PAKET 3

1.A network ready device is directly connected to a MikroTik RouterBOARD 750 with a
correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of
192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address
for the RouterBOARD 750 for a successful connection to the device?
1/1
a. 192.168.100.70/255.255.255.252
b. 192.168.100.69/255.255.255.252
c. 192.168.100.71/255.255.255.252
d. 192.168.100.68/255.255.255.252

2. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by using

an address subnet of:
0/1
a. /31
b. /29
c. /32
d. /30

3. Which computers would be able to communicate directly (without any routers involved)
0/1
a. 192.168.17.15/29 and 192.168.17.20/28
b. 192.168.0.5/26 and 192.168.0.100
c. 10.5.5.1/24 and 10.5.5.100/25
d. 10.10.0.17/22 and 10.10.1.30/23

4. How many IP addresses can one find in the header of an IP packet?

1/1
a. 1
b. 3
c. 2
d. 4

5. The network address is

1/1
a. The first usable address of the subnet
b. The last address of the subnet
c. The first address of the subnet

6. What is term for the hardware coded address found on an interface?

1/1
a. IP Address
b. MAC Address
c. FQDN Address
d. Interface Address

7. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?

1/1
a. 512
b. 510
c. 508
d. 254

8. Is ARP used in the IPv6 protocol ?

1/1
False

True

9. Which of the following protocols / port s are used for SNMP. (Simple Network
Management Protocol)
0/1
a. TCP 162
b. UDP 162
c. UDP 161
d. TCP 25
e. TCP 123
f. TCP 161

10. If ARP=reply-only is configured on an interface, what will this interface do

1/1
a. Accept all IP/MAC combinations listed in /ip arp as static entries
b. Accept all IP addresses listed in /ip arp as static entries
c. Add new MAC addresses in /ip arp list
d. Accept all MAC-addresses listed in /ip arp as static entries
e. Add new IP addresses in /ip arp list

11. Select which of the following are ‘Public IP addresses’:

a. 192.168.0.1
b. 172.168.254.2
c. 172.28.73.21
d. 10.110.50.37
e. 11.63.72.21

12. Which of the following IP addresses are publicly routable?

a. 127.34.155.3
b. 192.168.1.4
c. 172.16.13.23
d. 11.3.10.4

13. If ARP=reply-only is enabled on one router interface, router can add dynamic ARP
entries for the particular interface.
1/1
False

True
14. The basic unit of a physical network (OSI Layer 1) is the:
1/1
a. Header
b. Byte
c. Bit
d. Frame

15. Which ones of the following are valid IP addresses?

a. 192.168.13.255
b. 10.10.14.0
c. 192.168.256.1
d. 1.27.14.254

16. How many usable IP addresses are there in a 20-bit subnet?

1/1
a. 2046
b. 2047
c. 4094
d. 4096
e. 2048

17. Which of the following is NOT a valid MAC Address?

1/1
a. 13:16:86:53:89:43
b. 78:3F:AA:67:G3:5D
c. 88:0C:00:99:5F:EF
d. EA:BA:AA:EE:FF:CB
e. 95:B5:DD:EE:78:8A

18. MAC layer by OSI model is also known as

1/1
a. Layer 3
b. Layer 7
c. Layer 1
d. Layer 2
e. Layer 6

19. Select valid MAC-address

1/1
a. G2:60:CF:21:99:H0
b. 11:10:5E:80:EE:B0
c. AEC8:21F1:AA44:54FF:1111:DD
d. AE:0212:1201
e. 192.168.0.0/16

20. How many layers does Open Systems Interconnection model have?
1/1
a. 7
b. 6
c. 5
d. 12
e. 9

21. Action=redirect is applied in

1/1
a. chain=srcnat
b. chain=dstnat
c. chain=forward

22. You have 802.11b/g wireless card. What frequencies are available to you?
1/1
a. 5800MHz
b. 2412MHz
c. 5210MHz
d. 2422MHz
e. 2327MHz

23. Mark all correct statements about /export (rsc file).

0/1
a. Exports logs from /log print
b. Exports full configuration of the router
c. Exports only part of the configuration (for example /ip firewall)
d. Exports scripts from /system
e. Exports files could not edited

24. What wireless card can we use to achieve 100 Mbps actual wireless throughput?
1/1
a. 802.11 b/g

b. 802.11 a/b/g
c. 802.11 a
d. 802.11 a/n
e. 802.11 a/b/g/n

25. It is possible to add user-defined chains in ip firewall mangle

True

False

26. Choose all valid hosts address range for subnet 15.242.55.62/27
1/1
a. 15.242.55.31-15.242.55.62
b. 15.242.55.32-15.242.55.63
c. 15.242.55.33-15.242.55.62
d. 15.242.55.33-15.242.55.63
27. Action=redirect allows you to make
a. Transparent DNS Cache
b. Forward DNS to another device IP address
c. Enable Local Service
d. Transparent HTTP Proxy

28. Which is correct masquerade rule for 192.168.0.0/24 network on the router with outgoing
interface=ether1?
a. /ip firewall nat add action=masquerade chain=srcnat
b. /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24
c. /ip firewall nat add action=masquerade out-interface=ether1 chain=dstnat
d. /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1

29. What letters appear next to a route, which is automatically created by RouterOS when
user adds a valid address to an active interface?
1/1
a. I
b. D
c. A

d. S
e. C

30. Mark all features that are compatible with Nstreme

a. WDS between a device in station-wds mode and a device in station-wds mode
b. Encryption
c. WDS between a device in ap-bridge mode with a device in station-wds mode
d. Bridging a device in station mode with a device in ap-bridge mode

31. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not
recognized, and it’s a driver issue?
1/1
a. Yes
b. No

32. For static routing functionality, additionally to the RouterOS system package, you will
also need the following software package:
a. none
b. dhcp
c. routing
d. advanced-tools

33. Which are necessary sections in /queue simple to set bandwidth limitation?
1/1
a. target-address, max-limit
b. target-address, dst-address, max-limit
c. target-address, dst-address
d. max-limit
34. What protocol is used for Ping and Trace route?
1/1
a. DHCP
b. IP
c. TCP
d. ICMP - ping
e. UDP – trace route

35. From which of the following locations can you obtain Winbox?
a. Router’s webpage
b. Files menu in your router
c. Via the console cable
d. mikrotik.com

36. Two hosts, A and B, are connected to a broadcast LAN. Select all the answers showing
pairs of IP address/mask which would allow IP connections to be established between the two
hosts.
0/1
a. A: 10.1.2.66/25 and B: 10.1.2.109/26
b. A: 10.2.2.1/23 and B: 10.2.0.1/22
c. A: 10.1.2.192/24 and B: 10.1.2.129/26
d. A: 10.2.1.0/23 and B: 10.2.0.1/22

37. Why is it useful to set a Radio Name on the radio interface?

1/1
a. To identify a station in a list of connected clients
b. To identify a station in the Access List
c. To identify a station in Neighbor discovery

38. What kind of users are listed in the Secrets window of the PPP menu?
0/1
a. pptp users
b. l2tp users
c. winbox users
d. wireless users
e. pppoe users
f. hotspot users

39. Router A and B are both running as PPPoE servers on different broadcast domains of
your network. Is it possible to set Router A to use “/ppp secret” accounts from Router B to
authenticate PPPoE customers ?
0/1
Yes
No

40. MikroTik RouterOS DHCP client can receive following options

0/1
a. Byte limit
b. IP Gateway
c. Rate limit
d. Uptime limit
e. IP Address and Subnet

41. If you need to make sure that one computer in your HotSpot network can access the
Internet without HotSpot authentication, which menu allows you to do this?
1/1
a. Users
b. IP bindings
c. Walled-garden
d. Walled-garden IP

42. How many different priorities can be selected for queues in MikroTik RouterOS?
0/1
a. 8
b. 16
c. 0
d. 1

43. Which default route will be active? /ip route add disabled=no distance=10 dst-
address=0.0.0.0/0 gateway=1.1.1.1 add disabled=no distance=5 dst-address=0.0.0.0/0
gateway=2.2.2.2
1/1
a. Route via gateway 1.1.1.1
b. Route via gateway 2.2.2.2

44. How long is level 1 (demo) license valid?

1/1
a. 24 hours
b. Infinite time
c. 1 month
d. 1 year

45. Is ARP used in the IPv6 protocol ?

1/1
True
False

46. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by

using an address subnet of:
0/1
a. /30
b. /29
c. /32
d. /31
47. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP
address on gateway. When the PC Ethernet card failed, the user change it with a new card
and set the same IP for it. What else should be done?
0/1
a. Old static ARP entry on gateway has to be updated for the new card
b. Nothing – it will work as before
c. MAC-address of the new card has to be changed to MAC address of old card
d. Another IP has to be added for Internet access

48. How many usable IP addresses are there in a 20-bit subnet?

1/1
a. 2047
b. 4096
c. 2048
d. 2046
e. 4094

49. What is the default TTL (time to live) on a router that an IP packet can experience before
it will be discarded ?
1/1
a. 60
b. 30
c. 1
d. 64

50. The network address is

a. The first usable address of the subnet
b. The last address of the subnet
c. The first address of the subnet

51. Which ones of the following are valid IP addresses?

a. 192.168.13.255
b. 1.27.14.254
c. 10.10.14.0
d. 192.168.256.1

52. Which of the following is NOT a valid MAC Address?

1/1
a. 95:B5:DD:EE:78:8A
b. 13:16:86:53:89:43
c. 99:GF:AA:67:13:5D
d. 88:0C:00:99:5F:EF
e. EA:BA:AA:EE:FF:CB

53. If ARP=reply-only is configured on an interface, what will this interface do

0/1
a. Add new IP addresses in /ip arp list
b. Accept all IP/MAC combinations listed in /ip arp as static entries
c. Accept all MAC-addresses listed in /ip arp as static entries

d. Add new MAC addresses in /ip arp list

e. Accept all IP addresses listed in /ip arp as static entries

54. What is term for the hardware coded address found on an interface?
a. IP Address
b. Interface Address
c. MAC Address
d. FQDN Address

55. Which of the following IP addresses are publicly routable?

1/1
a. 127.34.155.3
b. 192.168.1.4
c. 172.16.13.23
d. 11.3.10.4

56. What protocol does ping use?

1/1
a. UDP
b. TCP
c. ARP
d. ICMP

57. MAC layer by OSI model is also known as

1/1
a. Layer 3
b. Layer 7
c. Layer 2
d. Layer 6
e. Layer 1

58. How many layers does Open Systems Interconnection model have?
a. 12
b. 6
c. 9
d. 5
e. 7

59. How many IP addresses can one find in the header of an IP packet?
0/1
a. 3
b. 4
c. 1
d. 2

60. The basic unit of a physical network (OSI Layer 1) is the:

1/1
a. Byte
b. Frame
c. Bit

d. Header

61. You have a router with configuration |||- Public IP :202.168.125.45/24 |||- Default
gateway:202.168.125.1 |||- DNS server: 248.115.148.136, 248.115.148.137 |||- Local IP:
192.168.2.1/24 ||| Mark the correct configuration on client PC to access to the Internet
1/1
a. IP:192.168.0.1/24 gateway:192.168.2.1
b. IP:192.168.2.253/24 gateway:202.168.0.1
c. IP:192.168.1.223/24 gateway:248.115.148.136
d. IP:192.168.2.115/24 gateway: 192.168.2.1

e. IP:192.168.2.2/24 gateway:202.168.125.45

62. On the advanced menu of the wireless setup there is a parameter called “Area”, it works
directly with:
1/1
a. Connect List

b. Access List
c. Security Profile

63. What menus should be used to allow certain websites to be accessed from behind a
hotspot interface, without client authentication
0/1
a. ip hotspot ip-binding
b. ip hotspot profile

c. ip hotspot walled-garden
d. ip hotspot walled-garden ip
Jawaban yang benar
a. ip hotspot ip-binding

64. You want to use PCQ and allow 256k maximum download and upload for each client.
Choose correct argument values for the required queue.
0/1
a. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address
b. kind=pcq pcq-limit=256000 pcq-classifier=dst-address
c. kind=pcq pcq-limit=5000000 pcq-classifier=src-address
d. kind=pcq pcq-limit=256000 pcq-classifier=src-address

e. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address

Jawaban yang benar
b. kind=pcq pcq-limit=256000 pcq-classifier=dst-address
d. kind=pcq pcq-limit=256000 pcq-classifier=src-address

65. Which of the following is true for connection tracking

1/1
a. Enabling connection tracking reduces CPU usage in RouterOS
b. Connection tracking must be enabled for firewall to be effective

c. Connection tracking must be enable for NAT’ed network

d. Disable connection tracking for mangle to work

66. Which of these are possible solutions to bridge two networks over a wireless link:
0/1
a. Both devices in AP mode and enable WDS mode
b. One device in AP mode, another one in station-pseudobridge-clone
c. One device in AP mode, another one in station-pseudobridge
d. One device in AP mode, another one in station

Jawaban yang benar

a. Both devices in AP mode and enable WDS mode

67. When backing up your router by using the ‘Export’ command, the following happens:
0/1
a. Winbox usernames and passwords are backed up

b. The Export file can be edited with a standard text editor after its creation
c. You are requested to give the export file a name
Jawaban yang benar
b. The Export file can be edited with a standard text editor after its creation
c. You are requested to give the export file a name

68. You need to reboot a RouterBoard after importing a previously exported rsc file to
activate the new configuration.
0/1
True

False
Jawaban yang benar
False

69. It is impossible to disable user “admin” at the menu “/user”

1/1
True
False

70. If a packet comes to a router and starts a new, previously unseen connection, which
connection state
1/1
a. no connection state would be applied to such packet
b. new

c. unknown
d. invalid
e. established

71. We have two radio cards in a point-to-point link with settings:Card Nr 1.: mode=ap-
bridge ssid=”office”frequency=2447 band=2.4ghz-b/g default-authentication=yes default-
forwarding=yes security-profile=wpaCard Nr 2.: mode=station ssid=”office”frequency=2412
band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2Is
Card Nr2. able to connect to Card Nr 1.?
a. Yes, if Nstreme is enabled or disabled on both
b. Yes, when security profile settings are compatible with each other and Nstreme is enabled
or disabled on both

c. No, because of the different frequencies

d. No, because of the different security profiles
Jawaban yang benar
d. No, because of the different security profiles

72. If you need to make sure that one computer in your HotSpot network can access the
Internet without HotSpot authentication, which menu allows you to do this?
1/1
a. Walled-garden IP
b. Walled-garden
c. Users
d. IP bindings

73. Consider the following network diagram. In R1, you have the following configuration:/ip
routeadd dst-address=192.168.1.0/24 gateway=192.168.99.2/ip firewall natadd chain=srcnat
out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server
located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?
0/1
a. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10
action=drop

b. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10

action=drop
c. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10
action=drop
d. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.10
action=drop
Jawaban yang benar
b. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10
action=drop

74. What is the default protocol/port of (secure) winbox?

a. UDP/5678
b. TCP/8291
c. TCP/22 = ssh
d. TCP/8080 = proxy

75. Mark the queue types that are available in RouterOS

0/1
a. SFQ – Stochastic Fairness Queuing
b. DRR – Deficit Round Robin
c. FIFO – First In First Out (for Bytes or for Packets)
d. LIFO – Last In First Out
e. PCQ – Per Connection Queuing
f. RED – Random Early Detect (or Drop)

76. A network ready device is directly connected to a MikroTik RouterBOARD 750 with a
correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of
192.168.100.70 using a subnet mask of 255.255.255.252. What will be a valid IPv4 address
for the RouterBOARD 750 for a successful connection to the device?
0/1
a. 192.168.100.70/255.255.255.252
b. 192.168.100.69/255.255.255.252
c. 192.168.100.71/255.255.255.252
d. 192.168.100.68/255.255.255.252

77. How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?
0/1
a. 512
b. 510
c. 508
d. 254

78. Is ARP used in the IPv6 protocol ?

1/1
True
False

79. Which of the following protocols / port s are used for SNMP. (Simple Network
Managemnt Protocol)
0/1
a. TCP 162
b. UDP 162

c. UDP 161
d. TCP 25
e. TCP 123
f. TCP 161

80. Select which of the following are ‘Public IP addresses’:

1/1
a. 192.168.0.1
b. 172.168.254.2
c. 172.28.73.21
d. 10.110.50.37
e. 11.63.72.21

81. If ARP=reply-only is enabled on one router interface, router can add dynamic ARP
entries for the particular interface.
1/1
False
True

82. MAC layer by OSI model is also known as

0/1
a. Layer 3
b. Layer 7
c. Layer 1
d. Layer 2
e. Layer 6

83. Select valid MAC-address

1/1
a. G2:60:CF:21:99:H0
b. 00:00:5E:80:EE:B0
c. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201
d. 192.168.0.0/16

84. Which computers would be able to communicate directly (without any routers involved)
0/1
a. 192.168.17.15/29 and 192.168.17.20/28
b. 192.168.0.5/26 and 192.168.0.100
c. 10.5.5.1/24 and 10.5.5.100/25

d. 10.10.0.17/22 and 10.10.1.30/2

85. What kind of users are listed in the Secrets window of the PPP menu?
0/1
a. hotspot users
b. wireless users
c. l2tp users
d. pptp users
e. pppoe users
f. winbox users

86. What configuration is added by /ip hotspot setup command? (select all that apply)
0/1
a. /ip service
b. /ip hotspot user
c. /ip hotspot walled-garden
d. /ip dhcp-server
87. Using wireless connect-list it’s possible to prioritize connection to one Access Point over
another Access Point by changing the order of the entries.
0/1
a.False
b. True

88. If ARP=reply-only is configured on an interface, what will this interface do

0/1
a. Add new MAC addresses in /ip arp list
b. Accept all MAC-addresses listed in /ip arp as static entries
c. Add new IP addresses in /ip arp list
d. Accept all IP addresses listed in /ip arp as static entries
e. Accept all IP/MAC combinations listed in /ip arp as static entries

89. Router A and B are both running as PPPoE servers on different broadcast domains of
your network. It is possible to set Router A to use "/ppp secret" accounts from Router B to
authenticate PPPoE customers.
1/1
a. False
b. True

90. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not
recognized, and you suspect it is a driver issue?
0/1
a. Yes
b. No

91. What can be used as ’target-address’ in the simple queue?

1/1
a. client’s address
b. client’s MAC address
c. server’s address
d. address list name

92. MikroTik RouterOS is sending logs to an external syslog server. Which protocol and port
is used by RouterOS for sending logs (by default)?
0/1
a. UDP 514
b. UDP 21
c. UDP 113
d. TCP 110

93. Which route will be used to reach host 192.168.1.55? /ip route add disabled=no
distance=1 dst-address=192.168.1.0/24 gateway=1.1.1.1 add disabled=no distance=1 dst-
address=192.168.1.0/25 gateway=2.2.2.2 add disabled=no distance=1 dst-
address=192.168.0.0/16 gateway=3.3.3.3
1/1
a. Route via gateway 1.1.1.1
b. Route via gateway 3.3.3.3
c. Route via gateway 2.2.2.2

94. In which situations can Netinstall NOT be used to install a RouterBOARD?

0/1
a. The router does not have an operating system
b. The router is connected only to a wireless network
c. You do not know the password of the router
d. The router is connected only to a secondary Ethernet port

95. To use masquerade, you need to specify

a. action=accept, out-interface, chain=src-nat
b. action=masquerade, out-interface, chain=src-nat
c. action=masquerade, in-interface, chain=src-nat
d. action=masquerade, out-interface, chain=dst-nat

96. Please select valid scan-list values in interface wireless configuration:

0/1
a. 5560,5620-5700
b. 5640~5680
c. default,5560,5600,5660-5700
d. 5540,5560,5620+5700

97. When adding a static route, you must always ensure that you add both the gateway and
the interface.
0/1
False
True

98. You would like to allow multiple logins with one user name on a HotSpot server. How
should this be configured?
1/1
a. Set "Shared Users" option at /ip hotspot user profile
b. It's not possible
c. Set "Shared Users" option at /ip hotspot
d. Set "only-one=no' at /ip hotspot

99. In which order are the entries in Access List and Connect List processed?
0/1
a. In sequence order
b. In a random order
c. By Signal Strength Range
d. By interface name

100. Which is the default port of IP-Winbox?

0/1
a. TCP 8291
b. TCP 80
c. UDP 8291
d. TCP 8192