Latihan Soal Mikrotik Academy MTCNA

 

1. There are two routes in the routing table: 0 dst-addr=10.1.1.0/24 gateway=5.5.5.5 1 dst-addr=10.1.1.4/30 gateway=5.6.6.6 Which gateway will be used to get to the IP address 10.1.1.6?

0/2

A. both - half of the traffic will be routed through one gateway, half through the other

B. 5.5.5.5

C. the required route is not in the routing table

D. 5.6.6.6

 

2. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply)

0/2

A. Public IP address of the webserver must be installed on the NAT Router

B. A route between the NAT Router and the webserver must exist

C. Connection Tracking must be enabled on NAT router

D. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver

E. LAN address of the webserver should be routable on the internet

 

3. What can be used as ’target-address’ in the simple queue?

2/2

A. client’s MAC address

B. server’s address

C. address list name

D. client’s address

 

4. Is it possible to limit how many clients are able to connect to an access point?

0/2

A. No it's not possible at all

B. Yes, but only with access-lists

C. Yes

 

 

5. PPP Secrets are used for

0/2

A. PPP clients

B. L2TP clients

C. IPSec clients

D. PPtP clients

E. PPPoE clients

F. Router users

 

6. In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?

0/2

A. The router is connected only to a secondary Ethernet port

B. The router does not have an operating system

C. The router is connected only to a wireless network

D. The password of the router is not known

 

7. It is possible to create an encrypted PPPoE tunnel in RouterOS:

2/2

1. True

2. False

 

8. How many wireless clients can connect, when wireless card is configured to mode=bridge ?

2/2

A. 1

B. 100

C. 2007

D. 2

 

9. A DHCP server is configured on a LAN interface which is a port on a bridge. The DHCP server does not start. What could be the reason(s)?

0/2

A. The DHCP server can not run on an interface which is also a bridge port

B. There might not be an IP address assigned to the LAN Interface

 

C. The IP address pool could be incorrectly defined

D. There may be multiple IP addresses set on the LAN interface

 

10. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.

0/2

A. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=256000 pcq-classifier=src-address

 

D. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

E. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

 

11. In order to use dynamic keys in your wireless security profile for an AP, you MUST set up the dhcp server to provide the dynamic keys.

0/2

1. True

2. False

 

12. For static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:

2/2

A. no extra package required

B. advanced-tools

C. routing

D. dhcp

 

13. It is possible to have PPTP Client and PPTP server on one MikroTik router at the same time.

0/2

1. True

2. False

 

14. Which features are removed when advanced-tools package is uninstalled?

0/2

A. neighbors

B. LCD support

C. ip-scan

D. ping

E. netwatch

F. bandwidth-test

 

15. In which order are the entries in Access List and Connect List processed?

0/2

A. By Signal Strength Range

B. By interface name

C. In sequence order

D. In a random order

 

16. What does the firewall action "Redirect" do? Select all true statements

0/2

A. Redirects a packet to a specified port on the router

B. Redirects a packet to a specified IP

C. Redirects a packet to the router

D. Redirects a packet to a specified port on a host in the network

 

17. When using routing option 'check-gateway=ping' what is the ICMP echo request interval (in seconds)?

0/2

A. 30s

B. 20s

C. 10s

D. 60s

 

18. Which is the default port of IP-Winbox?

2/2

A. TCP 8192

B. TCP 80

C. TCP 8291

D. UDP 8291

 

19. Where can you monitor (see addresses and ports) real-time connections which are processed by the router?

0/2

A. Firewall Connection Tracking

B. Firewall Counters

C. Tool Torch

D. Queue Tree

 

20. You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do:

0/2

A. Export global configuration and remove everything apart from '/ip firewall filter'

B. Create backup only of '/ip firewall filter' rules

 

C. Create backup, edit backup file and restore on target router

D. Export only '/ip firewall filter'

 

21. PPP Secrets are used for

0/2

A. PPPoE clients

B. L2TP clients

C. IPSec clients

D. PPP clients

E. PPtP clients

 

23. DHCP server is configured on a router’s ether1 interface. IP address 192.168.0.100/24 is assigned to the interface. Possible IP pools, that can be used by this DHCP server, are:

0/2

A. 192.168.0.1-192.168.0.255

B. 192.169.0.1-192.169.0.254

C. 192.168.0.1-192.168.0.99 , 192.168.0.101-192.168.0.254

D. 192.168.0.1-192.168.0.14

 

24. Why is it useful to set a Radio Name on the radio interface?

0/2

A. To identify a station in the Access List

B. To identify a station in Neighbor discovery

C. To identify a station in a list of connected clients

 

 

25. What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server?

2/2

A. tarpit

B. dst-nat

C. passthrough

D. redirect

 

 

26. During a scan, in order to see all the available wireless frequencies that are supported by the card, the following option must be selected in the wireless card's "Frequency Mode":

0/2

A. superchannel

B. regulatory domain

C. manual txpower

 

27. What is the correct action to be specified in the NAT rule to hide a private network when communicating to the outside world?

0/2

A. masquerade

B. allow

C. passthrough

D. tarpit

 

28. The highest queue priority is

0/2

A. 1

B. 256

C. 16

D. 8

 

29. In the Route List, the identification DAb for a route stands for

2/2

A. direct - active - bgp

B. direct - acknowledge - backup

C. dynamic - active - backup

D. dynamic - active - bgp

 

 

30. How many different priorities can be selected for queues in MikroTik RouterOS?

0/2

A. 16

B. 1

D. 0

 

31. What is marked by connection-state=established matcher?

0/2

A. Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection

B. Packet is related to, but not part of an existing connection

C. Packet does not correspond to any known connection

 

D. Packet begins a new TCP connection

 

33. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.

0/2

A. kind=pcq pcq-rate=256000 pcq-classifier=src-address

B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

D. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

E. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

 

34. Which port does PPTP use by default?

2/2

A. TCP 1721

B. UDP 1721

C. UDP 1723

D. TCP 1723

 

 

35. One host on an internal network is accessing an external web page through a MikroTik router that is doing source NAT. Select correct statement about the packets that flow from that web page to the host ?

0/2

A. Packets go through the input chain

B. Packets go through the forward chain

C. Packets go through the output chain

D. Packets go through the input chain before the routing decision and after that through output chain

 

 

36. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1 add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2

2/2

A. Route via gateway 2.2.2.2

B. Route via gateway 1.1.1.1

 

37. How long is level 1 (free) license valid?

0/2

A. 1 month

B. 24 hours

C. 1 year

D. Infinite time

 

39. MikroTik RouterOS commands can be run once a day by:

0/2

A. /system watchdog

B. /system cron

C. /system scheduler

 

 

40. When viewing the routes in Winbox, some routes will show "DAC" in the first column. These flags mean:

0/2

A. Dynamic, Active, Console

B. Dynamic, Active, Connected

C. Direct, Available, Connected

D. Dynamic, Available, Created

 

41. Router A and B are both running as PPPoE servers on different broadcast domains of your network. It is possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers.

0/2

1. True

2. False

 

42. Which firewall chain you should use to filter SSH access to the router itself?

0/2

A. output

B. input

C. prerouting

D. forward

 

43. What does this simple queue do (check the image)?

0/2

Gambar Tanpa Teks

A. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10

B. Queue limits host 192.168.1.10 download data rate to one megabit per second.

C. Queue limits host 192.168.1.10 upload data rate to one megabit per second.

D. Queue guarantees download data rate of one megabit per second for host 192.168.1.10

 

 

44. Which firewall chain would be used to block a client's MSN traffic on a router?

0/2

A. static

B. forward

C. output

D. input

 

 

45. For static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:

0/2

A. no extra package required

B. advanced-tools

C. dhcp

D. routing

 

 

46. Which of the following Routes statuses are possible?

0/2

A. A = Active

B. C = Connected

C. S = Static

A. A = Active

B. C = Connected

C. S = Static

 

47. Which port does PPTP use by default?

0/2

A. TCP 1721

B. UDP 1723

C. TCP 1723

D. UDP 1721

 

 

48. /interface wireless access-list is used for ?

0/2

A. Handles a list of Client's MAC Address to permit/deny connection to AP

B. Shows a list of Client's MAC Address that are already registered at AP

C. Contains the security profiles settings

D. Authenticate Hotspot users

 

49. There can be more than one PPPoE server in a single broadcast domain:

2/2

1. True

2. False

 

50. In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?

0/2

A. The router does not have an operating system

 

B. The password of the router is not known

C. The router is connected only to a wireless network

D. The router is connected only to a secondary Ethernet port

 

51. You have a DHCP server on your MikroTik router. The IP addresses 10.1.2.2-10.2.2.20 are distributed in the DHCP network. Additionally, 3 static IP address are defined for your servers: 10.1.2.31-10.1.2.33. After a while 20 more IP addresses need to be distributed in the network. It is possible to distribute the extra IP address without adding another DHCP Server:

0/2

1. True

2. False