11/28/2019 MikroTik Routers and Wireless

Search...

home about buy jobs hardware software support training account

Logout Abans

[Back To Main Menu]

00:00:16
last save: 2019-11-28 09:11:46

Translate to Bahasa indonesia : OFF

1. You need to allow HTTP access to www.mikrotik.com for all HotSpot users without authorization. What should you use?

A. /ip hotspot walled-garden ip

B. /ip hotspot ip-binding

C. /ip hotspot walled-garden

D. /ip hotspot user

2. What is the correct sequence of parameters, when adding routes in "/ppp secret"

A. [network] [metric]

B. [gateway] [metric] [network]

C. [network] [gateway] [metric]

3. What is the meaning of letter "R" on an active session in the menu PPP Active Connections?

A. Remote

B. Radius

C. Running

4. Which protocol(s) and port(s) needs to be opened in a firewall setup for an IPSec ESP tunnel to be established and for traffic to flow?

A. UDP port 500 and IP protocol 50

B. IP protocol 51

C. UDP port 1701

D. TCP port 1723 and IP protocol 47

5. What is necessary for PPPoE client configuration?

A. Static IP address on PPPoE client interface

B. ip firewall nat masquerade rule

C. Interface (on which PPPoE client is going to work)

6. Router C gets its public IP address and default route through a PPPoE tunnel with Router B.

Router A has a L2TP VPN Tunnel between its public IP Address and the public IP address of Router C.

What is the Maximum MTU that can be configured on the L2TP Tunnel? So that no packet fragmentation will occur due to Encapsulation
overhead?

A. 1400 bytes

B. 1600 bytes

C. 1436 bytes

D. 1448 bytes

E. 1488 bytes

F. 1452 bytes

G. 1460 bytes

H. 1420 bytes

I. 1500 bytes

https://mikrotik.com/client/training&training_id=39667&training=certification&participant=528274&start_test=1&code=78d95e41eb 1/4
11/28/2019 MikroTik Routers and Wireless

7. There are 23 HotSpot users and 14 PPPoE users in your network, you want to manage them by User Manager. Which RouterOS level should be
on the router for the number of users?

A. Demo License level

B. 4

C. 3

D. 5
00:00:16
8. When using MikroTik-Group attribute on RADIUS/User Manager server, which attributes for the users can be specified:
last save: 2019-11-28 09:11:46

A. HotSpot profile for HotSpot users

B. PPP default profile name for PPP users

C. RouterOS user default /user group

D. Security Profile for Wireless users

9. What configuration is added by /ip hotspot setup command? (select all that apply)

A. /queue tree

B. /ip dhcp-server

C. /ip hotspot user

D. /ip service

E. /ip hotspot walled-garden

10. Choose the best option to offer hotspot access to a known wireless client without HotSpot authentication

A. place Client registered MAC address in access list

B. /ip hotspot ip-binding

C. /ip firewall mangle

D. /ip hotspot walled garden

11. What is the maximum size of a packet that is able to cross an L2TP tunnel, that runs over a PPPoE tunnel with MLPPP enabled?

A. Same as MRRU

B. 1452 bytes

C. 1480 bytes

D. 1500 bytes

E. 1440 bytes

F. Same as MTU

12. Setting /radius incoming set accept=yes will allow your router to act as radius proxy, and accept incoming Authorization queries from other
routers

true

13. You have selected service ppp in /radius configuration to authenticate using User Manager.

What type of users will be sent to User Manager for authentication?

A. L2TP

B. RouterOS users

C. PPP

D. Hotspot

E. Wireless

F. PPPoE

G. PPTP

14. What has to be configured to allow multiple logins for same hotspot user from different hosts?

A. Set \"only-one=no\' at /ip hotspot

B. Set \"Shared Users\" option at /ip hotspot

https://mikrotik.com/client/training&training_id=39667&training=certification&participant=528274&start_test=1&code=78d95e41eb 2/4
11/28/2019 MikroTik Routers and Wireless

C. It\'s not possible

D. Set \"Shared Users\" option at /ip hotspot user profile

15. To customise the look of the hotspot login page, you can edit

A. alogin.html

B. template.html

C. login.html 00:00:16
D. redirect.html last save: 2019-11-28 09:11:46

16. How can mangle rules be applied to dynamically created PPTP client interfaces (select all that apply):

A. By enabling the 'PPTP Use Firewall' setting in the associated PPP Profile

B. By using 'all ppp' as the mangle 'In interface'

C. It is not possible to do this

D. By using the Address List feature in the associated PPP Profile

17. Which menu is used for configuration to share the same HotSpot user and password for different computers at the same time?

A. /ip hotspot ip-binding

B. /ip hotspot walled-garden

C. /ip hotspot user profile

D. /ip hotspot profile

18. When setting up a server, PPP Secrets are used for:

A. PPTP clients

B. Router users

C. IPsec clients

D. PPP clients

E. L2TP clients

F. PPPoE clients

19. Select which of the following can be managed by the User Manager:

A. SNMP community management

B. Hotspot user management

C. RADIUS client authentication

D. PPP authentication

E. RouterOS user management

F. DHCP lease management

20. Multiple PPPoE servers are installed in your network. You want to support central user management by using MikroTik User Manager. Select
the most appropriate answers.

A. User Manager can be installed on one of PPPoE servers

B. You have to install the User Manager package on all PPPoE servers

C. The User Manager server does not have to reach all PPPoE servers

D. You have to install the User Manager package on one system

21. You want to skip HotSpot (authorization, accounting, etc.) for a specific host. What should you use?

A. /ip hotspot ip-binding

B. /ip hotspot walled-garden ip

C. /ip hotspot walled-garden

D. /ip address

22. You need to open SSH service on HotSpot server for unauthorized users. Which rule do you need to configure ?

A. /ip service enable ssh enabled=yes

https://mikrotik.com/client/training&training_id=39667&training=certification&participant=528274&start_test=1&code=78d95e41eb 3/4
11/28/2019 MikroTik Routers and Wireless

B. /ip hotspot walled-garden add dst-port=22 action=allow

C. /ip firewall filter add action=accept chain=hs-unauth dst-port=22 protocol=tcp , /ip firewall filter add
action=accept chain=hs-uanuth-to src-port=22 protocol=tcp

D. /ip hotspot walled-garden ip add protocol=tcp dst-port=22 action=allow

23. Select true statements from the following statements about IPsec:

A. IPsec ESP can only operate in tunnel mode

00:00:16
B. IPsec AH on its own can provide encryption facility for data
last save: 2019-11-28 09:11:46
C. IPsec ESP only provides encryption there is no message integrity check

D. Standard DES encryption algorithm is cryptographically weak and should not be deployed anymore

E. IPsec ESP can operate in tunnel mode and transport mode

F. IPsec AH provides no encryption facility for data, it only checks message integrity

24. HotSpot is installed with a single address-pool. You want to equalize the bandwidth between clients, dividing them in two groups (free users
and paying-users). Select the most appropriate answer.

A. It is possible by dynamic address list and marking connection/packets by this address-list. Appropriate PCQ
queues are created for both groups.

B. Impossible with one address-pool

C. It is possible by using only half pool for one group, the half pool is sorted by mangle. Set appropriate queue
with wireless-default type.

25. What is the shared-secret parameter on User Manager?

A. It's a passphrase shared between client and radius

B. It's a numeric number only shared between client and radius

C. It is the password to access the user manager interface for customers

D. This is the password for both PPPoE and HotSpot users

E. This is the password for PPPoE users only

F. This is the password for HotSpot users only

© Mikrotik : RouterBOARD : Forum : MUM : Training : Wiki : Newsletters : Twitter

https://mikrotik.com/client/training&training_id=39667&training=certification&participant=528274&start_test=1&code=78d95e41eb 4/4