Action=redirect is applied in chain=srcnat chain=dstnat chain =forward.
You have 802.11b/g wireless card. What frequencies are available to you? 5800MHz 2412MHz 5210MHz 2422MHz 2327MHz.
Mark all correct statements aboud /export (rsc file) Exports logs from /log print Exports full configuration of the router Exports only part of the configuration (for example /ip firewall) Exports scripts from /systém script Exports files could not be edited.
What wireless card can we use to achieve 100 Mbps actual wireless throughput? 802.11 b/g 802.11 a/b/g 802.11 a 802.11 a/n 802.11 a/b/g/n.
It is possible to add user-defined chains in ip firewall mangle True False.
Choose all valid hosts address range for subnet 15.242.55.62/27 15.242.55.31-15.242.55.62 15.242.55.32-15.242.55.63 15.242.55.33-15.242.55.62 15.242.55.33-15.242.55.63.
Action=redirect allows you to make Transparent DNS Cache Forward DNS to another device IP address Enable Local Service Transparent HTTP Proxy.
Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing interface=ether1? ip firewall nat add action=masquerade chain=srcnat /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24 /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1.
What letters appear next to a route, which is automatically created by RouterOS when user adds a valid adress to an active interface? I D A S C.
10. Mark all features that are compatible with Nstreme WDS between a device in station-wds mode and a device in station-wds mode Encryption WDS between a device in ap-bridge mode with a device in station-wds mode Bridging a device in station mode with a device in ap-bridge mode.
11. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and it's a driver issue? Yes No.
12. What protocol is used for Ping and Trace route DHCP IP TCP ICMP UDP.
13. From which of the following locations can you obtain Winbox? Router's webpage Files menu in your router Via the console cable mikrotik.com.
14. What kind of users are listed in the Secrets window of the PPP menu? pptp users l2tp users winbox users wireless users pppoe users hotspot users.
15. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this? Users IP bindings Walled-garden Walled-garden IP.
16. Which default route will be active?
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1
add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
Route via gateway 1.1.1.1 Route via gateway 2.2.2.2.
17. How long is level 1 (demo) license valid 24 hours Infinite time 1 month 1 year.
18. The basic unit of a physical network (OSI Layer 1) Frame Header Byte Bit.
19. Select valid MAC-address G2:60:CF:21:99:H0 192.168.0.0/16 AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201 00:00:5E:80:EE:B0.
20. Which ones of the following are valid IP addresses? 10.10.14.0 192.168.13.255 1.27.14.254 192.168.256.1.
21. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet? 254 510 512 508.
22. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument kind=pcq pcq-limit=1256000 pcq-classifier=dst-address kind=pcq pcq-limit=256000 pcq-classifier=dst-address kind=pcq pcq-limit=5000000 pcq-classifier=src-address kind=pcq pcq-limit=256000 pcq-classifier=src-address kind=pcq pcq-limit=5000000 pcq-classifier=dst-address.
23. Which of the following is true for connection tracking Enabling connection tracking reduces CPU usage in RouterOS Connection tracking must be enabled for firewall to be effective Connection tracking must be enable for NAT'ed network Disable connection tracking for mangle to work.
24. Which of these are possible solutions to bridge two networks over a wireless link: Both devices in AP mode and enable WDS mode One device in AP mode, another one in station-pseudobridge-clone One device in AP mode, another one in station-pseudobridge One device in AP mode, another one in station.
25. Which of the following Routes statuses are possible? C = Connected S = Static A = Active D = Drop.
26. Action=redirect applies to Route rules DST-NAT rules Firewall Filter rules SRC-NAT rules.
27. When backing up your router by using the 'Export' command, the following happens: Winbox usernames and passwords are backed up The Export file can be edited with a standard text editor after its creation You are requested to give the export file a name.
28. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration. True False.
29. If a packet comes to a router and starts a new, previously unseen connection, which connection state would be applied to it? no connection state would be applied to such packet new unknown invalid established.
30. What is the default protocol/port of (secure) winbox? UDP/5678 TCP/8291 TCP/22 TCP/8080.
31. We have two radio cards in a point-to-point link with settings:
Card Nr 1.: mode=ap-bridge ssid="office" frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa
Card Nr 2.: mode=station ssid="office" frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2
Is Card Nr2. able to connect to Card Nr 1.?
Yes, if Nstreme is enabled or disabled on both Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on both No, because of the different frequencies No, because of the different security profiles.
32. Select which of the following are 'Public IP addresses': 10.110.50.37 11.63.72.21 172.28.73.21 192.168.0.1 172.168.254.2.
33. Is ARP used in the IPv6 protocol ? True False.
34. How many usable IP addresses are there in a 20-bit subnet? 2047 4096 2048 2046 4094.
35. What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ? 60 30 1 64.
36.The network address is A. The first usable address of the subnet B. The last address of the subnet C. The first address of the subnet.
37.Choose all valid hosts address range for subnet 15.242.55.62/27 A. 15.242.55.32-15.242.55.63 B. 15.242.55.33-15.242.55.63 C. 15.242.55.33-15.242.55.62 D. 15.242.55.31-15.242.55.62.
38.What is term for the hardware coded address found on an interface? A. IP Address B. Interface Address C. MAC Address D. FQDN Address.
39.Which of the following IP addresses are publicly routable? A. 127.34.155.3 B. 192.168.1.4 C. 172.16.13.23 D. 11.3.10.4.
40. How many IP addresses can one find in the header of an IP packet? A. 3 B. 4 C. 1 D. 2.
41. You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24
Mark the correct configuration on client PC to access to the Internet A. IP:192.168.0.1/24 gateway:192.168.2.1 B. IP:192.168.2.253/24 gateway:202.168.0.1 C. IP:192.168.1.223/24 gateway:248.115.148.136 D. IP:192.168.2.115/24 gateway: 192.168.2.1 E. IP:192.168.2.2/24 gateway:202.168.125.45.
42. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication A. ip hotspot ip-binding B. ip hotspot profile C. ip hotspot walled-garden D. ip hotspot walled-garden ip.
43. It is possible to add user-defined chains in ip firewall mangle True False.
44. For static routing functionality, additionally to the RouterOS system package, you will also need the following software package: A. none B. dhcp C. routing D. advanced-tools.
45. Which are necessary sections in /queue simple to set bandwidth limitation? A. target-address, max-limit B. target-address, dst-address, max-limit C. target-address, dst-address D. max-limit.
46. Two hosts, A and B, are connected to a broadcast LAN. Select all the answers showing pairs of IP address/mask which would allow IP connections to be established between the two hosts. A. A: 10.1.2.66/25 and B: 10.1.2.109/26 B. A: 10.2.2.1/23 and B: 10.2.0.1/22 C. A: 10.1.2.192/24 and B: 10.1.2.129/26 D. A: 10.2.1.0/23 and B: 10.2.0.1/22.
47. Why is it useful to set a Radio Name on the radio interface? A. To identify a station in a list of connected clients B. To identify a station in the Access List C. To identify a station in Neighbor discovery.
48. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers ? True False.
49. MikroTik RouterOS DHCP client can receive following options A. Byte limit B. IP Gateway C. Rate limit D. Uptime limit E. IP Address and Subnet.
50. The HotSpot feature can be used only on ethernet interfaces. You have to use a separate access point if you want to use this feature with wireless. True False.
51. How many different priorities can be selected for queues in MikroTik RouterOS? A. 8 B. 16 C. 0 D. 1.
52. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway. When the PC Ethernet card failed, the user change it with a new card and set the same IP for it. What else should be done? A. Old static ARP entry on gateway has to be updated for the new card B. Nothing – it will work as before C. MAC-address of the new card has to be changed to MAC address of old card D. Another IP has to be added for Internet access.
53. Hotspot is required on the interfaces ether2, ehter3, wlan1 (in ap-bridge mode). These interfaces are bridged in the bridge1 interface. Which interface should the Hotspot server be configured on? A. ether2 B. ether3 C. bridge1 D. wlan1.
54. Mark all the configuration where RouterOS is utilizing the DNS feature A. Layer-7 packet filter configuration B. Hotspot configuration C. Web-proxy configuration D. PPP Configuration.
55. Which facility should be used, to ensure that clients with radio signal strength poorer than -90 dBm can't connect to interface wlan1 on Mikrotik Access Point? A. Access List B. Connecttion List C. Registered List D. Hotspot User Profile.
56. /ip firewall nat add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to-address=192.168.1.2 to-ports=81 The command shown above: A. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192.168.1.2 B. Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1 C. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.168.1.2 D. Adds IP address 192.168.1.2 to the interface ether1.
57. How many layers does Open Systems Interconnection model have? A. 5 B. 6 C. 7 D. 12.
58. Select all the RouterOS software packages required for configuring a wireless AP
A. advanced-tools B. wireless C. routing D. dhcp E. system.
59. Mark the queue types that are available in RouterOS A. FIFO - First In First Out (for Bytes or for Packets) B. SFQ – Stochastic Fairness Queuing C. DRR - Deficit Round Robin D. RED – Random Early Detect (or Drop) E. PCQ – Per Connection Queuing F. LIFO - Last In First Out.
60. MikroTik PPPoE Server can be used only within a broadcast domain, that is, users can not run PPPoE protocol with a server if there is a router between the customer and that PPPoE server. True False.
61. To limit wireless access for your HotSpot users A. Create MAC Address restriction on HotSpot user login B. Create MAC Address restriction on PPP user login C. Create MAC Address restriction in the Wireless Access List D. Create IP Address restriction in the Wireless Access List.
62. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time? True False.
63. Is it possible for a client to get an IP address but no gateway after a successful DHCP request? True False.
64. You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do: A. Create backup, edit backup file and restore on target router B. Export global configuration and remove everything apart from '/ip firewall filter' C. Export only '/ip firewall filter' D. Create backup only of '/ip firewall filter' rules.
65. Mark all features that can be help to assign bandwidth limitation for a group of users?
A. NAT B. Mangle C. Queue Tree D. Address-list.
66. Connection state in MikroTik RouterOS is the same thing as TCP state elsewhere? True False.
67. To block access to web proxies running on TCP port 8080, you have to create a firewall rule and specify: A. "chain", "action", "port" B. "chain", "action", "protocol", "limit" C. "chain", "action", "protocol" D. "chain", "action", "protocol", "port".
68. What is possible with Netinstall? A. MikroTik RouterOS install B. MikroTik RouterOS reinstall C. MikroTik RouterOS configuration reset D. MikroTik RouterOS password reset with saving router's configuration.
69. Check the allowed input formats for wireless scan-list A. 5500 - 5700 B. 5500 5700 C. 5500-5700 D. 5500/5700 E. 5500,5700.
70. NStreme works only on 40mhz Channel width True False.
71. You have to connect to a RouterBOARD without any previous configuration. Select all possibilities to connect and do some basic configuration. A. Serial Connection B. MAC-Winbox C. Attach-monitor/keyboard D. Telnet.
72. It is necessary to configure a local DNS server to be able to give out a DNS setting to clients via DHCP server True False.
73. Which option in the configuration of a wireless card must be disabled to cause the router to permit ONLY known clients listed in the access Default Forward Enable Access List Default Authenticate Security Profile .
74. MikroTik RouterOS commands can be run once a day by: /system cron /system watchdog /system scheduler .
75. Mark correct statements. Export files are not editable Backup files are not editable Backup files are editable .
76. Mark possible TCP states in the connection tracking table New Syn Related Invalid Estabilished Closed.
77. What packages allow ROS to perform static routing? system routing multicast wireless.
78. When sending out an ARP request, an IP host is expecting what kind of address for an answer? VLAN ID IP Address MAC Address 802.11g .
79. Which of the following actions are available for '/ip firewall mangle' (select all valid actions) Change MSS Mark Connection Accept Jump Drop Mark Packet .
80. What is the maximum number of ARP entries on a Mikrotik RouterOS device ? Unlimited 2048 8192 10240.
81. You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or CDP. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions to accomplish this Remove/Disable all interfaces under mac-server telnet Remove/Disable all discovery interfaces Remove/Disable all interfaces under mac-Server winbox Add a Deny All input firewall rule Remove/Disable the Interfaces Place a proper forward firewall rule to block mac discovery Place a proper input firewall rule to block mac discovery .
82. What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server? Redirect Dst-nat Passtrough Tarpit.
83. To be able to do NAT the connection tracking does not need to be enabled True False.
84. Which port does PPTP use by default? UDP 1723 TCP 1723 UDP 1721 TCP 1721 .
85. What will happen if "Default forward" is disabled in wireless menu on a RouterOS AP? Only clients with matching access control list rule will be able to connect to the AP AP will not be able to connect to the clients Clients will not be able to connect to each other Clients will not be able to connect to the AP .
86. In the Route List, the identification DAb for a route stands for direct - active - bgp direct - acknowledge - backup dynamic - active - bgp dynamic - active – backup .
87. Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33. Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. ¨ Client 10.10.0.33 is be able to obtain 4M upload/download 0M upload/download 2M upload/download 6M upload/download .
88. What does the firewall action "Redirect" do? Select all true statements Redirects a packet to a specified IP Redirects a packet to a specified port on the router Redirects a packet to a specified port on a host in the network Redirects a packet to the router .
89. If you wish to block user access to MSN messenger, which chain should the firewall rule be placed in? input output forward process.
90. /interface wireless access-list is used for Authenticate Hotspot users Contains the security profiles settings Shows a list of Client's MAC Address that are already registered at AP Handles a list of Client's MAC Address to permit/deny connection to AP .
91. There can be more than one PPPoE server in a single broadcast domain: True False.
92. In which situations Netinstall can not be used to install RouterOS on a RouterBOARD? The router does not have an operating system The password of the router is not known The router is connected only to a secondary Ethernet port The router is connected only to a wireless network.
93. Select true statements about Mikrotik RouterOS backup file: Files from /files are included in the backup file /user menu usernames and passwords are saved in the backup file Entire router configuration is saved Backup file is editable .
94. It is possible to create an encrypted PPPoE tunnel in RouterOS True False.
95. Which options should be used when you want to prevent access from one specific address to your router web WWW service from IP Services Firewall Filter Chain Input Firewall Filter Chain Forward Group setting for System users.
96. In case when router login password is lostm it is necessary to reinstall RouterOS or use hardware reset function. True False.
97. WPA 2 Pre Shared key (PSK) is enabled on AP, all your clients have to use the same PSK. Only Virtual AP could be used to allow clients to connect with a different PSK True False.
98. You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured? Set “Shared Users” option at /ip hotspot It’s not possible Set “only-one=no’ at /ip hotspot Set “Shared Users” option at /ip hotspot user profile .
99. Using wireless connect-list it’s possible to prioritize connection to one Access Point over another Access Point by changing the order of the entries. True False.
100. How many DHCP servers could you run on one interface? 255 1024 4 1.
101. What configuration is added by /ip hotspot setup command? (select all that apply) /ip hotspot user /queue tree /ip service /ip dhcp-server /ip hotspot walled-garden .
102. Router has Wireless and Ethernet client interfaces, all client interfaces are bridged. To create a DHCP service for all clients you must configure DHCP server on only on bridge interface every bridge port DHCP service is not possible in this setup Ethernet and wireless interfaces .
103. The first two rules in the forward chain of the filter table are: /ip firewall filter add chain=forward connection-state=established action=accept /ip firewall filter add chain=forward connection-state=invalid action=drop Connection-state=related packets are not filtered by the rules above: True False.
104. A routing table has following entries: 0 dst-address=10.0.0.0/24 gateway=10.1.5.126 1 dst-address=10.1.5.0/24 gateway=10.1.1.1 2 dst-address=10.1.0.0/24 gateway=25.1.1.1 3 dst-address=10.1.5.0/25 gateway=10.1.1.2 Which gateway will be used for a packet with destination address 10.1.5.126? 10.1.1.1 10.1.1.2 10.1.5.126 25.1.1.1.
105. You want to skip HotSpot (authorization, accounting, etc.) for a specific host. What should you use? /ip hotspot ip-binding /ip hotspot walled-garden ip /ip hotspot walled-garden /ip address .
Which wireless mode allows you to connect to any standard AP (not only MikroTik) and to be able to bridge this wireless interface to an Ethernet? station bridge station-pseudobridge station-wds.
Which configuration menu should you use to change router's Winbox default port? /ip service /ip firewall service-ports /ip firewall filter /system resource.
What kind of users are listed in the "/user" menu in routerOS? pptp users hotspot users router users wireless user.
To make all DNS requests coming from your network to resolve on your router (regardless of the clients configuration), whichc action would you specify for the DST-NAT rule? masquerade dst-nat you can’t use DST-NAT to achieve this redirect.
Possible actions of ip firewall filter are: tarpit tarp bounce add-to-adress-list log accept.
PPP Secrets are used for L2TP clients Router users PPtP clients IPSec clients PPPoE clients PPP clients.
112. OSPF area ID does not need to be unique within the AS False true.
113. What wireless mode can be used to configure wds ap-bridge nstreme-dual-slave bridge station-wds station.
114. Check all of the DHCP Server Options that are implemented for DHCP-Client and not Custom WINS Server ntp server DNS Server subnet mask tftp gateway.
115. You will store the website that has been visited into a log of web proxy. Which is the correct configuration /system logging add topics=web-proxy, debug action=memory /system logging add topics=web-proxy, !debug action=memory /system logging add topics=web-proxy, !debug action=remote /system logging add topics=web-proxy, !debug action=disk.
116. Mark queue type that uses fairness principle between sub-queues, allows users to choose classifier queues, and apply a limit to each sub-queue SFQ RED PCQ BFIFO.
117. Which features are removed when advanced-tools package is uninstalled neighbours ip-scan netwatch LCD support ping bandwidth-test.
118. Rate Flapping can be avoided by Choose larger channels (40 MHz instead of 20 MHz) Reduce supported rates change ap-bridge to Bridge Set basic rates to only one data rate like 24Mbps.
119. Mark possible connection states in the connection tracking table Related Invalid Closed Established Syn New.
120. In IP Firewall NAT, you can classify traffic in SRC nat chain based on „in-interface“ True false.
To use masquerade, you need to specify action=masquerade, out-interface, chain=src-nat action=accept, out-interface, chain=src-nat action=masquerade, in-interface, chain=src-nat action=masquerade, out-interface, chain=dst-nat.
122. Is it possible to limit how many clients are able to connect to an access point? Yes, but only with access-lists No, it’s not possible at all Yes.
123. A backup file from MikroTik router is stored in plain text format true false.
124. In RouterOS queue configurations the word „total“ usually represents download upload + download download - upload upload.
125. Choose correct statements for MikroTik proxy Controls domains or servers which are allowed to cache by Proxy To deny access to a specific website, caching should be enabled Destination NAT rule is required to utilize transparent proxy facility Can deny access to a specific domains or servers, but not specific web pages.
126. What can be used as „target-adress“ in the simple queue server’s adress client’s adress client’s MAC adress adress list name.
127. What is the minimal possible wireless configuration to create AP ssid DFS mode radio name scan-list band WDS Frequency mode.
128. What is marked by connection-state=established matcher Packet begins a new TCP connection Packet does not correspont do any known connection Packet is related to, but not part of an existing connection Packet belongs to an existing connection, for example a reply packet or a packet.
129. There are two routes in the routing table
0 dst-addr=10.1.1.0/24 gateway=5.5.5.5
1 dst-addr=10.1.1.4/24 gateway=5.6.6.6
Which gateway will be used to get to the IP adress 10.1.1.6
both, half of the traffic will be routed through one gateway, half through the other the required route is not in the routing table 5.5.5.5 5.6.6.6.
130. Hotspot ip-binding is used to allow access to Internet web servers specifing the IP address of the web server instead of the URL true false.
131. When viewing the routes in Winbox, some routes will show „DAC“ in the first collumn: Dynamic, Available, Created Dynamic, Active, Console Direct, Available, Connected Dynamic, Active, Connected.
132. You have a wireless interface with SSID=“WAN1“ mode=“ap-bridge“ and a VirtualAP with SSID=“VAP1“ on the router. Is it possible to use nstreme protocol. No, Nstreme can not be used on wireless interface if a VirtualAP is on it Yes, but Nstreme can be used only for SSID=VAP1 Yes, but Nstreme can be used only for SSID=WLAN1 Yes, Nstreme can be used for both SSIDs.
133. /store allows you to save to external disk web-proxy data system configuration dude data User-Manager data.
134. You need to redirect a browser page from search of „xxx“ in google to another website.
For example: www.mikrotik.com
Choose correct proxy access rule
/ip proxy access add dst-host=*.google.* path=*xxx* action=deny redirectto=www.mikrotik.com /ip proxy access add path=*xxx* action=allow redirect-to=www.mikrotik.com /ip proxy access add dst-host=*xxx* action=allow redirect-to=www.mikrotik.com /ip proxy access add dst-host=*xxx* action=deny redirect-to=www.mikrotik.com.
135. Collisions are possible in full-duplex Ethernet networks true false.
136. Which rule is used to block SMTP protocol from Lan interface for clients /ip firewall filter add chain=forward protocol=tcpdst-port=25 action=drop in-interface=Lan /ip firewall filter add chain=input protocol=tcp dst-port=25 action=drop in-interface=Lan /ip firewall filter add chain=forward dst-port=25 action=drop in-interface=Lan /ip firewall filter add chain=output protocol=tcpdst-port=25 action=drop in-interface=Lan.
A client uses a RouterBoard1000. The clock is configured in „/system clock“. The clock resets to default after each reboot.Select the best solution for the problem. Configure '/system ntp server' and set a valid and reachable NTP client address. Configure '/system ntp client' and set a valid and reachable NTP server address. Write a script in '/system script' to set the clock Open the router and ensure the CMOS battery is fine.
138. Define a routing loop situation where the TTL of the packet expires situation where the packet is routed through the same router twice Situation where the packet does not reach it\'s destination situation where the packet is routed through the same sequence of routers until the TTL expires.
139. Which of the following would prevent unknown clients from connecting to your AP? Choose the BEST answer: . Uncheck "Default Authenticate" in the wireless card configuration, and add each known client's MAC address to your access-list configuration ensuring that you enable "authenticate" in the entry Add each known client's MAC address to your access-list configuration is the only step needed Configure the radius server under "/radius" Check the "Do not permit unknown client" box in the wireless configuration Uncheck "Default Authenticate" in the wireless card configuration, and add each known client's MACaddress to your connect-list configuration.
140. You want to share the same user and password for different computers. Whichc menu is used for configuration? /ip hotspot walled-garden /ip hotspot user profile /ip hotspot profile /ip hotspot ip-binding.
You can not use OSPF and RIP routing protocols simultaneously on the RouterOS False True.
142. When adding a user to your local ppp secrets/ppp profiles database, it is possible to Allow/deny use of more than one login by this user Set max values for total transferred bytes (up- and download) Allow login by pppoe and pptp, but deny login by l2tp Deny services (like telnet) only for this user or for one group of users Allow only pppoe login.
143. What is true about Bandwidth Test tool (select all that apply) Only work on MikroTik Router OS Can be downloaded on default router webpage Tests throughput between two MikroTik devices Can be used to monitor throughput to a remote device.
144. Action=redirect can be used in NAT chain src-nat True False.
145. Mark all packages required for PPPoE server on MikroTikRouterOs synchronous radius user manager ppp system.
146. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to public. Whichc of the following configuration steps should be met A route between the NAT Router and the webserver must exist Connection Tracking must be enabled on NAT router LAN address of the webserver should be routable on the internet in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver Public IP address of the webserver must be installed on the NAT Router.
147. What action should be used to inform source that packets reached destination, but was not accepted? action=accept action=drop action=tarpit action=reject.
148. In whichc order are the entries in Access List and Connect List processed? By Signal Strength Range In sequence order In a random order By interface name.
Two mangle rules defining different mangle marks for the same traffic type, will make it have both mangle marks. False True.
150. When adding a static route, you must always ensure that you add both the gateway and the interface True False.
151. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P RJ45 functioning cable. The device is configured with an Ipv4 address of 192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid Ipv4 address for the RouterBOARD 750 for a successfull connection for the device 192.168.100.68/255.255.255.252 192.168.100.69/255.255.255.252 192.168.100.71/255.255.255.252 192.168.100.70/255.255.255.252.
152. The gateway router is configured with a transparent proxy with the following parameters: /ip proxy access add dst-host=www.mikrotik.com action=allow /ip proxy access add dst-host=www.mt.lv action=deny redirect-to=forum.mikrotik.com When the user is opening www.mt.lv, what is shown in the browser? www.mt.lv forum.mikrotik.com www.mikrotik.com.
153. Hotspot can be configured on a Virtuall AP interface True False.
154. Wireless clients (mode=station) will work properfly if bridged to ethernet False True.
155. Where should you upload new MikroTik RouterOS version packages for upgrading router? Any directory in /files System Backup menu FTP root directory or /files directory of the router System Package menu.
156. Is it possible to create a custom firewall chain and use it in both input and forward chains at the same time? True False.
157. What kind of users are listed in the „/users“ menu hotspot users wireless users router users pptp users.
158. Is action=masquerade allowed in chain=dstnat yes no yes, but it works only for incoming connections yes, but only if dst-addr is specified.
159. MikroTik RouteROS is sending logs to an external syslog server. Whichc protocol and port is used by RouterOs for sending logs (by default)? UDP 514 UDP 21 TCP 110 UDP 113.
160. When „Cache on Disk“ is not checked under the web proxy settings, where does the data get stored? RAM (Memory) System Disk USB Disk It does not get stored.
161. Which options are correct? DST-NAT to define new destination address in our local network for incoming packets SRC-NAT to prevent local network clients access to outside SRC-NAT to prevent access from outside to our local network clients DST-NAT to redirect all packets to router itself.
162. There is an HTTP server 10.0.0.1 in your private network. You have made a DST-NAT rule that sends all HTTP traffic recieved on your router’s address 80.232.50.100 to this server. If you make a firewall rule on the router to disallow address 159.148.20.30 to communicate with the server, how would you identify this communication in this rule src-address=80.232.50.100 dst-address=10.0.0.1 src-address=159.148.20.30 dst-address=80.232.50.100 src-address=159.148.20.30 dst-address=10.0.0.1 src-address=80.232.50.100 dst-address=159.148.20.30.
163. A station can connect to AP if they both use different country regulation settings, but the frequency chosen is allower in both countries. True False.
164. Making use of a narrower channel width such as 10MHz or 5MHz will increase your wireless link speed True False.
165. MikroTik proxy features are SMTP caching DNS name filtering FTP caching POP3 caching HTTP caching.
166. Which software version can be installed onto the followin RouterBoard types? routeros-powerpc-x.xx.npk on a RB333 routeros-mipsbe-x.xx.npk on a RB133 routeros-mipsle-x.xx.npk on RB133 routeros-x86-x.xx.npk on a RB1100 routeros-mipsbe-x.xx.npk on a RB433.
167. While troubleshooting a network from insde the network, you discover that you can ping thegateway reliably, but you cannot browse the Internet. Skype, however, works flawlessly. What is the most likely issue? Network card and/or cable is not working The computer did not get an IP address Masquerading rule is not applied DNS is not available.
168. What does this simple queue do (check the image) Queue guarantees download data rate of one megabit per second for host 192.168.1.10 Queue guarantees upload data rate of one megabit per second for host 192.168.1.10 Queue limits host 192.168.1.10 download data rate to one megabit per second. Queue limits host 192.168.1.10 upload data rate to one megabit per second.
169. Action=redirect could be used to redirect a client’s traffic to a specific mailserver False True.
170. How many wireless clients can connect, when wireless card is configured to mode=bridge? 2007 100 2 1.
171. The RouterOS graphing is used for bandwidth testing bandwidth limitation real-time traffic and resource usage display average traffic and resource usage display.
|
