168.100.1.255.255.

The total-max-limit under Simple Queues will limit the combined upload and download of the target-address of your simple queue. You are planning a migration from a wireless link using 802. a. Two mangle rules defining different mangle marks for the same traffic type. Set "only-one=no' at /ip hotspot b. which setting(s) for 'wireless-protocol' should be enabled on the client so that the client can auto-detect the protocol used by the AP and still make connection with 802. /ip firewall nat add chain=srcnat src-address=192. Assuming the client is capable of operating with Nv2 (correct hardware.168.0/24 action=masquerade 13.168. /ip firewall nat add chain=dstnat in-interface=ether1 src-address=192.0. a. How should this be configured? a. nv2-nstreme-802. True 17. RouterOS DHCP server is able to send any DHCP options (specified in RFCs) to DHCP clients a.11a on 5GHz (with no nstreme) to one using Nv2 on 5GHz. Set "Shared Users" option at /ip hotspot user profile c.False b. No 18. correct encryption key and ROS version). You would like to allow multiple logins with one user name on a HotSpot server. will make it have both mangle marks.11a or Nv2 : (select all that apply) a. any c.0.11a to Nv2.action=masquerade b.11 16.168. Set "Shared Users" option at /ip hotspot 15. It's not possible d.0/24 action=masquerade c. Yes b. Yes b. . you do not wish a client to disconnect for more than a few seconds during the upgrade. When you change the AP from 802. unspecified b.0/24 action=masquerade d. Nv2 d. Using wireless connect-list it's possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries. /ip firewall nat add chain=dstnat out-interface=ether1 src-address=192.0. No 14.

100 to this server. Router A and B are both running as PPPoE servers on different broadcast domains of your network. It is possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers. Is it possible for a client to get an IP address but no gateway after a successful DHCP request? a.50.50.30 dst-address=80. system c. If you make a firewall rule on the router to disallow address 159.232.30 24.0. /ip hotspot active c.148.50. advanced-tools b. Where are HotSpot authorized clients shown? a. Old static ARP entry on gateway has to be updated for the new card b. Another IP has to be added for Internet access d. False b. the user change it with a new card and set the same IP for it.232. A PC with IP 192.a.1 c. src-address=159.100 dst-address=10.a.168. ssh d.20.50.0. You have made a DST-NAT rule that sends all HTTP traffic received on your router's address 80. There is an HTTP server 10. and static ARP has been set for that IP address on gateway. /ip hotspot d. MAC-address of the new card has to be changed to MAC address of old card c.1.20.148. src-address=159. When the PC Ethernet card failed. Which RouterOS packages should be installed on router for SSH server support? a.20.1 d. src-address=80. False b.0. how would you identify this communication in this rule? a. /ip hotspot host b.30 to communicate with the server. Nothing . True 22. security 23.0.148.148.232. Yes b. src-address=80.2 can access internet.100 dst-address=159.20.100 b. No 19.0.1 in your private network. True .it will work as before 21. /ip hotspot user 20. What else should be done? a.232.0.30 dst-address=10.

1.168. no b.1 add disabled=no distance=1 dst-address=192.SET .1. Route via gateway 2.3 a. Wireless access-list could allow and deny access to your AP b. Is action=masquerade allowed in chain=dstnat? a.1. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized. situation where the TTL of the packet expires d. Which route will be used to reach host 192. Route via gateway 3. Mark all correct answers a. yes.0/25 gateway=2.2. Static IP address on PPPoE client interface c.55? /ip route add disabled=no distance=1 dst-address=192. yes.2. What is necessary for PPPoE client configuration? a.2 add disabled=no distance=1 dst-address=192.0/24 gateway=1. but it works only for incoming connections d. but only if dst-addr is specified 3. You start a scan for wireless networks on you access point.3.2.168.1.0/16 gateway=3.3.168. Route via gateway 1. No b. Interface (on which PPPoE client is going to work) 6. What will happen ? a.10 --------------------- ---------------------------------------------------------------- 1. Define a routing loop (choose the most precise description) a.3.25. Default-Forwarding could be enabled for a specific clients by wireless access-list c.3.1 c.168.1. All connected clients will disconnect b.0. You'll see all connected clients c. yes c.2 b. and you suspect it is a driver issue? a. situation where the packet is routed through the same sequence of routers until the TTL expires b. ip firewall nat masquerade rule b.1.2.3 4. You'll see available frequencies 2. Yes 5. /ip firewall filter allows to deny authentication to AP . Situation where the packet does not reach it\'s destination c.1. situation where the packet is routed through the same router twice -----------------------------------------------------------------------------------.

25.2 d. 10. You want to limit bandwidth for your HotSpot users. Connect List c.5. Controls domains or servers which are allowed to cache by Proxy d.5. a. Which is the default port of IP-Winbox? a. A routing table has following entries: 0 dst-address=10.5. Yes/ True b.1. a.1.0/24 gateway=25.0. What protocol does ping use? . In case when router login password is lost.1.1 3 dst-address=10. No/ False 8.126? a. To deny access to a specific website. but not specific web pages 13.126 1 dst-address=10.1.1. Yes/ True b.1. TCP 8192 b.0. TCP 80 d.1. Destination NAT rule is required to utilize transparent proxy facility b. 10. Security Profile b.1. it works directly with: a. 10. TCP 8291 c.1.1 2 dst-address=10.0/24 gateway=10.d.1.0.disable wireless interface 7.1.1. it is necessary to reinstall RouterOS or use hardware reset funcion.2 Which gateway will be used for a packet with destination address 10.1. Access List d.126 9.1.1. The only way to prevent wireless clients connections . No/ False 11. caching should be enabled c.1. UDP 8291 10. Can deny access to a specific domains or servers.1. Is it possible that the same IP address is included in multiple address lists and still be used by these multiple address lists? a.0/25 gateway=10.5.1.5.1 b. None of these 12. On the advanced menu of the wireless setup there is a parameter called "Area".0/24 gateway=10.1 c. HotSpot can create dynamic queues on user login to do the speed limitations.

1. What is term for the hardware coded address found on an interface? a. Allow only pppoe login c. a. You do not want the RouterOS to be discoverable using MNDP or CDP locally. /system watchdog b.2-10. No/ False 16. TCP d. ICMP b. Which firewall chain should you use to filter clients HTTP traffic going through the router? a. Allow/deny use of more than one login by this user b.2. Remove/Disable all interfaces under mac-server telnet b. MAC Address c.2.a.31-10. Yes/ True b. input d. Allow login by pppoe and pptp. a. Additionally. /system scheduler c. FQDN Address b.1. Select the correct actions to accomplish this.1. Is it possible to distribute the extra IP address without adding another DHCP Server? 20. Remove/Disable all discovery interfaces c. Deny services (like telnet) only for this user or for one group of users e. 3 static IP address are defined for your servers: 10. /system cron 17. UDP 14. Set max values for total transferred bytes (up. prerouting b. Interface Address d. For user in local ppp secrets/ppp profiles database. MikroTik RouterOS commands can be run once a day by: a.and download) 19. ARP c. You also want to deny management via the MAC addresses on all interfaces. but deny login by l2tp d. forward 15.20 are distributed in the DHCP network. Remove/Disable the Interfaces e.2. Connection marks are stored in the connection tracking table. IP Address 18.2. it is possible to a. You have a DHCP server on your MikroTik router. The IP addresses 10. Place a proper input firewall rule to block mac discovery . After a while 20 more IP addresses need to be distributed in the network. output c.33. You wish to secure your RouterOS system.2. Place a proper forward firewall rule to block mac discovery d.

10 b.11 --------------------- ---------------------------------------------------------------- 1.168. Queue limits host 192. advanced-tools c. Possible IP pools.168. are: a.168. For static routing functionality.10 upload data rate to one megabit per second. 192.0. Select the configuration options you can use to achieve this setup.254 c. Queue limits host 192. none b.0.168. Enable RSTP on AP1 c.0. Remove/Disable all interfaces under mac-Server winbox g.0.14 d.10 download data rate to one megabit per second. 192.0. a. d.1. AP2 and AP3 b. 192.168. /ip hotspot walled-garden ip b.10 c. Queue guarantees download data rate of one megabit per second for host 192.101-192. a. Add a Deny All input firewall rule 21.255 b.1-192. you need to: a. you will also need the following software package: a.168. What does this simple queue do (check the image)? a. Enable RSTP on AP1 and AP3 25.1-192. routing d.168. Enable RSTP on AP1. /ip hotspot service-ports c.0. You want to use PCQ and allow 256k maximum download and upload for each client. 192. DHCP server is configured on a router's ether1 interface. To avoid looping on this network.0.168.169.99. dhcp 23. /ip hotspot ip-binding -----------------------------------------------------------------------------------.0. Queue guarantees upload data rate of one megabit per second for host 192.0.254 .0.f. kind=pcq pcq-limit=5000000 pcq-classifier=src-address d.1-192.168. that can be used by this DHCP server. Choose correct argument values for the required queue.1. All IP-phones are required to have access to outside networks without any HotSpot authentication. HotSpot server is installed on the router. kind=pcq pcq-limit=256000 pcq-classifier=dst-address 24. IP address 192.168. kind=pcq pcq-limit=256000 pcq-classifier=src-address b.1. additionally to the RouterOS system package. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address e.168.192.168.1.0.1-192.100/24 is assigned to the interface.SET . kind=pcq pcq-limit=1256000 pcq-classifier=dst-address c. 22.168.169.

xx. a. kind=pcqpcq-limit=1256000 pcq-classifier=dst-address c. station-wds d.xx. Queue limits host 192. 8. Queue guarantees download data rate of one megabit per second for host 192. a.xx. Action=redirect allows you to make a. kind=pcqpcq-limit=256000 pcq-classifier=dst-address e.1.npk on a RB433 d.10 d. routeros-mipsle-x. ap-bridge e. Transparent DNS Cache b.npk on a RB133 6.168. bridge b. routeros-x86-x. b. MikroTikRouterOS reinstall b.npk on RB133 b. Which software version can be installed onto the following RouterBoard types? a.1. What does this simple queue do (check the image)? a. What wireless modes can be used in a WDS setup? a. Enable Local Service c.168.1. MikroTikRouterOS password reset with saving router's configuration 4.10 download data rate to one megabit per second.npk on a RB333 e. routeros-powerpc-x.2. What does the firewall action "Redirect" do? Select all true statements.10 c. routeros-mipsbe-x. You want to use PCQ and allow 256k maximum download and upload for each client. kind=pcqpcq-limit=5000000 pcq-classifier=src-address . Queue limits host 192. Queue guarantees upload data rate of one megabit per second for host 192.168.npk on a RB1100 c.xx. kind=pcqpcq-limit=5000000 pcq-classifier=dst-address d. What is possible with Netinstall? a.1. Collisions are possible in full-duplex Ethernet networksTrue False 3. nstreme-dual-slave c. station 9. MikroTikRouterOS configuration reset c. Redirects a packet to a specified port on the router d. Forward DNS to another device IP address d. Redirects a packet to a specified port on a host in the network c.10 upload data rate to one megabit per second. kind=pcqpcq-limit=256000 pcq-classifier=src-address b. Choose correct argument values for the required queue. Transparent HTTP Proxy 5.xx. Redirects a packet to the router 7. routeros-mipsbe-x. Redirects a packet to a specified IP b.168.

after routing decision . 1-4096 c. routing e. advanced-tools c. Mark all correct answers: destination NAT will take place. Yes b.5660-5700 15.to : a. advanced-tools c. Please select valid scan-list values in interface wireless configuration: a. chain forward c. /queue tree b. wireless b. system 12. before ip firewall filter. /ip service 17. What configuration is added by /ip hotspot setup command? (select all that apply) a. additionally to the RouterOS system package. none b. you will also need the following software package: a. 5540. No 16.5560. 11. 1-2049 d. Firewall NAT rules process only the first packet of each connection. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized. /ip hotspot walled-garden c. chain forward b. and you suspect it is a driver issue? a. /ip hotspot user e. a. 1-4095 13.5560. 5560. /ipdhcp-server d. routing 14.5600. 1-2048 b.10. after ip firewall filter.5620+5700 b. dhcp d. Select all the RouterOS software packages required for configuring a wireless AP a. 5640~5680 c. dhcp d. default. Router OS can set vlan-id value from .5620-5700 d. before routing decision d. For static routing functionality...

168. 192.0.0.0.0. POP3 caching c. Route via gateway 2.1.100/25 23. Route via gateway 1.5.5/26 and 192. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time? a. a. MikroTik proxy features are: a.10.168.2 25.5. 10.0.1. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.2.18.168.2. 10.30/23 d. Which computers would be able to communicate directly (without any routers involved) a. 192. Using wireless connect-list it's possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries.0/0 gateway=2.0. On wlan1 interface b.17/22 and 10. You can not use OSPF and RIP routing protocols simultaneously on the RouterOS. On bridge1 interface d. On ether2 interface 20.False b. ether3. SMTP caching d. .1.1/24 and 10. HTTP caching b.5. a.2 a. wlan1 (in ap-bridge mode).17. True 21. These interfaces are bridged in the bridge1 interface. HotSpot is required on the interfaces ether2.1.0/0 gateway=1.100 b. No/ False 24. Yes b.5. No 19.1 add disabled=no distance=5 dst-address=0.0. Which interface should the HotSpot server be configured on? a. It is possible to access MikroTik Graphs on a different port than HTTP port 80. Yes/ True b.1. DNS name filtering 22.168.15/29 and 192.17.20/28 c.1 b.2.10. On ether3 interface c.2. FTP caching e.

255.0 4. 192.255.168.255. 00:00:5E:80:EE:B0 d.168. Select valid subnet masks: a.252 c.255. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201 e. 255. 255. Which computers would be able to communicate directly (without any routers involved) a.0. ICMP c. RJ45 functioning cable. 10.15/29 and 192.17.0) subnet? a.0. 192.10.168. 512 c. How many usable IP addresses are there in a 23-bit (255. ARP d. 192.12 --------------------- ---------------------------------------------------------------- 1.P.0 c.0 b. 192.168.252 d.100/25 b.254. Yes/ True b.255.SET .a. 510 d. Select valid MAC-address a.69/255.100.252 3. TCP 5.0.100.100.71/255.255.255.255.0.168.5.168. The device is configured with an IPv4 address of 192. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.224.192.255.192.168. No/ False -----------------------------------------------------------------------------------. G2:60:CF:21:99:H0 6.5/26 and 192.255.168.70 using a subnet mask of 255. 254 b.255.T. 255.100.255.168.100 c.5.255.30/23 d.252. 10. 192.192.5.1/24 and 10. 192.10.100.0.0/16 b. UDP b.17.168.17/22 and 10.0. What protocol does ping use? a. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device? a.252 b. 192.255 d.70/255.5.0.68/255.1.20/28 . 508 2.

Which ones of the following are valid IP addresses? a.1 b.2 can access internet. Another IP has to be added for Internet access 11.168.2. 1 c.255 . the user change it with a new card and set the same IP for it. MAC-address of the new card has to be changed to MAC address of old card c.115/24 gateway: 192. and static ARP has been set for that IP address on gateway. (Simple Network Managemnt Protocol) a.1 e. 4094 e. 2046 b. 4 b.136. IP:192. When the PC Ethernet card failed. TCP 25 b.253/24 gateway:202. 2048 f. What else should be done? a. TCP 161 c.45 d.168. Which of the following protocols / port s are used for SNMP.1/24 gateway:192.2.168. IP:192.Public IP :202. 3 8.168.7.168. IP:192.125.2.223/24 gateway:248.2.0. IP:192.115.1/24 Mark the correct configuration on client PC to access to the Internet a.2/24 gateway:202.168.125. You have a router with configuration .45/24 . TCP 162 9. Nothing .2. UDP 162 e.1 c. 2047 d. How many usable IP addresses are there in a 20-bit subnet? a.136 12.168.168.148. A PC with IP 192.13.168. 2 d.2.Default gateway:202.Local IP: 192.137 .1. UDP 161 d.168.115.148. 4096 10. TCP 123 f.it will work as before b.168. Old static ARP entry on gateway has to be updated for the new card d. 192.125.0.168.1 .168.148. How many IP addresses can one find in the header of an IP packet? a. IP:192.DNS server: 248.168. 248.115.1.

Is ARP used in the IPv6 protocol ? True False 18. Which of the following IP addresses are publicly routable? a.0.4 15.21 e.155. Layer 2 c. The first address of the subnet c. How many layers does Open Systems Interconnection model have? a. Interface Address c.14. 192. MAC Address b.16. 10.0 c.168. 9 e.168.10.63. Layer 1 14.73.34. 7 c.37 b.3 b. 6 d.b. The first usable address of the subnet b. 1. 11.254. 172.4 c. 10.10.110. 192. Layer-3 communication between 2 hosts can be achieved by using an address subnet of: . In MikroTik RouterOS.27. 172. 172. 192. 12 b. 11. Select which of the following are 'Public IP addresses': a. MAC layer by OSI model is also known as a.256. Layer 7 b. 127.3.23 d. The network address is a. 5 20. FQDN Address 19. Layer 3 d.168.168. The last address of the subnet 16.254 d.28. What is term for the hardware coded address found on an interface? a.2 d. IP Address d.1.13. Layer 6 e.1 13.72.14.1 17.21 c.50.

What wireless card can we use to achieve 100 Mbps actual wireless throughput? . Exports only part of the configuration (for example /ip firewall) d. Exports logs from /log print b. Mark all correct statements about /export (rsc file). /31 c.11b/g wireless card.a.13 --------------------- ---------------------------------------------------------------- 1. chain=forward 2. 2327MHz 3. 5800MHz b. /30 b. What frequencies are available to you? a. chain=srcnat b. 2422MHz e. 5210MHz d. /32 -----------------------------------------------------------------------------------. Exports full configuration of the router c. You have 802. chain=dstnat c.SET . /29 e. Exports scripts from /system script e. 2412MHz c. Exports files could not edited 4. a. Action=redirect is applied in a.

/ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 .55.242.242.11 a d.242.62 b. 15. 802. 15.33-15. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat d.242. Action=redirect allows you to make a.11 a/b/g c.55.55.0.242. 15.32-15. 802. Transparent DNS Cache b.11 b/g b. Choose all valid hosts address range for subnet 15.62/27 a.55.63 7. Enable Local Service d. /ip firewall nat add action=masquerade chain=srcnat b. 802.63 c.62 d.242.31-15. It is possible to add user-defined chains in ip firewall mangle 6.a.0/24 c.55.11 a/b/g/n 5.11 a/n e. Which is correct masquerade rule for 192.55.55. 15.55. Transparent HTTP Proxy 8. /ip firewall nat add action=masquerade chain=srcnat src-address=192.0. 802.33-15.55.0/24 network on the router with outgoing interface=ether1? a.242. Forward DNS to another device IP address c.168.168. 802.242.242.

Mark all features that are compatible with Nstreme a. WDS between a device in ap-bridge mode with a device in station-wds mode d. A d. none b. routing d. S e. additionally to the RouterOS system package. I b. For static routing functionality. dhcp c. Which are necessary sections in /queue simple to set bandwidth limitation? . which is automatically created by RouterOS when user adds a valid address to an active interface? a. What letters appear next to a route. Yes b. Encryption c. D c. Bridging a device in station mode with a device in ap-bridge mode 11. No 12.9. C 10. you will also need the following software package: a. WDS between a device in station-wds mode and a device in station-wds mode b. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized. and it's a driver issue? a. advanced-tools 13.

2. max-limit b.2. dst-address d.2.a. Why is it useful to set a Radio Name on the radio interface? .2.0.1/22 17.com 16. A and B. Select all the answers showing pairs of IP address/mask which would allow IP connections to be established between the two hosts. a. target-address.0. TCP d. dst-address.1. DHCP b. From which of the following locations can you obtain Winbox? a.1/23 and B: 10. Router's webpage b.1. Via the console cable d. are connected to a broadcast LAN. max-limit 14.2. max-limit c.1/22 c. A: 10. UDP 15.2. target-address. target-address.1. A: 10. ICMP e.192/24 and B: 10. What protocol is used for Ping and Trace route? a. Two hosts.2. A: 10.109/26 b.66/25 and B: 10.2.1.129/26 d.2. Files menu in your router c. IP c.1. mikrotik.0/23 and B: 10. A: 10.

To identify a station in Neighbor discovery 18. What kind of users are listed in the Secrets window of the PPP menu? a. wireless users e. IP Gateway c. IP Address and Subnet 21. Byte limit b. To identify a station in a list of connected clients b. pppoe users f. l2tp users c. Router A and B are both running as PPPoE servers on different broadcast domains of your network. hotspot users 19. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? 20. pptp users b. To identify a station in the Access List c. MikroTik RouterOS DHCP client can receive following options a. winbox users d. .a. Rate limit d. The HotSpot feature can be used only on ethernet interfaces. Uptime limit e. You have to use a separate access point if you want to use this feature with wireless.

2 a. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication.1 add disabled=no distance=5 dst-address=0. Route via gateway 2.1. 24 hours b.1.1.1 b. IP bindings c.0. 1 year .0/0 gateway=2.0.22.1. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0. 8 b. Walled-garden d. How long is level 1 (demo) license valid? a. 16 c.2 25. Users b.2. 1 month d. 0 d.0/0 gateway=1.0. Infinite time c. Walled-garden IP 23. Route via gateway 1.2. How many different priorities can be selected for queues in MikroTik RouterOS? a. which menu allows you to do this? a. 1 24.2.0.2.

which action would you specify for the DST-NAT rule? a. redirect . Termasuk username dan password dari /user d. masquerade b. you can't use DST-NAT to achieve this d. which menu allows you to do this? a.SET . To make all DNS requests coming from your network to resolve on your router (regardless of the clients' configuration). Mencakup seluruh konfigurasi router 3. Termasuk file yang tersimpan di /files b. Walled-garden IP 2. Users d. dst-nat c. Bisa diedit c.-----------------------------------------------------------------------------------.14 --------------------- ---------------------------------------------------------------- 1. Manakah fakta yang benar mengenai file backup? a. Walled-garden c. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication. NStreme works only on 40mhz channel width true false 4. IP bindings b.

A: 10.2. Contains the security profiles settings 8. add-to-address-list . tarpit b.2.0.5.2.2. Two hosts.192/24 and B: 10.1. a.2.1.129/26 c. A: 10. Shows a list of Client's MAC Address that are already registered at AP b.0.109/26 b. Possible actions of ip firewall filter are: a.2. bounce d.1/22 6. Handles a list of Client's MAC Address to permit/deny connection to AP d.1.1. true false 7. A and B.2.1. Authenticate Hotspot users c.66/25 and B: 10. Select all the answers showing pairs of IP address/mask which would allow IP connections to be established between the two hosts.1/23 and B: 10. A: 10. are connected to a broadcast LAN.2. A: 10.1/22 d. The first two rules in the forward chain of the filter table are: /ip firewall filter add chain=forward connection-state=established action=accept /ip firewall filter add chain=forward connection-state=invalid action=drop Connection-state=related packets are not filtered by the rules above.0/23 and B: 10. /interface wireless access-list is used for a. tarp c.2.

242.242. PPP Secrets are used for a.e.npk on a RB333 e.242.xx. 15.55.xx.xx.55. a. No/ False 10. it is necessary to reinstall RouterOS or use hardware reset funcion. routeros-powerpc-x.63 b. PPPoE clients f.npk on RB133 d. accept 9. Router users c.242. routeros-mipsle-x. 15. log f. PPtP clients d. L2TP clients b. IPSec clients e.33-15. routeros-x86-x.242.62/27 a.32-15. PPP clients 12. routeros-mipsbe-x. Choose all valid hosts address range for subnet 15.xx.55. In case when router login password is lost.55. Which software version can be installed onto the following RouterBoard types? a. routeros-mipsbe-x.npk on a RB1100 b.npk on a RB133 c.55.npk on a RB433 11.xx. Yes/ True b.63 .

jump e.31-15. drop f. /ip dhcp-server . Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? false true 15.33-15. 15. 15.c. all your clients have to use the same PSK. accept d. OSFP area ID does not need to be unique within the AS.62 13. Which of the following actions are available for '/ip firewall mangle' (select all valid actions) a.242.242.242.55. Router A and B are both running as PPPoE servers on different broadcast domains of your network.242.55. WPA 2 Pre-Shared Key (PSK) is enabled on AP.55. change MSS b. mark packet 16. What configuration is added by /ip hotspot setup command? (select all that apply) a.62 d. true false 17.55. mark connection c. Only Virtual AP could be used to allow clients to connect with a different PSK. false true 14.

WINS Server b. Check all of the DHCP Server Options that are implemented for DHCP-Client and not Custom. Anda akan menyimpan website yang telah dikunjungi ke dalam sebuah log dari web proxy. /system logging add topics=web-proxy. ntp server c. tftp f. a. bridge d. Manakah konfigurasi yang benar ? a.!debug action=memory c. nstreme-dual-slave c.b. /ip hotspot user e. /ip service c. /system logging add topics=web-proxy. ap-bridge b. /ip hotspot walled-garden 18. DNS Server d. subnet mask e. /queue tree d. Mode wireless apakah yang bisa digunakan untuk mengkonfigurasikan WDS? a. gateway 20. station-wds e. station 19. /system logging add topics=web-proxy.debug action=memory b.!debug action=remote .

125.Public IP :202.1/24 Mark the correct configuration on client PC to access to the Internet a.0. IP:192. RED c.2.168.2. PCQ .2.168.148.253/24 gateway:202.2.148.DNS server: 248.115.136.223/24 gateway:248.125. IP:192.1 b. You need to set up an E1(T1) connection with PPP configured.1 .168.1/24 gateway:192. SFQ b.115.168.148. IP:192. It cannot be done in RouterOS c. 248.1 c.Local IP: 192. and apply a limit to each sub-queue a.168. IP:192. You have a router with configuration .0. IP:192.168.2.115/24 gateway: 192.136 e.168.168.2. Mark queue type that uses fairness principle between sub-queues.2/24 gateway:202.Default gateway:202. /system logging add topics=web-proxy.!debug action=disk 21.1 23.115.1.125. Which License level is needed? a.d. allows users to choose classifier for sub-queues.45/24 .45 d.168.137 . Level 5 22.168.168. Level 4 b.168.

1. ip-scan c.1.2.2.66/25 and B: 10.2.1/22 2.109/26 c. 16 25. 1 b. a. neighbors b. Two hosts.SET .1.129/26 b.15 --------------------- ---------------------------------------------------------------- 1. A: 10. are connected to a broadcast LAN. 8 b. Select all the answers showing pairs of IP address/mask which would allow IP connections to be established between the two hosts. A: 10. Which features are removed when advanced-tools package is uninstalled? a. A: 10.2.2.0/23 and B: 10.0.192/24 and B: 10.1/22 d.2.0. False -----------------------------------------------------------------------------------.2.1. A: 10. a.2. LCD support .1/23 and B: 10.2. BFIFO 24. A and B.1. An IP address pool can contain addresses from more than one subnet. netwatch d. True b.d. 0 d. How many different priorities can be selected for queues in MikroTik RouterOS? a.

Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized. Established e. New 5. Choose larger channels (40 MHz instead of 20 MHz) b. Mark possible connection states in the connection tracking table a. No 6. Closed d. Yes b.e.queue "M" parent="GP" limit-at=4M max-limit=6M .- queue "C1″ parent="M" limit-at=1M max-limit=7M priority=4 . Set basic rates to only one data rate like 24 Mbps 4. Rate Flapping can be avoided by a. Change ap-bridge to bridge d. Invalid c. and you suspect it is a driver issue? a. Related b. ping f. Syn f. You have a queue structure as follows: queue "GP" max-limit=10M . Reduce supported rates c. bandwidth-test 3.

2/30 interface=ether2 add address=192. "C3″ 3M. queue "C2″ will get 2M.1.2/30 interface=ether1 add address=2.queue "F" parent="GP" limit-at=5M max-limit=8M . "D1″ 4M d. "D1″ 3M c. "C3″ 2M.- queue "D2″ parent="F" limit-at=2M max-limit=5M priority=2 If queues "C1″ and "D2″ will not require any traffic. queue "C2″ will get 3M.2.- queue "D1″ parent="F" limit-at=3M max-limit=4M priority=5 ..10. "D1″ 4M 7.1. "C3″ 2M.- queue "C3″ parent="M" limit-at=3M max-limit=7M priority=8 .- queue "C2″ parent="M" limit-at=1M max-limit=4M priority=1 . "C3″ 5M. queue "C2″ will get 2M. how the total available traffic is going to be distributed in the worst case scenario? a.1/24 interface=ether3 /ip firewall mangle add action=mark-connection chain=prerouting dst-port=80 new-connection-mark=web_c passthrough=yes protocol=tcp add action=mark-routing chain=prerouting connection-mark=web_c new-routing-mark=web passthrough=no /ip firewall nat add action=masquerade chain=srcnat . "D1″ 5M e. "C3″ 3M. "D1″ 4M b. queue "C2″ will get 3M.168.2. A MikroTik Router has the following configuration /ip address add address=1. queue "C2″ will get 4M.

The Customer will access the Web by ECMP.2. Firewall Filter Chain Input c.2 d. The customer will access the Web using the gateway 1.1.2. Group settings for System users b. The customer will access the Web using the gateway 2. additionally to the RouterOS system package.10.2. gateway 192. Firewall Filter Chain Forward d. dhcp b. Which MikroTik RouterOS version should you use for IEEE 802.10.1 add gateway=2. Which options should be used when you want to prevent access from one specific address to your router web interface? a. For static routing functionality.out-interface=ether3 /ip route add gateway=1. advanced-tools c.2 b.168.168.1.1.1. by using both gateways 1.1 and 2. you will also need the following software package: a. The Customer is unable to access the Web.1.2.2.2/24. none d.11n standard support? . routing 9.2 routing-mark=web What can be said about the Web Access (port 80) by a customer connected at ether3 interface with IP 192.1 8.1 ? a. c. WWW service from IP Services 10.2.1.

A station can connect to AP if they both use different country regulation settings. but the frequency chosen is allowed in both countries 12. How long is level 1 (demo) license valid? a. /system logging add topics=web-proxy.x c.!debug action=disk c. Which is the correct configuration? a. /system logging add topics=web-proxy.debug action=memory b. You can add logging of visited web-pages and other message topics .!debug action=remote d. 1 year b.a. Infinite time c. 1 month 13.x 11. /system logging add topics=web-proxy. Router A and B are both running as PPPoE servers on different broadcast domains of your network. 24 hours d. /system logging add topics=web-proxy.x b. error and warning messages are logged into memory of your RouterOS device. Versions 5. Versions 3. You need to save visited web-pages to memory logs from web-proxy. Versions 4.!debug action=memory 15. By default info. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? True False 14.

address-pool configuration in /ip hotspot and /ip hotspot user profile d. /ip dhcp-server configuration c. Netinstall can be used to a. Install package for different hardware architecture 17. What is the correct action to be specified in the NAT rule to hide a private network when communicating to the outside world? a. arp=enabled on the HotSpot interface b. masquerade c. Reinstall software without losing licence d. Encryption d. but reset a lost admin password b. Mark all features that are compatible with Nstreme a. Install different software version (upgrade or downgrade) c. tarpit b. Keep configuration. allow 19.16. WDS between a device in ap-bridge mode with a device in station-wds mode b. WDS between a device in station-wds mode and a device in station-wds mode 20. Bridging a device in station mode with a device in ap-bridge mode c. Which options are necessary to use the HotSpot Universal Client feature? a. /ip firewall mangle rules 18. passthrough d. PPP Secrets are used for .

L2TP clients b.2.1. Route via gateway 2. PPtP clients e. FQDN Address d. IPSec clients c.2. PPPoE clients d. Set "Shared Users" option at /ip hotspot user profile b. Interface Address c.0.1 23.2.2.1.2 a. Route via gateway 1. Set "only-one=no' at /ip hotspot c. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.a. PPP clients 21. IP Address 22. What is term for the hardware coded address found on an interface? a. Router users f. You would like to allow multiple logins with one user name on a HotSpot server. MAC Address b.0.1.1.1 add disabled=no distance=5 dst-address=0.0/0 gateway=2.0/0 gateway=1.2 b.0. It's not possible .0. How should this be configured? a.

128 bits 2. NAT b.16 --------------------- ---------------------------------------------------------------- Networking Basics 1. What flavor of Network Address Translation can be used to have one IP address allow many users to connect to the global Internet? a. What are the two main types of access control lists (ACLs)? Standard IEEE Extended . How long is an IPv6 address? a.Each packet can have only one routing mark. What can be used as 'target-address' in the simple queue? a. server's address -----------------------------------------------------------------------------------. client's address d.SET . To assign specific traffic to the route - traffic must be identified by routing mark. 64 bits d.d. Dynamic d. Set "Shared Users" option at /ip hotspot 24. PAT 3. 32 bits b. address list name c. client's MAC address b. Static c. true false 25. 128 bytes c.

To back up an IOS.128-190 d.168. wr mem 5. 3 and 4 c. copy tftp flash d. 2 Mbps d.168. NCP b. LCP . 2 and 4 c. copy flash tftp 9.255. 192. copy running-config startup-config c. A b. There is a server connected to the switch running 10Mbps half-duplex as well. what command will you use? a. N 7. 1 and 2 4. B c.168.168. G d. HDLC d.168.188 255. ISDN c.168. backup IOS disk b. 1 and 3 b.168.128-192 8. What protocol does PPP use to identify the Network layer protocol? a. 192. Which WLAN IEEE specification allows up to 54Mbps at 2. copy running backup b. 192. Which of the following is the valid host range for the subnet on which the IP address 192.129-190 b. 1 Mbps c.4GHz? a.129-191 c. What command is used to create a backup configuration? a. 192.168. config mem d.168. You have 10 users plugged into a hub running 10Mbps half-duplex.Specialized a.255. How much bandwidth does each host have to the server? a. 100 kbps b. 10 Mbps 6.192 resides? a.168. copy ios tftp c.

line aux 0 4 c. d. Stops an interface from sending or receiving periodic dynamic updates. Every 30 seconds 17. ARP 12. show access-lists b. c. Every 2 seconds c. Where is a hub specified in the OSI model? a. What does the passive command provide to dynamic routing protocols? a. Which command is used to determine if an IP access list is enabled on a particular interface? a. Which of the following commands will allow you to set your Telnet password on a Cisco router? a. How often are BPDUs sent from a layer 2 device? a. line vty 0 4 d. b. 15. Physical layer c. Every 10 minutes d. Data Link layer d. IP b. Stops an interface from sending periodic dynamic updates but not from receiving updates. TCP b. How many broadcast domains are created when you segment a network with a 12-port . Stops the router from receiving any dynamic updates. UDP d. Which protocol is used to send a destination network unknown message back to originating hosts? a. show interface access-lists 13. ICMP d. line con 0 11. show ip interface d. Never b. Which protocol does DHCP use at the Transport layer? a. TCP c. Stops the router from sending any dynamic updates. line telnet 0 4 b. Session layer b. show interface c. ARP c. Application layer 14. BootP 16.10.

A and B 21. B c. show access-lists c. 5 d. 1 b. Disable console connections. d. 19. NCP b. 5 d. If your router is facilitating a CSU/DSU. A network with more than one exit and entry point. Set the Telnet password. authentication. A b. 12 22. 24. LCP d. A network with only one entry and no exit point. d. show interface 20. show all access-lists b. RouterA(config-if)#bandwidth 64000 c. 2 c. A network that has only one entry and exit point. show ip interface d. A network with more than one exit point. HDLC c. how many root bridges would you have? a. RouterA(config-if)#clock rate 64 .25 23.switch? a. Shut down the router. 2 c. Which class of IP address has the most host addresses available by default? a. What is a stub network? a. b. and multilink? a. which of the following commands do you need to use to provide the router with a 64000bps serial link? a. X. Which router command allows you to view the entire contents of all access lists? a. 12 18. RouterA(config)#bandwidth 64 b. c. 1 b. What does the command routerA(config)#line cons 0 allow you to perform next? a. C d. Set your console password. c. In a network with dozens of switches. b. What PPP protocol provides dynamic addressing.

d. BootP 31. and LMI information of an interface? a. What does a VLAN do? a. Provides multiple collision domains on one switch port. So application developers can change only one layer's protocols at a time. Provides multiple broadcast domains within a single collision domain. d. sh pvc b. c. b. Which one of the following is true regarding VLANs? a. To create a layered model larger than the DoD model. c. 26. d. b. How many collision domains are created when you segment a network with a 12-port switch? a. What is the main reason the OSI model was created? a. 12 29. Which command is used to upgrade an IOS on a Cisco router? a. Acts as the fastest port to all servers. DLCI. VLANs only work if you have a complete Cisco switched internetwork. erase startup . copy tftp run b. You should not have more than 10 switches in the same VTP domain. protocol. show frame-relay pvc d. config net d. 28. Two VLANs are configured by default on all Cisco switches. VTP is used to send VLAN information to switches in a configured VTP domain. d. So Cisco could use the model. copy tftp start c. Breaks up broadcast domains in a layer 2 switch internetwork. 2 c. 1 b. If you wanted to delete the configuration stored in NVRAM. What command will display the line. what would you type? a. Which protocol does Ping use? a. copy tftp flash 32. ARP c. c. TCP b. So different networks could communicate. 5 d. b. ICMP d. 27. RouterA(config-if)#clock rate 64000 25. No off-brand switches are allowed. show run 30. show interface c.

2 only TCP/IP 1. erase nvram c. 1 and 2 b. It uses UDP as the Transport layer protocol. Which of the following services use TCP? DHCP SMTP HTTP TFTP FTP a. Internet d. What layer in the TCP/IP stack is equivalent to the Transport layer of the OSI model? a. 3 and 4 2. 1 only b.1Q ISL a. 1 and 2 c. 1 only d.b. 1 and 2 b. 3 and 4 c. Application b. delete nvram d. a. Which of the following describe the DHCP Discover message? It uses FF:FF:FF:FF:FF:FF as a layer 2 broadcast. Host-to-Host c. Network Access 3. 3 and 4 d. erase running 33. 3 and 5 c. 2 and 4 d. What protocols are used to configure trunking on a switch? VLAN Trunking Protocol VLAN 802. It uses TCP as the Transport layer protocol. 4 only . 1. 2. It does not use a layer 2 destination address. 1.

subnet mask. Class A b.0.172.15. including IP address.0. Class C . Internet d. DHCP d. ARP 5. 2 and 4 d. All of the above 9. 1.1 b. 12. Which class of IP address provides a maximum of only 254 host addresses per network ID? a. Host-to-Host c. SMTP b. default gateway. 1. Which of the following allows a router to respond to an ARP request that is intended for a remote host? a. Application b. Reverse ARP (RARP) c. You want to implement a mechanism that automates the IP configuration. Network Access 8.36 d. 3 and 6 b.43 6.4. Gateway DP b. Which of the following is private IP address? a. Inverse ARP (IARP) 7. Proxy ARP d. 192. Which protocol will you use to accomplish this? a. SNMP c.19. Class B b.168.39 c. and DNS information.24. 168. 2 and 4 c.14. 172. Which of the following services use UDP? DHCP SMTP SNMP FTP HTTP TFTP a. The DoD model (also called the TCP/IP stack) has four layers. Which layer of the DoD model is equivalent to the Network layer of the OSI model? a.

d. 3. 155. Which statements are true regarding ICMP packets? They acknowledge receipt of a TCP segment. Transport 11. 0xB9 12. Application b. IP b. Presentation c. They guarantee datagram delivery. a. 159. 0x9F d. 3 and 4 13. UDP 15.d 2. Which layer 4 protocol is used for a Telnet connection? a. 2 and 3 c. TCP/IP d. 1. 3 and 4 . 0x9B b. Which statements are true regarding ICMP packets? ICMP guarantees datagram delivery. 2. They can provide hosts with information about network problems. Session d. . 4 and 5 14. Which of the following are layers in the TCP/IP model? Application Session Transport Internet Data Link Physical a. which is the highest layer you are using to transmit data? a. 3 and 5 d. 3 and 4 c. 157. They are encapsulated within IP datagrams. 1 and 2 b. 0x9D c. TCP c. Which of the following is the decimal and hexadecimal equivalents of the binary number 10011101? a. 185. 1 only b. Class D 10. If you use either Telnet or FTP.

ICMP can provide hosts with information about network problems. SMTP c. 3. RARP b. 110xxxxx . Which of the following protocols uses both TCP and UDP? a. All of the above 16. ICMP is encapsulated within UDP datagrams. 10xxxxxx d. 4 and 5 d. a. What is the address range of a Class B network address in binary? a. 1 and 4 b. ICMP is encapsulated within IP datagrams. 2 and 3 c. FTP b. 0xxxxxxx c. IP d. All of the above 17. 1 only b. ICMP 18. Which of the following are TCP/IP protocols used at the Application layer of the OSI model? IP TCP Telnet FTP TFTP a. 1 and 3 b. Telnet d. 3 and 5 c. 01xxxxxx b. What protocol is used to find the hardware address of a local device? a. ARP c. DNS 19. 1.

# data[].attributes.attachment_link.description
1. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for theRouterBOARD 750 for a successful connection to the device?a.

# data[].attributes.attachment_link.readable_text
1. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device?
a. 192.168.100.70/255.255.255.252
b. 192.168.100.69/255.255.255.252
c. 192.168.100.71/255.255.255.252
d. 192.168.100.68/255.255.255.252

2. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by using an address subnet of:
a. /31

3. Which computers would be able to communicate directly (without any routers involved)
a. 192.168.17.15/29 and 192.168.17.20/28
b. 192.168.0.5/26 and 192.168.0.100
c. 10.5.5.1/24 and 10.5.5.100/25
d. 10.10.0.17/22 and 10.10.1.30/23

4. How many IP addresses can one find in the header of an IP packet?
a. 1
b. 3
c. 2
d. 4

5. The network address is
a. The first usable address of the subnet
b. The last address of the subnet
c. The first address of the subnet

6. What is term for the hardware coded address found on an interface?
a. IP Address
b. MAC Address
c. FQDN Address
d. Interface Address

7. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
a. 512
b. 510
c. 508
d. 254

8. Is ARP used in the IPv6 protocol ?
False
True

9. Which of the following protocols / port s are used for SNMP. (Simple Network Management Protocol)
a. TCP 162
b. UDP 162
c. UDP 161
d. TCP 25
e. TCP 123
f. TCP 161

10. If ARP=reply-only is configured on an interface, what will this interface do
a. Accept all IP/MAC combinations listed in /ip arp as static entries
b. Accept all IP addresses listed in /ip arp as static entries
c. Add new MAC addresses in /ip arp list
d. Accept all MAC-addresses listed in /ip arp as static entries
e. Add new IP addresses in /ip arp list

11. Select which of the following are 'Public IP addresses':
a. 192.168.0.1
b. 172.168.254.2
c. 172.28.73.21
d. 10.110.50.37
e. 11.63.72.21

12. Which of the following IP addresses are publicly routable?
a. 127.34.155.3
b. 192.168.1.4
c. 172.16.13.23
d. 11.3.10.4

13. If ARP=reply-only is enabled on one router interface, router can add dynamic ARP entries for the particular interface.
False
True

14. The basic unit of a physical network (OSI Layer 1) is the:
a. Header
b. Byte
c. Bit
d. Frame

15. Which ones of the following are valid IP addresses?
a. 192.168.13.255
b. 10.10.14.0
c. 192.168.256.1
d. 1.27.14.254

16. How many usable IP addresses are there in a 20-bit subnet?
a. 2046
b. 2047
c. 4094
d. 4096
e. 2048

17. Which of the following is NOT a valid MAC Address?
a. 13:16:86:53:89:43
b. 80:GF:AA:67:13:5D
c. 88:0C:00:99:5F:EF
d. EA:BA:AA:EE:FF:CB
e. 95:B5:DD:EE:78:8A

1. Action=redirect is applied in
a. chain=srcnat
b. chain=dstnat
c. chain=forward

2. You have 802.11b/g wireless card. What frequencies are available to you?
a. 5800MHz
b. 2412MHz
c. 5210MHz
d. 2422MHz
e. 2327MHz

3. Mark all correct statements about /export (rsc file).
a. Exports logs from /log print
b. Exports full configuration of the router
c. Exports only part of the configuration (for example /ip firewall)
d. Exports scripts from /system script
e. Exports files could not edited

4. What wireless card can we use to achieve 100 Mbps actual wireless throughput?
a. 802.11 b/g
b. 802.11 a/b/g
c. 802.11 a
d. 802.11 a/n
e. 802.11 a/b/g/n

5. It is possible to add user-defined chains in ip firewall mangle
True
False

6. Choose all valid hosts address range for subnet 15.242.55.62/27
a. 15.242.55.31-15.242.55.62
b. 15.242.55.32-15.242.55.63
c. 15.242.55.33-15.242.55.62
d. 15.242.55.33-15.242.55.63

7. Action=redirect allows you to make
a. Transparent DNS Cache
b. Forward DNS to another device IP address
c. Enable Local Service
d. Transparent HTTP Proxy

8. Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1?
a. /ip firewall nat add action=masquerade chain=srcnat
b. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
c. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
d. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1

9. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface?
a. I

d. S
e. C

10. Mark all features that are compatible with Nstreme
a. WDS between a device in station-wds mode and a device in station-wds mode
b. Encryption
c. WDS between a device in ap-bridge mode with a device in station-wds mode
d. Bridging a device in station mode with a device in ap-bridge mode

11. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and it's a driver issue?
a. Yes
b. No

12. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. none
b. dhcp
c. routing
d. advanced-tools

13. Which are necessary sections in /queue simple to set bandwidth limitation?
a. target-address, max-limit
b. target-address, dst-address, max-limit
c. target-address, dst-address
d. max-limit

14. What protocol is used for Ping and Trace route?
a. DHCP
b. IP
c. TCP
d. ICMP - ping
e. UDP - trace route

15. From which of the following locations can you obtain Winbox?
a. Router's webpage
b. Files menu in your router
c. Via the console cable
d. mikrotik.com

16. Two hosts, A and B, are connected to a broadcast LAN. Select all the answers showing pairs of IP address/mask which would allow IP connections to be established between the two hosts.
a. A: 10.1.2.66/25 and B: 10.1.2.109/26
b. A: 10.2.2.1/23 and B: 10.2.0.1/22
c. A: 10.1.2.192/24 and B: 10.1.2.129/26
d. A: 10.2.1.0/23 and B: 10.2.0.1/22

17. Why is it useful to set a Radio Name on the radio interface?
a. To identify a station in a list of connected clients
b. To identify a station in the Access List
c. To identify a station in Neighbor discovery

18. What kind of users are listed in the Secrets window of the PPP menu?
a. pptp users
b. l2tp users
c. winbox users
d. wireless users
e. pppoe users
f. hotspot users

19. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ?
Yes
No

20. MikroTik RouterOS DHCP client can receive following options
a. Byte limit
b. IP Gateway
c. Rate limit
d. Uptime limit
e. IP Address and Subnet

1. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this?
a. Users
b. IP bindings
c. Walled-garden
d. Walled-garden IP

2. How many different priorities can be selected for queues in MikroTik RouterOS?
a. 8
b. 16
c. 0
d. 1

3. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1 add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
a. Route via gateway 1.1.1.1
b. Route via gateway 2.2.2.2

4. How long is level 1 (demo) license valid?
a. 24 hours
b. Infinite time
c. 1 month
d. 1 year

5. Is ARP used in the IPv6 protocol ?
True
False

6. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by using an address subnet of:

d. /31

7. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway. When the PC Ethernet card failed, the user change it with a new card and set the same IP for it. What else should be done? [multiple answers]

a. Old static ARP entry on gateway has to be updated for the new card
b. Nothing - it will work as before
c. MAC-address of the new card has to be changed to MAC address of old card
d. Another IP has to be added for Internet access

8. How many usable IP addresses are there in a 20-bit subnet?
a. 2047
b. 4096
c. 2048
d. 2046
e. 4094

9. What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ?
a. 60
b. 30
c. 1
d. 64

10. The network address is
a. The first usable address of the subnet
b. The last address of the subnet
c. The first address of the subnet

11. Which ones of the following are valid IP addresses? [multiple answers]

a. 192.168.13.255
b. 1.27.14.254
c. 10.10.14.0
d. 192.168.256.1

12. Which of the following is NOT a valid MAC Address?
a. 95:B5:DD:EE:78:8A
b. 13:16:86:53:89:43
c. 80:GF:AA:67:13:5D
d. 88:0C:00:99:5F:EF
e. EA:BA:AA:EE:FF:CB

13. If ARP=reply-only is configured on an interface, what will this interface do
a. Add new IP addresses in /ip arp list
b. Accept all IP/MAC combinations listed in /ip arp as static entries
c. Accept all MAC-addresses listed in /ip arp as static entries
d. Add new MAC addresses in /ip arp list
e. Accept all IP addresses listed in /ip arp as static entries

14. What is term for the hardware coded address found on an interface?
a. IP Address
b. Interface Address
c. MAC Address
d. FQDN Address

15. Which of the following IP addresses are publicly routable?
a. 127.34.155.3
b. 192.168.1.4
c. 172.16.13.23
d. 11.3.10.4

16. What protocol does ping use?
a. UDP
b. TCP
c. ARP
d. ICMP

17. MAC layer by OSI model is also known as
a. Layer 3
b. Layer 7
c. Layer 2
d. Layer 6
e. Layer 1

18. How many layers does Open Systems Interconnection model have?
a. 12
b. 6
c. 9
d. 5
e. 7

1. You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24
Mark the correct configuration on client PC to access to the Internet
a. IP:192.168.0.1/24 gateway:192.168.2.1
b. IP:192.168.2.253/24 gateway:202.168.0.1
c. IP:192.168.1.223/24 gateway:248.115.148.136
d. IP:192.168.2.115/24 gateway: 192.168.2.1
e. IP:192.168.2.2/24 gateway:202.168.125.45

2. On the advanced menu of the wireless setup there is a parameter called "Area", it works directly with:
a. Connect List
b. Access List
c. None of these
d. Security Profile

3. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication
a. ip hotspot ip-binding
b. ip hotspot profile
c. ip hotspot walled-garden
d. ip hotspot walled-garden ip

4. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.
a. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address
b. kind=pcq pcq-limit=256000 pcq-classifier=dst-address
c. kind=pcq pcq-limit=5000000 pcq-classifier=src-address
d. kind=pcq pcq-limit=256000 pcq-classifier=src-address
e. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address

5. Which of the following is true for connection tracking
a. Enabling connection tracking reduces CPU usage in RouterOS
b. Connection tracking must be enabled for firewall to be effective
c. Connection tracking must be enable for NAT'ed network
d. Disable connection tracking for mangle to work

6. Which of these are possible solutions to bridge two networks over a wireless link:
a. Both devices in AP mode and enable WDS mode
b. One device in AP mode, another one in station-pseudobridge-clone
c. One device in AP mode, another one in station-pseudobridge
d. One device in AP mode, another one in station

7. When backing up your router by using the 'Export' command, the following happens:
a. Winbox usernames and passwords are backed up
b. The Export file can be edited with a standard text editor after its creation
c. You are requested to give the export file a name

8. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration.
True
False

9. It is impossible to disable user "admin" at the menu "/user"
True
False

10. If a packet comes to a router and starts a new, previously unseen connection, which connection state would be applied to it?
a. no connection state would be applied to such packet
b. new
c. unknown
d. invalid
e. established

11. We have two radio cards in a point-to-point link with settings:
Card Nr 1.: mode=ap-bridge ssid="office"
frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa
Card Nr 2.: mode=station ssid="office"
frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2
Is Card Nr2. able to connect to Card Nr 1.?
a. Yes, if Nstreme is enabled or disabled on both
b. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on both
c. No, because of the different frequencies
d. No, because of the different security profiles

12. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this?
a. Walled-garden IP
b. Walled-garden
c. Users
d. IP bindings

13. Consider the following network diagram. In R1, you have the following configuration:
/ip route
add dst-address=192.168.1.0/24 gateway=192.168.99.2
/ip firewall nat
add chain=srcnat out-interface=Ether1 action=masquerade

On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?
a. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
b. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
c. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
d. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.10 action=drop

14. What is the default protocol/port of (secure) winbox?
a. UDP/5678
b. TCP/8291
c. TCP/22
d. TCP/8080

15. Mark the queue types that are available in RouterOS
a. SFQ - Stochastic Fairness Queuing
b. DRR - Deficit Round Robin
c. FIFO - First In First Out (for Bytes or for Packets)
d. LIFO - Last In First Out
e. PCQ - Per Connection Queuing
f. RED - Random Early Detect (or Drop)

16. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device?
a. 192.168.100.70/255.255.255.252
b. 192.168.100.69/255.255.255.252
c. 192.168.100.71/255.255.255.252
d. 192.168.100.68/255.255.255.252

17. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
a. 512
b. 510
c. 508
d. 254

18. Is ARP used in the IPv6 protocol ?
True
False

19. Which of the following protocols / port s are used for SNMP. (Simple Network Managemnt Protocol)
a. TCP 162
b. UDP 162
c. UDP 161
d. TCP 25
e. TCP 123
f. TCP 161

20. Select which of the following are 'Public IP addresses':
a. 192.168.0.1
b. 172.168.254.2
c. 172.28.73.21
d. 10.110.50.37
e. 11.63.72.21

21. If ARP=reply-only is enabled on one router interface, router can add dynamic ARP entries for the particular interface.
False
True

22. MAC layer by OSI model is also known as
a. Layer 3
b. Layer 7
c. Layer 1
d. Layer 2
e. Layer 6

23. Select valid MAC-address
a. G2:60:CF:21:99:H0
b. 00:00:5E:80:EE:B0
c. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201
d. 192.168.0.0/16

24. Which computers would be able to communicate directly (without any routers involved)
a. 192.168.17.15/29 and 192.168.17.20/28
b. 192.168.0.5/26 and 192.168.0.100
c. 10.5.5.1/24 and 10.5.5.100/25
d. 10.10.0.17/22 and 10.10.1.30/2

1. What kind of users are listed in the Secrets window of the PPP menu?

2. What configuration is added by /ip hotspot setup command? (select all that apply)
a. /ip service
b. /ip hotspot user
c. /ip hotspot walled-garden
d. /ip dhcp-server
e. /queue tree

3. Using wireless connect-list it's possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries.

4. If ARP=reply-only is configured on an interface, what will this interface do
a. Add new MAC addresses in /ip arp list
b. Accept all MAC-addresses listed in /ip arp as static entries
c. Add new IP addresses in /ip arp list
d. Accept all IP addresses listed in /ip arp as static entries
e. Accept all IP/MAC combinations listed in /ip arp as static entries

5. Router A and B are both running as PPPoE servers on different broadcast domains of your network. It is possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers.
a. False
b. True

6. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?

10. Which route will be used to reach host 192.168.1.55?

/ip route
add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=1.1.1.1
add disabled=no distance=1 dst-address=192.168.1.0/25 gateway=2.2.2.2
add disabled=no distance=1 dst-address=192.168.0.0/16 gateway=3.3.3.3

a. Route via gateway 1.1.1.1

11. In which situations can Netinstall NOT be used to install a RouterBOARD?
a. The router does not have an operating system
b. The router is connected only to a wireless network
c. You do not know the password of the router
d. The router is connected only to a secondary Ethernet port

12. To use masquerade, you need to specify
a. action=accept, out-interface, chain=src-nat
b. action=masquerade, out-interface, chain=src-nat
c. action=masquerade, in-interface, chain=src-nat
d. action=masquerade, out-interface, chain=dst-nat

13. Please select valid scan-list values in interface wireless configuration:
a. 5560,5620-5700
b. 5640~5680
c. default,5560,5600,5660-5700
d. 5540,5560,5620+5700

14. When adding a static route, you must always ensure that you add both the gateway and the interface.
False
True

18. Is it possible for a client to get an IP address but no gateway after a successful DHCP request?
a. False
b. True

19. Firewall configuration is the following:
1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP
2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY
3) /ip firewall filter add chain=input protocol=icmp action=drop
4) /ip firewall filter add chain=ICMP protocol=icmp action=log log-prefix=JUMP-ICMP-DENY
5) /ip firewall filter add chain=ICMP protocol=icmp action=drop

Client sends "ping" to router. What will the router do?

a. Router will drop the packet at ICMP (jump) chain drop rule (5th rule)
b. Router will log it with prefix: ICMP-DENY
c. Router will drop the packet at the Input drop rule (3rd rule)
d. Router will log it with prefix: JUMP-ICMP-DENY

20. /ip firewall nat
add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to-address=192.168.1.2 to-ports=81

The command shown above:
a. Adds IP address 192.168.1.2 to the interface ether1
b. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.168.1.2
c. Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1
d. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192.168.1.2

21. While troubleshooting a network from inside the network, you discover that you can ping the gateway reliably, but you cannot browse the Internet. Skype, however, works flawlessly. What is the most likely issue?
a. DNS is not available
b. The computer did not get an IP address
c. Network card and/or cable is not working
d. Masquerading rule is not applied

22. What is marked by connection-state=established matcher?
a. Packet begins a new TCP connection
b. Packet does not correspond to any known connection
c. Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection
d. Packet is related to, but not part of an existing connection

24. You are planning a migration from a wireless link using 802.11a on 5GHz (with no nstreme) to one using Nv2 on 5GHz. When you change the AP from 802.11a to Nv2, you do not wish a client to disconnect for more than a few seconds during the upgrade.

Assuming the client is capable of operating with Nv2 (correct hardware, correct encryption key and ROS version), which setting(s) for 'wireless-protocol' should be enabled on the client so that the client can auto-detect the protocol used by the AP and still make connection with 802.11a or Nv2 : (select all that apply)
a. Nv2
b. nv2-nstreme-802.11
c. any
d. unspecified

25. What does this simple queue do (check the image)?
a. Queue limits host 192.168.1.10 upload data rate to one megabit per second.
b. Queue guarantees download data rate of one megabit per second for host 192.168.1.10
c. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10
d. Queue limits host 192.168.1.10 download data rate to one megabit per second.

------------------------------------------------------------------------------------- SET - 6 -------------------------------------------------------------------------------------

1. What can you do with Netinstall?
a. Reset password in RouterOS
b. Install Linux
c. Add configuration to RouterOS
d. Reinstall RouterOS

2. Consider the attached diagram:
In order for Router 1 to see all of the networks the following commands could be used (choose all answers that could work)

a. /routing add dst-address=0.0.0.0/0 gateway=10.10.0.2
b. /ip route add dst-address=0.0.0.0/0 gateway=10.10.0.2
c. /ip route add dst-address=172.16.0.0/24 gateway=10.10.0.2, /ip route add dst-address=172.32.0.0/24 gateway=10.10.0.2
d. /ip route add dst-address=172.16.0.0/24 gateway=10.10.0.2, /ip route add dst-address=172.32.0.0/24 gateway=10.50.0.2

3. Configuring HotSpot is possible on MikroTikRouterOS only with a wireless interface.

4. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication

a. ip hotspot ip-binding
b. ip hotspot profile
c. ip hotspot walled-garden ip
d. ip hotspot walled-garden

5. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. none
b. routing
c. advanced-tools
d. dhcp

6. Netinstall can be used to
a. Install different software version (upgrade or downgrade)
b. Keep configuration, but reset a lost admin password
c. Reinstall software without losing licence
d. Install package for different hardware architecture

7. In which order are the entries in Access List and Connect List processed?
a. By interface name
b. In sequence order
c. By Signal Strength Range
d. In a random order

8. In Winbox, Hide Passwords unchecked shows passwords for the following
a. RouterOS user
b. Hotspot User
c. RADIUS shared secret
d. PPP secrets

9. Which options should be used when you want to prevent access from one specific address to your router web interface?
a. Firewall Filter Chain Forward
b. Firewall Filter Chain Input
c. Group settings for System users
d. WWW service from IP Services

10. Which of the following would prevent unknown clients from connecting to your AP? Choose the BEST answer.
a. Check the "Do not permit unknown client" box in the wireless configuration
b. Uncheck "Default Authenticate" in the wireless card configuration, and add each known client's MAC address to your access-list configuration ensuring that you enable "authenticate" in the entry
c. Add each known client's MAC address to your access-list configuration is the only step needed
d. Uncheck "Default Authenticate" in the wireless card configuration, and add each known client's MAC address to your connect-list configuration
e. Configure the radius server under "/radius"

11. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?
a. Yes
b. No

12. Mark the queue types that are available in RouterOS
a. SFQ - Stochastic Fairness Queuing
b. RED - Random Early Detect (or Drop)
c. FIFO - First In First Out (for Bytes or for Packets)
d. DRR - Deficit Round Robin
e. LIFO - Last In First Out
f. PCQ - Per Connection Queuing

13. Check the allowed input formats for wireless scan-list.
a. 5500 5700
b. 5500-5700
c. 5500,5700
d. 5500 - 5700
e. 5500/5700

14. Choose all valid hosts address range for subnet 15.242.55.62/27
a. 15.242.55.31-15.242.55.62
b. 15.242.55.33-15.242.55.63
c. 15.242.55.33-15.242.55.62
d. 15.242.55.32-15.242.55.63

15. After putting this rule: /ipfirewall add chain=input action=drop, you will still be able to access the Router using the mac-address.
Yes

16. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration.

17. What is necessary for PPPoE client configuration?
a. ip firewall nat masquerade rule
b. Interface (on which PPPoE client is going to work)
c. Static IP address on PPPoE client interface

18. In order to use dynamic keys in your security profile for an AP, you MUST set up the dhcp server to provide the dynamic keys.

19. You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24

Mark the correct configuration on client PC to access to the Internet
a. IP:192.168.0.1/24 gateway:192.168.2.1
b. IP:192.168.2.2/24 gateway:202.168.125.45
c. IP:192.168.1.223/24 gateway:248.115.148.136
d. IP:192.168.2.115/24 gateway: 192.168.2.1
e. IP:192.168.2.253/24 gateway:202.168.0.1

20. Router OS can set vlan-id value from - to :
a. 1-2049
b. 1-4096
c. 1-4095
d. 1-2048

21. Collisions are possible in full-duplex Ethernet networks

22. Where can you monitor (see addresses and ports) real-time connections which are processed by the router?
a. Queue Tree
b. Tool Torch
c. Firewall Counters
d. Firewall Connection Tracking

23. Action=redirect applies to
a. SRC-NAT rules
b. DST-NAT rules
c. Firewall Filter rules
d. Route rules

24. What does this simple queue do (check the image)?
a. Queue limits host 192.168.1.10 download data rate to one megabit per second.
b. Queue guarantees download data rate of one megabit per second for host 192.168.1.10
c. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10
d. Queue limits host 192.168.1.10 upload data rate to one megabit per second.

25. Is it possible that the same IP address is included in multiple address lists and still be used by these multiple address lists?

a. Destination NAT rule is required to utilize transparent proxy facility
b. To deny access to a specific website, caching should be enabled
c. Controls domains or servers which are allowed to cache by Proxy
d. Can deny access to a specific domains or servers, but not specific web pages

1. Choose correct statements for MikroTik proxy.
a. Destination NAT rule is required to utilize transparent proxy facility
b. To deny access to a specific website, caching should be enabled
c. Controls domains or servers which are allowed to cache by Proxy
d. Can deny access to a specific domains or servers, but not specific web pages

2. Collisions are possible in full-duplex Ethernet networks

3. Which of the following is NOT a valid MAC Address?
a. 13:16:86:53:89:43
b. 80:GF:AA:67:13:5D
c. 88:0C:00:99:5F:EF
d. EA:BA:AA:EE:FF:CB
e. 95:B5:DD:EE:78:8A

4. The default value of 'target-scope' for a static route is:
a. 30
b. 1
c. 10
d. 255

5. Which firewall chain would be used to block a client's MSN traffic on a router?
a. output
b. static
c. input
d. forward

6. Please select valid scan-list values in interface wireless configuration:
a. 5540,5560,5620+5700
b. 5560,5620-5700
c. 5640~5680
d. default,5560,5600,5660-5700

7. You want to limit bandwidth for your HotSpot users. HotSpot can create dynamic queues on user login to do the speed limitations.
a. Yes/ True
b. No/ False

8. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. dhcp
b. none
c. advanced-tools
d. routing

9. You start a scan for wireless networks on you access point. What will happen ?
a. All connected clients will disconnect
b. You'll see all connected clients
c. You'll see available frequencies

10. What kind of users are listed in the "/user" menu?
a. pptp users
b. wireless users
c. hotspot users
d. router users

11. Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1?
a. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
b. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
c. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
d. /ip firewall nat add action=masquerade chain=srcnat

12. Which firewall chain should you use to filter ICMP packets from the router itself?
a. input
b. forward
c. postrouting
d. output

13. Which software version can be installed onto the following RouterBoard types?
a. routeros-mipsbe-x.xx.npk on a RB433
b. routeros-powerpc-x.xx.npk on a RB333
c. routeros-mipsle-x.xx.npk on RB133
d. routeros-x86-x.xx.npk on a RB1100
e. routeros-mipsbe-x.xx.npk on a RB133

14. The highest queue priority is
a. 16
b. 8
c. 256
d. 1

15. Firewall configuration is the following:
1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP
2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY
3) /ip firewall filter add chain=input protocol=icmp action=drop
4) /ip firewall filter add chain=ICMP protocol=icmp action=log log-prefix=JUMP-ICMP-DENY
5) /ip firewall filter add chain=ICMP protocol=icmp action=drop

Client sends "ping" to router. What will the router do?
a. Router will drop the packet at the Input drop rule (3rd rule)
b. Router will log it with prefix: JUMP-ICMP-DENY
c. Router will drop the packet at ICMP (jump) chain drop rule (5th rule)
d. Router will log it with prefix: ICMP-DENY

16. MikroTik proxy features are:
a. POP3 caching
b. DNS name filtering
c. SMTP caching
d. HTTP caching
e. FTP caching

17. What does this simple queue do (check the image)?
a. Queue limits host 192.168.1.10 download data rate to one megabit per second.
b. Queue limits host 192.168.1.10 upload data rate to one megabit per second.
c. Queue guarantees download data rate of one megabit per second for host 192.16SID="WAN1"mode="ap-bridge" and a VirtualAP with SSID="VAP1" on the router. Is it possibl8.1.10
d. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10

18. You have a wireless interface with Se to use nstreme protocol?
a. Yes, but Nstreme will be used for all SSID assigned for that physical interface
b. Yes, but Nstreme can be used only for SSID=WLAN1.
c. No, Nstreme can not be used on wireless interface if a VirtualAP is on it.
d. Yes, but Nstreme can be used only for SSID=VAP1.

19. /store allows you to save to external disk
a. User-Manager data
b. dude data
c. web-proxy data
d. system configuration

20. /ip route configuration on router,

/ip route add gateway=192.168.0.1
/ip route add dst-address=192.168.1.0/24 gateway=192.168.0.2
/ip route add dst-address=192.168.2.0/24 gateway=192.168.0.3
/ip route add dst-address=192.168.3.0/26 gateway=192.168.0.4

Router needs to send packets to 192.168.3.240. Which gateway will be used?

a. 192.168.0.2
b. 192.168.0.1
c. 192.168.0.3
d. 192.168.0.4

21. What is the meaning of letter "R" on an active session in the menu PPP Active Connections?
a. Running
b. Radius
c. Remote

22. A station can connect to AP if they both use different country regulation settings, but the frequency chosen is allowed in both countries

23. Hotspot ip-binding is used to allow access to remote host specifying the IP address of the remote host.

24. Router has Wireless and Ethernet client interfaces, all client interfaces are bridged.

To create a DHCP service for all clients you must configure DHCP server on
a. every bridge port
b. only on bridge interface
c. Ethernet and wireless interfaces
d. DHCP service is not possible in this setup

25. EoiP is:
a. MikroTik proprietary tunnel protocol
b. Layer-3 tunnel
c. Layer-2 tunnel, that can be bridged

------------------------------------------------------------------------------------- SET - 8 -------------------------------------------------------------------------------------

1. log messages are stored on disk by default

2. Router OS can set vlan-id value from - to :
a. 1-2048
b. 1-2049
c. 1-4096
d. 1-4095

3. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?
a. Yes
b. No

4. Which of the following is true for connection tracking
a. Enabling connection tracking reduces CPU usage in RouterOS
b. Disable connection tracking for mangle to work
c. Connection tracking must be enable for NAT'ed network
d. Connection tracking must be enabled for firewall to be effective

5. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface?
a. I
b. S

6. Which is the default port of IP-Winbox?
a. TCP 8192
b. UDP 8291
c. TCP 8291
d. TCP 80

7. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.
a. kind=pcqpcq-limit=5000000 pcq-classifier=dst-address
b. kind=pcqpcq-limit=256000 pcq-classifier=src-address
c. kind=pcqpcq-limit=256000 pcq-classifier=dst-address
d. kind=pcqpcq-limit=5000000 pcq-classifier=src-address
e. kind=pcqpcq-limit=1256000 pcq-classifier=dst-address

8. To limit wireless access for your HotSpot users
a. Create MAC Address restriction on PPP user login
b. Create IP Address restriction in the Wireless Access List
c. Create MAC Address restriction on HotSpot user login
d. Create MAC Address restriction in the Wireless Access List

9. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. routing
b. advanced-tools
c. none
d. dhcp

10. To avoid looping on this network, you need to:
a. Enable RSTP on AP1 and AP3
b. Enable RSTP on AP1
c. Enable RSTP on AP1, AP2 and AP3

11. To make the masquerading of the network 192.168.0.0/24, configured on the interface Ether1, you should add rule
a. /ip firewall nat add chain=dstnat in-interface=ether1 src-address=192.168.0.0/24 action=masquerade
b. /ip firewall nat add chain=srcnatsrc-address=192.168.0.0/24 action=masquerade
c. /ip firewall nat add chain=dstnat out-interface=ether1 src-address=192.168.0.0/24 action=masquerade
d. /ip firewall nat add chain=srcnat out-interface=ether1 src-address=192.168.0.0/24 action=masquerade

12. On the advanced menu of the wireless setup there is a parameter called "Area", it works directly with:
a. None of these
b. Connect List
c. Access List
d. Security Profile

13. The basic unit of a physical network (OSI Layer 1) is the:
a. Header
b. Bit
c. Byte
d. Frame

14. It is impossible to disable user "admin" at the menu "/user"

15.HotSpot is required on the interfaces ether2, ether3, wlan1 (in ap-bridge mode).
These interfaces are bridged in the bridge1 interface.
Which interface should the HotSpot server be configured on?
a. On ether2 interface
b. On ether3 interface
c. On wlan1 interface
d. On bridge1 interface

16. The highest queue priority is
a. 256
b. 1
c. 16
d. 8

17. What is necessary for PPPoE client configuration?
a. Static IP address on PPPoE client interface
b. ip firewall nat masquerade rule
c. Interface (on which PPPoE client is going to work)

18. To be able to do NAT the connection tracking does not need to be enabled.
a. True
b. False

19. Check the allowed input formats for wireless scan-list.
a. 5500,5700
b. 5500-5700
c. 5500/5700
d. 5500 - 5700
e. 5500 5700

20. To connect your MikroTik router to a wireless access point, you have to:
a. Use the same Radio Name
b. Use the same SSID as on accesspoint
c. Use the same Band (5 GHz, 2.4 GHz, ...)

21. Which default route will be active?
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
a. Route via gateway 1.1.1.1
b. Route via gateway 2.2.2.2

22. An IP address pool can contain addresses from more than one subnet.
a. True
b. False

23. Is it possible to use the serial port of MikroTik to communicate with an external device connected by null-modem cable?
a. Yes, if port is not being used
b. Yes, when other is a MikroTik router.
c. Yes, it is always possible by /system serial-terminal command.

24. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply)

a. A route between the NAT Router and the webserver must exist
b. LAN address of the webserver should be routable on the internet
c. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver
d. Connection Tracking must be enabled on NAT router
e. Public IP address of the webserver must be installed on the NAT Router

25. Collisions are possible in full-duplex Ethernet networks

------------------------------------------------------------------------------------- SET - 9 -------------------------------------------------------------------------------------

1. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time?
a. Yes/ True
b. No/ False

2. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. dhcp
b. none
c. advanced-tools
d. routing

3. What could be monitored by Torch?
a. Dst. Address
b. Dst. Port
c. None of the above is correct
d. Src. Address
e. Vlan ID
f. Protocol

4. The highest queue priority is
a. 16
b. 8
c. 1
d. 256

5. Wireless clients (mode=station) will work properly if bridged to ethernet

6. Which of the following Routes statuses are possible?
a. S = Static
b. C = Connected
c. D = Drop
d. A = Active

7. You have to connect to a RouterBOARD without any previous configuration. Select all possibilities to connect and do some basic configuration
a. Telnet
b. Attach monitor/keyboard
c. MAC-Winbox
d. Serial Connection

8. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device?
a. 192.168.100.70/255.255.255.252
b. 192.168.100.68/255.255.255.252
c. 192.168.100.69/255.255.255.252
d. 192.168.100.71/255.255.255.252

9. Netinstall can be used to
a. Install package for different hardware architecture
b. Reinstall software without losing licence
c. Keep configuration, but reset a lost admin password
d. Install different software version (upgrade or downgrade)

10. Consider the following network diagram. In R1, you have the following configuration:
/ip route
add dst-address=192.168.1.0/24 gateway=192.168.99.2

/ip firewall nat
add chain=srcnat out-interface=Ether1 action=masquerade

On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?
a. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
b. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
c. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.10 action=drop
d. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop

11. /interface wireless access-list is used for
a. Contains the security profiles settings
b. Handles a list of Client's MAC Address to permit/deny connection to AP
c. Shows a list of Client's MAC Address that are already registered at AP
d. Authenticate Hotspot users

12. To make the masquerading of the network 192.168.0.0/24, configured on the interface Ether1, you should add rule
a. /ip firewall nat add chain=srcnat out-interface=ether1 src-address=192.168.0.0/24 action=masquerade
b. /ip firewall nat add chain=dstnat in-interface=ether1 src-address=192.168.0.0/24 action=masquerade
c. /ip firewall nat add chain=dstnat out-interface=ether1 src-address=192.168.0.0/24 action=masquerade
d. /ip firewall nat add chain=srcnat src-address=192.168.0.0/24 action=masquerade

13. RouterOS DHCP server is able to send any DHCP options (specified in RFCs) to DHCP clients
a. Yes
b. No

14. You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured?
a. Set "only-one=no' at /ip hotspot
b. Set "Shared Users" option at /ip hotspot user profile
c. It's not possible
d. Set "Shared Users" option at /ip hotspot

15. You are planning a migration from a wireless link using 802.11a on 5GHz (with no nstreme) to one using Nv2 on 5GHz. When you change the AP from 802.11a to Nv2, you do not wish a client to disconnect for more than a few seconds during the upgrade.

Assuming the client is capable of operating with Nv2 (correct hardware, correct encryption key and ROS version), which setting(s) for 'wireless-protocol' should be enabled on the client so that the client can auto-detect the protocol used by the AP and still make connection with 802.11a or Nv2 : (select all that apply)
a. unspecified
b. any
c. Nv2
d. nv2-nstreme-802.11

16. Using wireless connect-list it's possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries.

a. Yes
b. No

18. Two mangle rules defining different mangle marks for the same traffic type, will make it have both mangle marks.
a. Yes
b. No

19. Where are HotSpot authorized clients shown?
a. /ip hotspot host
b. /ip hotspot active
c. /ip hotspot
d. /ip hotspot user

20. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway. When the PC Ethernet card failed, the user change it with a new card and set the same IP for it.

What else should be done?
a. Old static ARP entry on gateway has to be updated for the new card
b. MAC-address of the new card has to be changed to MAC address of old card
c. Another IP has to be added for Internet access
d. Nothing - it will work as before

21. Is it possible for a client to get an IP address but no gateway after a successful DHCP request?

22. Which RouterOS packages should be installed on router for SSH server support?
a. advanced-tools
b. system
c. ssh
d. security

23. There is an HTTP server 10.0.0.1 in your private network. You have made a DST-NAT rule that sends all HTTP traffic received on your router's address 80.232.50.100 to this server. If you make a firewall rule on the router to disallow address 159.148.20.30 to communicate with the server, how would you identify this communication in this rule?
a. src-address=159.148.20.30 dst-address=80.232.50.100
b. src-address=159.148.20.30 dst-address=10.0.0.1
c. src-address=80.232.50.100 dst-address=10.0.0.1
d. src-address=80.232.50.100 dst-address=159.148.20.30

24. Router A and B are both running as PPPoE servers on different broadcast domains of your network. It is possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers. a. False
b. True

25. Define a routing loop (choose the most precise description)
a. situation where the packet is routed through the same sequence of routers until the TTL expires
b. Situation where the packet does not reach it\'s destination
c. situation where the TTL of the packet expires
d. situation where the packet is routed through the same router twice

------------------------------------------------------------------------------------- SET - 10 -------------------------------------------------------------------------------------

1. You start a scan for wireless networks on you access point. What will happen ?
a. All connected clients will disconnect
b. You'll see all connected clients
c. You'll see available frequencies

2. Is action=masquerade allowed in chain=dstnat?
a. no
b. yes
c. yes, but it works only for incoming connections
d. yes, but only if dst-addr is specified

3. Which route will be used to reach host 192.168.1.55?

/ip route
add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=1.1.1.1
add disabled=no distance=1 dst-address=192.168.1.0/25 gateway=2.2.2.2
add disabled=no distance=1 dst-address=192.168.0.0/16 gateway=3.3.3.3
a. Route via gateway 2.2.2.2
b. Route via gateway 1.1.1.1
c. Route via gateway 3.3.3.3

4. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?
a. No
b. Yes

5. What is necessary for PPPoE client configuration?
a. ip firewall nat masquerade rule
b. Static IP address on PPPoE client interface
c. Interface (on which PPPoE client is going to work)

6. Mark all correct answers
a. Wireless access-list could allow and deny access to your AP
b. Default-Forwarding could be enabled for a specific clients by wireless access-list
c. /ip firewall filter allows to deny authentication to AP
d. The only way to prevent wireless clients connections - disable wireless interface

7. You want to limit bandwidth for your HotSpot users. HotSpot can create dynamic queues on user login to do the speed limitations.
a. Yes/ True
b. No/ False

8. A routing table has following entries:

0 dst-address=10.0.0.0/24 gateway=10.1.5.126
1 dst-address=10.1.5.0/24 gateway=10.1.1.1
2 dst-address=10.1.0.0/24 gateway=25.1.1.1
3 dst-address=10.1.5.0/25 gateway=10.1.1.2

Which gateway will be used for a packet with destination address 10.1.5.126?
a. 25.1.1.1
b. 10.1.1.1
c. 10.1.1.2
d. 10.1.5.126

9. Which is the default port of IP-Winbox?
a. TCP 8192
b. TCP 8291
c. TCP 80
d. UDP 8291

10. In case when router login password is lost, it is necessary to reinstall RouterOS or use hardware reset funcion.
a. Yes/ True
b. No/ False

11. On the advanced menu of the wireless setup there is a parameter called "Area", it works directly with:
a. Security Profile
b. Connect List
c. Access List
d. None of these

12. Is it possible that the same IP address is included in multiple address lists and still be used by these multiple address lists?

a. Destination NAT rule is required to utilize transparent proxy facility
b. To deny access to a specific website, caching should be enabled
c. Controls domains or servers which are allowed to cache by Proxy
d. Can deny access to a specific domains or servers, but not specific web pages

13. What protocol does ping use?
a. ICMP
b. ARP
c. TCP
d. UDP

14. Which firewall chain should you use to filter clients HTTP traffic going through the router?
a. prerouting
b. output
c. input
d. forward

15. Connection marks are stored in the connection tracking table.
a. Yes/ True
b. No/ False

16. MikroTik RouterOS commands can be run once a day by:
a. /system watchdog
b. /system scheduler
c. /system cron

17. What is term for the hardware coded address found on an interface?
a. FQDN Address
b. MAC Address
c. Interface Address
d. IP Address

18. For user in local ppp secrets/ppp profiles database, it is possible to
a. Allow/deny use of more than one login by this user
b. Allow only pppoe login
c. Allow login by pppoe and pptp, but deny login by l2tp
d. Deny services (like telnet) only for this user or for one group of users
e. Set max values for total transferred bytes (up- and download)

19. You have a DHCP server on your MikroTik router. The IP addresses 10.1.2.2-10.2.2.20 are distributed in the DHCP network. Additionally, 3 static IP address are defined for your servers: 10.1.2.31-10.1.2.33. After a while 20 more IP addresses need to be distributed in the network. Is it possible to distribute the extra IP address without adding another DHCP Server?

20. You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or CDP locally. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions to accomplish this.
a. Remove/Disable all interfaces under mac-server telnet
b. Remove/Disable all discovery interfaces
c. Place a proper forward firewall rule to block mac discovery
d. Remove/Disable the Interfaces
e. Place a proper input firewall rule to block mac discovery
f. Remove/Disable all interfaces under mac-Server winbox
g. Add a Deny All input firewall rule

21. What does this simple queue do (check the image)?
a. Queue guarantees download data rate of one megabit per second for host 192.168.1.10
b. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10
c. Queue limits host 192.168.1.10 download data rate to one megabit per second.
d. Queue limits host 192.168.1.10 upload data rate to one megabit per second.

22. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. none
b. advanced-tools
c. routing
d. dhcp

23. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.
a. kind=pcq pcq-limit=256000 pcq-classifier=src-address
b. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address
c. kind=pcq pcq-limit=5000000 pcq-classifier=src-address
d. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address
e. kind=pcq pcq-limit=256000 pcq-classifier=dst-address

24. To avoid looping on this network, you need to:
a. Enable RSTP on AP1, AP2 and AP3
b. Enable RSTP on AP1
c. Enable RSTP on AP1 and AP3

25. HotSpot server is installed on the router. All IP-phones are required to have access to outside networks without any HotSpot authentication. Select the configuration options you can use to achieve this setup.
a. /ip hotspot walled-garden ip
b. /ip hotspot service-ports
c. /ip hotspot ip-binding

------------------------------------------------------------------------------------- SET - 11 -------------------------------------------------------------------------------------

19. HotSpot is required on the interfaces ether2, ether3, wlan1 (in ap-bridge mode).
1. DHCP server is configured on a router's ether1 interface. IP address 192.168.0.100/24 is assigned to the interface. Possible IP pools, that can be used by this DHCP server, are:
a. 192.168.0.1-192.168.0.255
These interfaces are bridged in the bridge1 interface.
Which interface should the HotSpot server be configured on?
a. On wlan1 interface
b. On ether3 interface
c. On bridge1 interface
d. On ether2 interface

20. Using wireless connect-list it's possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries.
b. 192.169.0.1-192.169.0.254
c. 192.168.0.1-192.168.0.14
d. 192.168.0.1-192.168.0.99,192.168.0.101-192.168.0.254

2. Collisions are possible in full-duplex Ethernet networks

3. What is possible with Netinstall?
a. MikroTikRouterOS reinstall
b. MikroTikRouterOS configuration reset
c. MikroTikRouterOS password reset with saving router's configuration

4. Action=redirect allows you to make
a. Transparent DNS Cache
b. Enable Local Service
c. Forward DNS to another device IP address
d. Transparent HTTP Proxy

5. Which software version can be installed onto the following RouterBoard types?
a. routeros-mipsle-x.xx.npk on RB133
b. routeros-x86-x.xx.npk on a RB1100
c. routeros-mipsbe-x.xx.npk on a RB433
d. routeros-powerpc-x.xx.npk on a RB333
e. routeros-mipsbe-x.xx.npk on a RB133

6. What does the firewall action "Redirect" do? Select all true statements.
a. Redirects a packet to a specified IP
b. Redirects a packet to a specified port on a host in the network
c. Redirects a packet to a specified port on the router
d. Redirects a packet to the router

7. What does this simple queue do (check the image)?
a. Queue limits host 192.168.1.10 download data rate to one megabit per second.
b. Queue guarantees download data rate of one megabit per second for host 192.168.1.10
c. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10
d. Queue limits host 192.168.1.10 upload data rate to one megabit per second.

8. What wireless modes can be used in a WDS setup?
a. bridge
b. nstreme-dual-slave
c. station-wds
d. ap-bridge
e. station

9. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.
a. kind=pcqpcq-limit=256000 pcq-classifier=src-address
b. kind=pcqpcq-limit=1256000 pcq-classifier=dst-address
c. kind=pcqpcq-limit=5000000 pcq-classifier=dst-address
d. kind=pcqpcq-limit=256000 pcq-classifier=dst-address
e. kind=pcqpcq-limit=5000000 pcq-classifier=src-address

10. Firewall NAT rules process only the first packet of each connection.

11. Select all the RouterOS software packages required for configuring a wireless AP
a. wireless
b. advanced-tools
c. dhcp
d. routing
e. system

12. Router OS can set vlan-id value from - to :
a. 1-2048
b. 1-4096
c. 1-2049
d. 1-4095

13. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package:
a. none
b. advanced-tools
c. dhcp
d. routing

14. Please select valid scan-list values in interface wireless configuration:
a. 5540,5560,5620+5700
b. 5640~5680
c. 5560,5620-5700
d. default,5560,5600,5660-5700

15. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?
a. Yes
b. No

16. What configuration is added by /ip hotspot setup command? (select all that apply)
a. /queue tree
b. /ip hotspot walled-garden
c. /ipdhcp-server
d. /ip hotspot user
e. /ip service

17. Mark all correct answers: destination NAT will take place...
a. after ip firewall filter, chain forward
b. before ip firewall filter, chain forward
c. before routing decision
d. after routing decision

18. It is possible to access MikroTik Graphs on a different port than HTTP port 80.
a. Yes
b. No

21. MikroTik proxy features are:
a. HTTP caching
b. POP3 caching
c. SMTP caching
d. FTP caching
e. DNS name filtering

22. Which computers would be able to communicate directly (without any routers involved)
a. 192.168.0.5/26 and 192.168.0.100
b. 192.168.17.15/29 and 192.168.17.20/28
c. 10.10.0.17/22 and 10.10.1.30/23
d. 10.5.5.1/24 and 10.5.5.100/25

23. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time?
a. Yes/ True
b. No/ False
24. Which default route will be active?

/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
a. Route via gateway 1.1.1.1
b. Route via gateway 2.2.2.2

25. You can not use OSPF and RIP routing protocols simultaneously on the RouterOS.

------------------------------------------------------------------------------------- SET - 12 -------------------------------------------------------------------------------------

1. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
a. 254
b. 512
c. 510
d. 508

2. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device?
a. 192.168.100.69/255.255.255.252
b. 192.168.100.71/255.255.255.252
c. 192.168.100.70/255.255.255.252
d. 192.168.100.68/255.255.255.252

3. Select valid subnet masks:
a. 192.0.0.0
b. 255.255.224.0
c. 255.255.192.255
d. 255.192.0.0

4. What protocol does ping use?
a. UDP
b. ICMP
c. ARP
d. TCP

5. Select valid MAC-address
a.192.168.0.0/16
b. 00:00:5E:80:EE:B0
d. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201
e. G2:60:CF:21:99:H0

6. Which computers would be able to communicate directly (without any routers involved)
a. 10.5.5.1/24 and 10.5.5.100/25
b. 192.168.0.5/26 and 192.168.0.100
c. 10.10.0.17/22 and 10.10.1.30/23
d. 192.168.17.15/29 and 192.168.17.20/28

7. How many IP addresses can one find in the header of an IP packet?
a. 4
b. 1
c. 2
d. 3

8. Which of the following protocols / port s are used for SNMP. (Simple Network Managemnt Protocol)
a. TCP 25
b. TCP 161
c. UDP 161
d. UDP 162
e. TCP 123
f. TCP 162

9. How many usable IP addresses are there in a 20-bit subnet?
a. 2046
b. 2047
d. 4094
e. 2048
f. 4096

10. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway. When the PC Ethernet card failed, the user change it with a new card and set the same IP for it.

What else should be done?
a. Nothing - it will work as before
b. MAC-address of the new card has to be changed to MAC address of old card
c. Old static ARP entry on gateway has to be updated for the new card
d. Another IP has to be added for Internet access

11. You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24

Mark the correct configuration on client PC to access to the Internet
a. IP:192.168.0.1/24 gateway:192.168.2.1
b. IP:192.168.2.115/24 gateway: 192.168.2.1
c. IP:192.168.2.2/24 gateway:202.168.125.45
d. IP:192.168.2.253/24 gateway:202.168.0.1
e. IP:192.168.1.223/24 gateway:248.115.148.136

12. Which ones of the following are valid IP addresses?
a. 192.168.13.255
b. 10.10.14.0
c. 1.27.14.254
d. 192.168.256.1

13. MAC layer by OSI model is also known as
a. Layer 7
b. Layer 2
c. Layer 3
d. Layer 6
e. Layer 1

14. Which of the following IP addresses are publicly routable?
a. 127.34.155.3
b. 11.3.10.4
c. 172.16.13.23
d. 192.168.1.4

15. The network address is
a. The first usable address of the subnet
b. The first address of the subnet
c. The last address of the subnet

16. Select which of the following are 'Public IP addresses':
a. 10.110.50.37
b. 11.63.72.21
c. 172.168.254.2
d. 172.28.73.21
e. 192.168.0.1

17. Is ARP used in the IPv6 protocol ?

18. What is term for the hardware coded address found on an interface?
a. MAC Address
b. Interface Address
c. IP Address
d. FQDN Address

19. How many layers does Open Systems Interconnection model have?
a. 12
b. 7
c. 6
d. 9
e. 5

20. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by using an address subnet of:
a. /30
b. /31

a. Exports logs from /log print

b. Exports full configuration of the router

c. Exports only part of the configuration (for example /ip firewall)

d. Exports scripts from /system script

e. Exports files could not edited

b. Forward DNS to another device IP address

d. Transparent HTTP Proxy

a. /ip firewall nat add action=masquerade chain=srcnat

b. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24

c. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat

d. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1

a. WDS between a device in station-wds mode and a device in station-wds mode

d. Bridging a device in station mode with a device in ap-bridge mode

a. target-address, max-limit

b. target-address, dst-address, max-limit

c. target-address, dst-address

b. Files menu in your router

a. A: 10.1.2.66/25 and B: 10.1.2.109/26

b. A: 10.2.2.1/23 and B: 10.2.0.1/22

c. A: 10.1.2.192/24 and B: 10.1.2.129/26

d. A: 10.2.1.0/23 and B: 10.2.0.1/22

a. To identify a station in a list of connected clients

b. To identify a station in the Access List

c. To identify a station in Neighbor discovery

20. MikroTik RouterOS DHCP client can receive following options

add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1

add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2

a. Route via gateway 1.1.1.1

a. Termasuk file yang tersimpan di /files

c. Termasuk username dan password dari /user

d. Mencakup seluruh konfigurasi router

c. you can't use DST-NAT to achieve this

a. A: 10.1.2.66/25 and B: 10.1.2.109/26

b. A: 10.1.2.192/24 and B: 10.1.2.129/26

c. A: 10.2.2.1/23 and B: 10.2.0.1/22

d. A: 10.2.1.0/23 and B: 10.2.0.1/22

/ip firewall filter add chain=forward connection-state=established action=accept

/ip firewall filter add chain=forward connection-state=invalid action=drop

Connection-state=related packets are not filtered by the rules above.

a. Shows a list of Client's MAC Address that are already registered at AP

b. Authenticate Hotspot users

c. Handles a list of Client's MAC Address to permit/deny connection to AP

d. Contains the security profiles settings

a. routeros-x86-x.xx.npk on a RB1100

b. routeros-mipsbe-x.xx.npk on a RB133

c. routeros-mipsle-x.xx.npk on RB133

d. routeros-powerpc-x.xx.npk on a RB333

e. routeros-mipsbe-x.xx.npk on a RB433

e. /ip hotspot walled-garden

a. /system logging add topics=web-proxy,debug action=memory

b. /system logging add topics=web-proxy,!debug action=memory

c. /system logging add topics=web-proxy,!debug action=remote

d. /system logging add topics=web-proxy,!debug action=disk

Which License level is needed?

b. It cannot be done in RouterOS

- Public IP :202.168.125.45/24

- Default gateway:202.168.125.1

- DNS server: 248.115.148.136, 248.115.148.137

Mark the correct configuration on client PC to access to the Internet

a. IP:192.168.2.115/24 gateway: 192.168.2.1

b. IP:192.168.0.1/24 gateway:192.168.2.1

c. IP:192.168.2.2/24 gateway:202.168.125.45

d. IP:192.168.1.223/24 gateway:248.115.148.136

e. IP:192.168.2.253/24 gateway:202.168.0.1

a. A: 10.1.2.192/24 and B: 10.1.2.129/26

b. A: 10.1.2.66/25 and B: 10.1.2.109/26

c. A: 10.2.1.0/23 and B: 10.2.0.1/22

d. A: 10.2.2.1/23 and B: 10.2.0.1/22

a. Choose larger channels (40 MHz instead of 20 MHz)

b. Reduce supported rates

c. Change ap-bridge to bridge

d. Set basic rates to only one data rate like 24 Mbps

- queue "M" parent="GP" limit-at=4M max-limit=6M

- - queue "C1″ parent="M" limit-at=1M max-limit=7M priority=4

- - queue "C2″ parent="M" limit-at=1M max-limit=4M priority=1

- - queue "C3″ parent="M" limit-at=3M max-limit=7M priority=8

- queue "F" parent="GP" limit-at=5M max-limit=8M

- - queue "D1″ parent="F" limit-at=3M max-limit=4M priority=5

- - queue "D2″ parent="F" limit-at=2M max-limit=5M priority=2

If queues "C1″ and "D2″ will not require any traffic, how the total available traffic is going to be distributed in the worst case scenario?

a. queue "C2″ will get 3M, "C3″ 2M, "D1″ 4M

b. queue "C2″ will get 2M, "C3″ 5M, "D1″ 3M

c. queue "C2″ will get 4M, "C3″ 2M, "D1″ 4M

d. queue "C2″ will get 2M, "C3″ 3M, "D1″ 5M

e. queue "C2″ will get 3M, "C3″ 3M, "D1″ 4M

add address=1.1.1.2/30 interface=ether1

add address=2.2.2.2/30 interface=ether2

add address=192.168.10.1/24 interface=ether3

add action=mark-connection chain=prerouting

dst-port=80 new-connection-mark=web_c passthrough=yes protocol=tcp

add action=mark-routing chain=prerouting

connection-mark=web_c new-routing-mark=web passthrough=no

add action=masquerade chain=srcnat

add gateway=2.2.2.2 routing-mark=web

What can be said about the Web Access (port 80) by a customer connected at ether3 interface with IP 192.168.10.2/24, gateway 192.168.10.1 ?

a. The customer will access the Web using the gateway 2.2.2.2

b. The Customer is unable to access the Web.

c. The Customer will access the Web by ECMP, by using both gateways 1.1.1.1 and 2.2.2.2

d. The customer will access the Web using the gateway 1.1.1.1

a. Group settings for System users

b. Firewall Filter Chain Input

c. Firewall Filter Chain Forward

d. WWW service from IP Services

a. /system logging add topics=web-proxy,debug action=memory

b. /system logging add topics=web-proxy,!debug action=disk

c. /system logging add topics=web-proxy,!debug action=remote

d. /system logging add topics=web-proxy,!debug action=memory

a. Keep configuration, but reset a lost admin password

d. Install package for different hardware architecture

a. arp=enabled on the HotSpot interface

b. /ip dhcp-server configuration

c. address-pool configuration in /ip hotspot and /ip hotspot user profile

d. /ip firewall mangle rules

b. Bridging a device in station mode with a device in ap-bridge mode

d. WDS between a device in station-wds mode and a device in station-wds mode

add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1

add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2

b. Route via gateway 1.1.1.1

b. Set "only-one=no' at /ip hotspot

d. Set "Shared Users" option at /ip hotspot

Networking Basics

1. How long is an IPv6 address?
a. 32 bits
b. 128 bytes
c. 64 bits
d. 128 bits

2. What flavor of Network Address Translation can be used to have one IP address allow many users to connect to the global Internet?
a. NAT
b. Static
c. Dynamic
d. PAT

3. What are the two main types of access control lists (ACLs)?
Standard
IEEE
Extended
Specialized

a. 1 and 3
b. 2 and 4
c. 3 and 4
c. 1 and 2

4. What command is used to create a backup configuration?
a. copy running backup
b. copy running-config startup-config
c. config mem
d. wr mem

5. You have 10 users plugged into a hub running 10Mbps half-duplex. There is a server connected to the switch running 10Mbps half-duplex as well. How much bandwidth does each host have to the server?
a. 100 kbps
b. 1 Mbps
c. 2 Mbps
d. 10 Mbps

6. Which WLAN IEEE specification allows up to 54Mbps at 2.4GHz?
a. A
b. B
c. G
d. N

7. Which of the following is the valid host range for the subnet on which the IP address 192.168.168.188 255.255.255.192 resides?
a. 192.168.168.129-190
b. 192.168.168.129-191
c. 192.168.168.128-190
d. 192.168.168.128-192

8. To back up an IOS, what command will you use?
a. backup IOS disk
b. copy ios tftp
c. copy tftp flash
d. copy flash tftp

9. What protocol does PPP use to identify the Network layer protocol?
a. NCP
b. ISDN
c. HDLC
d. LCP

10. Which of the following commands will allow you to set your Telnet password on a Cisco router?
a. line telnet 0 4
b. line aux 0 4
c. line vty 0 4
d. line con 0

11. Which protocol does DHCP use at the Transport layer?
a. IP
b. TCP
c. UDP
d. ARP

12. Which command is used to determine if an IP access list is enabled on a particular interface?
a. show access-lists
b. show interface
c. show ip interface
d. show interface access-lists

13. Where is a hub specified in the OSI model?
a. Session layer
b. Physical layer
c. Data Link layer
d. Application layer

14. What does the passive command provide to dynamic routing protocols?
a. Stops an interface from sending or receiving periodic dynamic updates.
b. Stops an interface from sending periodic dynamic updates but not from receiving updates.
c. Stops the router from receiving any dynamic updates.
d. Stops the router from sending any dynamic updates.

15. Which protocol is used to send a destination network unknown message back to originating hosts?
a. TCP
b. ARP
c. ICMP
d. BootP

16. How often are BPDUs sent from a layer 2 device?
a. Never
b. Every 2 seconds
c. Every 10 minutes
d. Every 30 seconds

17. How many broadcast domains are created when you segment a network with a 12-port switch?
a. 1
b. 2
c. 5
d. 12

18. What does the command routerA(config)#line cons 0 allow you to perform next?
a. Set the Telnet password.
b. Shut down the router.
c. Set your console password.
d. Disable console connections.

19. Which router command allows you to view the entire contents of all access lists?
a. show all access-lists
b. show access-lists
c. show ip interface
d. show interface

20. Which class of IP address has the most host addresses available by default?
a. A
b. B
c. C
d. A and B

21. In a network with dozens of switches, how many root bridges would you have?
a. 1
b. 2
c. 5
d. 12

22. What PPP protocol provides dynamic addressing, authentication, and multilink?
a. NCP
b. HDLC
c. LCP
d. X.25

23. What is a stub network?
a. A network with more than one exit point.
b. A network with more than one exit and entry point.
c. A network with only one entry and no exit point.
d. A network that has only one entry and exit point.

24. If your router is facilitating a CSU/DSU, which of the following commands do you need to use to provide the router with a 64000bps serial link?
a. RouterA(config)#bandwidth 64
b. RouterA(config-if)#bandwidth 64000
c. RouterA(config-if)#clock rate 64
d. RouterA(config-if)#clock rate 64000

25. Which one of the following is true regarding VLANs?
a. Two VLANs are configured by default on all Cisco switches.
b. VLANs only work if you have a complete Cisco switched internetwork. No off-brand switches are allowed.
c. You should not have more than 10 switches in the same VTP domain.
d. VTP is used to send VLAN information to switches in a configured VTP domain.

26. What does a VLAN do?
a. Acts as the fastest port to all servers.
b. Provides multiple collision domains on one switch port.
c. Breaks up broadcast domains in a layer 2 switch internetwork.
d. Provides multiple broadcast domains within a single collision domain.

27. What is the main reason the OSI model was created?
a. To create a layered model larger than the DoD model.
b. So application developers can change only one layer's protocols at a time.
c. So different networks could communicate.
d. So Cisco could use the model.

28. How many collision domains are created when you segment a network with a 12-port switch?
a. 1
b. 2
c. 5
d. 12

29. What command will display the line, protocol, DLCI, and LMI information of an interface?
a. sh pvc
b. show interface
c. show frame-relay pvc
d. show run

30. Which protocol does Ping use?
a. TCP
b. ARP
c. ICMP
d. BootP

31. Which command is used to upgrade an IOS on a Cisco router?
a. copy tftp run
b. copy tftp start
c. config net
d. copy tftp flash

32. If you wanted to delete the configuration stored in NVRAM, what would you type?
a. erase startup
b. erase nvram
c. delete nvram
d. erase running

33. What protocols are used to configure trunking on a switch?
VLAN Trunking Protocol
VLAN
802.1Q
ISL

a. 1 and 2
b. 3 and 4
c. 1 only
d. 2 only

1. Which of the following services use TCP?
DHCP
SMTP
HTTP
TFTP
FTP

a. 1 and 2
b. 2, 3 and 5
c. 1, 2 and 4
d. 1, 3 and 4

2. What layer in the TCP/IP stack is equivalent to the Transport layer of the OSI model?
a. Application
b. Host-to-Host
c. Internet
d. Network Access

3. Which of the following describe the DHCP Discover message?
It uses FF:FF:FF:FF:FF:FF as a layer 2 broadcast.
It uses UDP as the Transport layer protocol.
It uses TCP as the Transport layer protocol.
It does not use a layer 2 destination address.

a. 1 only
b. 1 and 2
c. 3 and 4
d. 4 only

4. You want to implement a mechanism that automates the IP configuration, including IP address, subnet mask, default gateway, and DNS information. Which protocol will you use to accomplish this?
a. SMTP
b. SNMP
c. DHCP
d. ARP

5. Which of the following is private IP address?
a. 12.0.0.1
b. 168.172.19.39
c. 172.15.14.36
d. 192.168.24.43

6. Which of the following allows a router to respond to an ARP request that is intended for a remote host?
a. Gateway DP
b. Reverse ARP (RARP)
c. Proxy ARP
d. Inverse ARP (IARP)

7. The DoD model (also called the TCP/IP stack) has four layers. Which layer of the DoD model is equivalent to the Network layer of the OSI model?
a. Application
b. Host-to-Host
c. Internet
d. Network Access

8. Which of the following services use UDP?
DHCP
SMTP
SNMP
FTP
HTTP
TFTP

a. 1, 3 and 6
b. 2 and 4
c. 1, 2 and 4
d. All of the above

9. Which class of IP address provides a maximum of only 254 host addresses per network ID?
a. Class A
b. Class B
b. Class C
d. Class D

10. If you use either Telnet or FTP, which is the highest layer you are using to transmit data?
a. Application
b. Presentation
c. Session
d. Transport

11. Which of the following is the decimal and hexadecimal equivalents of the binary number 10011101?
a. 155, 0x9B
b. 157, 0x9D
c. 159, 0x9F
d. 185, 0xB9

12. Which statements are true regarding ICMP packets?
They acknowledge receipt of a TCP segment.
They guarantee datagram delivery.
They can provide hosts with information about network problems.
They are encapsulated within IP datagrams.

a. 1 only
b. 2 and 3
c. 3 and 4
.d 2, 3 and 4

13. Which of the following are layers in the TCP/IP model?
Application
Session
Transport
Internet
Data Link
Physical

a. 1 and 2
b. 1, 3 and 4
c. 2, 3 and 5
d. 3, 4 and 5

14. Which layer 4 protocol is used for a Telnet connection?
a. IP
b. TCP
c. TCP/IP
d. UDP

15. Which statements are true regarding ICMP packets?
ICMP guarantees datagram delivery.
ICMP can provide hosts with information about network problems.
ICMP is encapsulated within IP datagrams.
ICMP is encapsulated within UDP datagrams.

a. 1 only
b. 2 and 3
c. 1 and 4
b. All of the above

16. Which of the following are TCP/IP protocols used at the Application layer of the OSI model?

IP
TCP
Telnet
FTP
TFTP

a. 1 and 3
b. 1, 3 and 5
c. 3, 4 and 5
d. All of the above

17. What protocol is used to find the hardware address of a local device?
a. RARP
b. ARP
c. IP
d. ICMP

18. Which of the following protocols uses both TCP and UDP?
a. FTP
b. SMTP
c. Telnet
d. DNS

19. What is the address range of a Class B network address in binary?
a. 01xxxxxx
b. 0xxxxxxx
c. 10xxxxxx
d. 110xxxxx

# data[].attributes.attachment_link.description
1. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device?

# data[].attributes.body
CLS
function show-installedsoftware {
param([Parameter(mandatory=$true)]
[ValidateSet("Full", "Search")]
[string]$Action,

[string]$Phrase
)
$regKey = "HKLM:\software\Wow6432Node\Microsoft\windows\CurrentVersion\Uninstall\*"

if($Action -eq "Full") {
Get-ItemProperty $regKey | Select-Object DisplayName |
Where-Object { $_.DisplayName -ne $null} |
Sort-Object DisplayName
} else {
if($Phrase -ne "") {
Get-ItemProperty $regKey |
ForEach-Object {Get-ItemProperty $_.PSPath} |
Select-Object DisplayName |
Sort-Object DisplayName
} else {
Write-Host "Otsingu fraas on puudu"
}
}

}
show-installedsoftware

# data[].attributes.body
Get-ItemProperty HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate | Format-Table –AutoSize > C:\Users\Kasutaja\Documents\InstalledtPrograms-PS.txt

# data[].attributes.body
cls
[int]$valik = Read-Host -Prompt "sisesta valik kas 1(pindala) v 2(ümbermõõt)"#küsib sultkas tahad arvurada pindala v ümbermõõdu
if($valik -eq 1){Calc-Pindala
#ütleb kui vastus on üks et läheks pindala arvutama
return #lõpetab
} elseif($valik -eq 2){Calc-Umber #ütleb et läheks arvutama ümbermõõtu kui vastus on 2
return #lõpetab

}

function Calc-Pindala { #arvutab pindala kõigebealt küsides pikkust ja laiust
param(
[Parameter(mandatory=$true)]
[int]$Pindala
)
$x = 0
while($x -lt $Pindala) {

$x++
}
[int]$pikkus = Read-Host -Prompt "sisesta pikkus:"
[int]$laius = Read-Host -Prompt "sisesta laius:"
{

}
Write-Host "Pindala on:" ($pikkus*$laius)
}
Calc-Pindala -Pindala 1

#arvutab ümbermõõdu kõigepealt küsides pikkust ja laiust ning väljastab vastuse
function Calc-Umber {
param(
[Parameter(mandatory=$true)]
[int]$umber
)
$x = 0
while($x -lt $Pindala) {

$x++
}
[int]$pikkus = Read-Host -Prompt "sisesta pikkus:"
[int]$laius = Read-Host -Prompt "sisesta laius:"
{
}
Write-Host "Ümbermõõt on:" ($pikkus*2+$laius*2)
}
Calc-Umber -umber 1

# data[].attributes.body
# Script: Nimed
# Date: 17.01.2017
# Author: M.Viirok
# Description: Pagulasfirma 50 000 inimest

$UserName = [environment]::Username
$global:FullPath = "C:\Users\$UserName\Desktop\Nimed\"
$global:InsideLog = "eesnimi;perenimi;sugu;sunniaeg;vanus;kasutajanimi;mail;parool"
$global:newFile = "C:\Users\$UserName\Desktop\Nimed\5000_ready.csv"

function Split-OneFile {
param([string]$FileName)
$FullPathFileName = $global:FullPath + $FileName
if(Test-Path $global:newFile) {
Remove-Item $global:newFile
New-Item -ItemType file -Path $global:newFile -Force | Out-Null
} else {
New-Item -ItemType file -Path $global:newFile -Force | Out-Null
}
Write-OutPut $global:InsideLog | Out-File -FilePath $global:newFile -Append
if(Test-Path $FullPathFileName) {
$content = Get-Content $FullPathFileName
for($i = 0; $i -lt $content.Length; $i++) {
if($i -gt 0) {
$eesnimi = $content[$i].Split(";")[0]
$perenimi = $content[$i].Split(";")[1]
$sugu = $content[$i].Split(";")[2]
$sunniaeg = $content[$i].Split(";")[3]
$aasta = $sunniaeg.Split(".")[2]
$today = (Get-Date).year
$vanus = $today - $aasta
$kasutajanimi = $eesnimi + "_" + $perenimi
$mail = $eesnimi + "." + $perenimi + "@asutus.com"
$Parool = "LammasShaun"
#Write-Host $newline

$newLine = $eesnimi + ";" + $perenimi + ";" + $sugu + ";" + $sunniaeg + ";" + $vanus + ";" + $kasutajanimi + ";" + $mail + ";" + $parool
Write-Output $newLine | Out-File -FilePath $global:newFile -Append

}
}
}
}
Split-OneFile -Filename Nimed.csv
Write-Host "Tehtud"

# data[].attributes.body
#Script: KiviPaberKaarid

#Date: 11.01.2017

#Author: M. Kuum

#Description: Kivi-Paber-Käärid

CLS

$global:pc = 0

$global:user = 0

$global:viik = 0

function Gen-Number {

return Get-Random -Minimum 1 -Maximum 4

}

function Show-Text {

para([int]$Number)

switch($Number) {

1 {return "Kivi"; break}

2 {return "Paber"; break}

3 {return "Käärid"; break}

default {return "Error"; break}

}

}

function Check-Result {

param([int]$Kasutaja, [int]$pc)

if($Kasutaja -eq $PC) {

Write-Host "Viik"

$global:viik++

} elseif($Kasutaja -eq 1) { # Kivi

if($PC -eq 3) { #Käärid

Write-Host "Sina võitsid"

$global:user++

} else {

Write-Host "Arvuti võitis"

$global:pc++

}

} elseif($Kasutaja -eq 2) { # Paber

if($PC -eq 1) { #Kivi

Write-Host "Sina võitsid"

$global:user++

} else {

Write-Host "Arvuti võitis"

$global:pc++

}

} elseif($Kasutaja -eq 3) { # Käärid

if($PC -eq 1) { #Kivi

Write-Host "Arvuti võitis"

$global:pc++

} else {

Write-Host "Sina võitsid"

$global:user++

}

}

}

function Lets-Play {

param(

[Parameter(mandatory=$true)]

[int]$MituKordaMangida

)

}

Lets-Play -MituKordaMangida 5

# data[].attributes.body
$UserName = [environment]::Username
$global:FullPath = "C:\Users\$UserName\Desktop\Temp\"
$global:InsideLog = "A,01012017","A,02012017","A,03012017",
"A,04012017","A,05012017","A,06012017",
"A,01072017","A,08012017","A,09012017",
"V,09012017","A,10012017"

function Create-NewLogFile {
param($HowMany)
#param([int]$HowMany) kui on kasutusel siis võtta int ära

if($HowMany -isnot [int]) {
$HowMany = 50
Write-Host "Failide arv pole number. Muudetud 50ks."
}
if($HowMany -lt 1 -or $HowMany -gt 999) {
$HowMany = 100
Write-Host "Failide arv vales vahemikus. muudeti 100ks."
}

if(!(Test-Path $global:FullPath)) {
New-Item -ItemType directory -Path $global:FullPath | Out-Null
} else {
Remove-Item $global:FullPath"*.*"
}
$k = 0
for($i = 0; $i -lt $HowMany; $i++) {
if($i -lt 10) {
$k = $i
} elseif($i -lt 100) {
if($k -lt $global:InsideLog.Count-1) {
$k++
} else {
$k = 0
}
} else {
if($k -lt $global:InsideLog.Count-1) {
$k++
} else {
$k = 0
}
}
$string = Gen-RandomString -Length (Get-Random -minimum 2 -maximum 21)
$fn = $global:FullPath + $string + ".txt"
Write-Output $global:InsideLog[$k] | Out-File -FilePath $fn
}
Write-Host "Failid tehtud" $HowMany "tükki"
}
function Merge-Files {
param([string]$FileName)
$thisFullPath = $global:FullPath + $FileName
if(Test-Path $thisFullPath) {
Remove-Item $thisFullPath
New-Item -ItemType file -Path $thisFullPath -Force | Out-Null
} else {
New-Item -ItemType file -Path $thisFullPath -Force | Out-Null
}
Get-ChildItem $global:FullPath -Filter *.txt | ForEach-Object {
$content = Get-Content $_.Fullname
Write-Output $content | Out-File -FilePath $ThisFullPath -Append
}
}

function Split-OneFile {
param([string]$FileName)
$FullPathFileName = $global:FullPath + $FileName
if(Test-Path $FullPathFileName) {
$content = Get-Content $FullPathFileName
$counter = 0
for($i = 0; $i -lt $content.Length; $i++) {
if($content[$i].Split(",")[0] -eq "V") {
Write-Host $content[$i].Split(",")
$counter++
}
}
Write-Host "V-ga algavaid on $counter"
} else {
Write-Host "Faili ei leitud" $FullPathFileName
}
#Write-Host "$($content.Length)"
}
function Gen-RandomString { #Funktsioon, mis genereerib juhusliku tähtede/numbrite rea
param([int]$Length)#annab funktsioonile kaasa antud parameetrid
#annab kõik võimalikud tähemärgid
$set = "abcdefghijklmnopqrstuwvxyzABCDEFGHIJKLMNOPQRSTUWVXYZ".ToCharArray()
$result = ""#vastus
$setSize = $set.Length#määrab $set-i lõppu

for($i = 0; $i  -lt $Length; $i++) {
$nr = Get-Random -Minimum 1 -Maximum $setSize
$result += $set[$nr]
}
return $result#läheb tagasi vastuse juurde

}

$string = Gen-RandomString -Length (Get-Random -minimum 2 -maximum 21) #genereerib juhusliku stringi pikkusega kümme märki

Create-NewLogFile -HowMany 999
Merge-Files -FileName fail.log
Split-OneFile -Filename fail.log

# data[].attributes.body
function Convert-MPHtoKMHvv {

param([string]$Unit, [int]$Speed)

if($Unit -eq "MPH") {

#Arvutada KMH

if($Speed -gt 0) {

#Saab arvutada kiirust

$newSpeed = $Speed * 1.609344

Write-Host $Speed "mph on" $newSpeed "kmh"

} else {

Write-Host "Kiirus on puudu"

}

} else {

#Arvutada MPH

#Arvutada MPH

if($Speed -gt 0) {

#Saab arvutada kiirust

$newSpeed = $Speed * 0.621371192

Write-Host $Speed "kmh on" $newSpeed "mph"

} else {

Write-Host  "Kiirus on puudu"

}

}

}

Convert-MPHtoKMHvv -Unit "MPH" -Speed 100

# data[].attributes.body
# Script: Juhuslikstring

# Date: 11.01.2017

# Author: M. Kuum

# Description: Funktsioon, mis teeb x pikkusega stringi

CLS # Peale uuesti sisestamist ta kustutab vanad ära.

function Gen-RandomString { #Funktsioon, mis genereerib juhusliku tähtede/numbrite rea

param([int]$Length)

$set = "abcdefghijklmnopqrstuwvxyzABCDEFGHIJKLMNOPQRSTUWVXYZ1234567890".ToCharArray()

$result = ""

$setSize = $set.Length

if($Length -gt 1) {

for($i = 0; $i  -lt $Length; $i++) {

$nr = Get-Random -Minimum 1 -Maximum $setSize

$result += $set[$nr]

}

return $result

}

return "Length Error!"

}

$string = Gen-RandomString -Length 10

#Write-Host $string

for($i = 0; $i -lt 10; $i++) {

$string = Gen-RandomString -Length 10

Write-Host "$($i+1)." $string

}