0 ratings0% found this document useful (0 votes) 352 views6 pagesMtctce 1
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content,
claim it here.
Available Formats
Download as PDF or read online on Scribd
1. Router has Wireless and Ethernet client interfaces, all client interfaces are bridged.
To create a DHCP service for all cliants you must configure DHCP server on,
> A DHCP service Is not possible inthis setup
) B Ethernet and wireless interfaces
x ony on dvidge interface
) D. every bridge port
Base
©b wirvox
Ce. Webboxor webtg
Ep Tehet
Bess
3. You set your client's simple queue:
0 name="Your Client” target-addresses=1.1.1.1/32 dst-address=0.0.0.0/0
interface=all parent=none direction=both priority=8
‘queue=default-small/default-small limit-at=0/0 max-limit=0/0
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small total-max-imit=10M
The client starts downloading from a website that gives him a download speed of 7 Meg, then starts uploading a file to a
hosted server. This server can transfer at 5 Meg bandwidth,
Which upload speed is allowed for the client?
DAZ Meg
)B3Meg
Ge seg
> D4 Weg
4. DST-NAT can process traffic sent from and through the router.
Oa6. Which of the following are reported by MikroTik Discovery Protocol:
(ak mac address of reachable interface
(ap. Remete router software version
ic. all layer3 addresses from all interfaces
[Bd Remete reuteridentiy
Ie. Remete Router routing Table
GF. Routing Protocol available
7, Select types of Load Balancing methods:
Cann
Os.eca
8c. cour
o.rce
8. An IP address pool can contains addresses from more than one subnets.
OH
9. You created PCC mangle rules. You are splitting between three connections, what are the proper PCC settings.
Os, acion-accept chair=preroutng csatled-na per-cannecton-ciasif=bath-
aderesses:3t
(a. action=accept chain=prerouting disabled=no per-connection-classifisr=both-
addresses:0/0
(Oc. action=accept chain=prerouting disabled=no per-connection-clessifier=both-
adcresses:1/1
(2d. action=accept chain=prerouting disabled=no per-connection-clessifier=both-
addresses:
CE. action-accept chain=prerouting disabled-no per-connection-classifier=both-
addresses:3/3
(Dar sconzaccent cnainspreroutng disatledsno cer-connécton-lassier=both
adcresses'30,10. Where can a routing mark be used?
Da infrewau titers
Bp Inroutng
Hic. in queues
Hb. tn firewall mangle
11. Consider the following network diagram. You need to permit the users on the 192.168.0.0/24 network access to 3
webserver (typ/80) at IP address 192.158.1.199. You do NOT want them to access any otlier services or devices on the
192.168.1.0/24 network, Which of the following rulesets would accomplish this task?
OA fp firewall iter add chain=output dst-address=192.168.1.199 acion=accept
‘add chain=output dst-address=192.168.1.0124 action=drop_
© ip firewall fiter add chain=forward protocol=tep dst-port=80 action=accert
‘add chain=forward dst-address=192.168.1.0/24 action=drop
OC. fp firewall filter add chain=forward dst-address=192.168.1.199 protocol=tep
‘sre-port=80 action=accep! add chan=forward dst-address=192.168.1.0/24
action=drop
192.169.1.199 protocol=tep
1D. fp firewall filter add chain=forward dst-adaress="
192.168.1.0/24
port=80 action=accep! add chain=ferward dst-address=
action=drop
12. Whats the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified
mail server?
Bp astnat
Oc. terpit
OD. redirect
13. In order to create a rule to drop all traffic from and to Bogon IPs, in the firewall you should:
OA Create a rule to drop all addrosses of dst.addrose-typo local
1B. Use aLayer7 titer ule to spect ne Bogon Regular Expression and arop It
®L use ne asaress-tst uncon o cess at ofP's and speaty tin the
Aaiancedtab of he ew ro14, MieroTik RouterOS DHCP client can receive following options
la rate unit
E16 Byte iit
Qc aacress and subnet
Ob. Untime timit
15. You want to offer static router to your DHCP client (excluding defaut-route). What is the best way to do that?
© A There is nowayto send statisroute te DHCP cients
© Seta static int p route and tual automaticaly sentto cents
Oc. Set DHCP options 3
Qo setDHcr options +21
16. In IP firewall fiter “dst-limit" option is used to limit the number of hops packet is alowed to take
Oa
117. RouterOS router can act as a radius client and authenticate through a radius server different services.
Which of the following can authenticate using this method?
Ga prPoe users
Bis pre users
ic. psec users
(Bp Routes users
© wireless cients
18. Giient has a download queue with limit-at=2Mpbs, max-limit=4Mbps, burst-limit=5Mbps, burst-threshold=3Mbit and
burst-time=30s. What is the maximum possible time client can have 4,sMpbs download speed?
Oa tes
Oa 20s19. An IP packet has matched all the conditions of 2 firewall rule and the action rejact and the option icmp-network-
unreachable was initiated for that packet. What will happen with the packet content ?
OA The whole oacket will be forwarded back to the sender regardless ofits,
contents
(2b The packetwillbe discarded regardless ofits content
© . The packet willbe rejected only ifthe destination networkis unreachable
D D. The packet hesdor will roceive a fag of \WWiemp-network-unroacheblel”
20. after putting this rule: /ip firewall add chain=input action=drop, you will still be able to accass Router using
mac-address.
Ga
21. Mark the queue types that are available in RouterOS
(BA Red — Random Early Detect or Drop)
as Pca—rercomecton queuing
(lc. DRR - Deficit Round Robin
Oho. Fro -Firsin First Out Cores or for Packets)
BE sta—stocnasic Faimess Cueuna
GF. uiFo -Lastin First Out
22. For maximum security your router should block traffic with the following source ip addresses fram entering your
router on an external Interface, (an interface with 2 public ip address configured on it) .
A brodeast adcresses
Be 102800016
Ac. 1.0008
Oo. 127.00.08
GE te 160012
Ge 2240008
Bs 172000823. The Simple Queue Total tab controls both upload and download totals aggregated together.
Ba tue
B.False
24. According to the picture, if both laptops have same priority, how much bandwidth will be available for every laptop ?
a.
Ops
ec3
D2