XII TKJ 3 - a

Select the rule that is used to block SMTP protocol for clients connected to the LAN interface:

• /ip firewall filter add chain=forward dst-port=25 action=drop in-interface=LAN

• /ip firewall filter add chain=output protocol=tcp dst-port=25 action=drop in-interface=LAN

• /ip firewall filter add chain=forward protocol=tcp dst-port=25 action=drop in-interface=LAN

• /ip firewall filter add chain=input protocol=tcp dst-port=25 action=drop in-interface=LAN

Which options can be used when you want to prevent access from one specific address to your router web interface?

• Firewall Filter Chain Input

• Group settings for System users

• Firewall Filter Chain Forward

• WWW service from IP Services

Mark correct answer for action=dstnat in chain=dst-nat.

• Change destination address and port

• Change source address and port

• Add destination address to address-list

• NAT source address

What does the firewall action "Redirect" do? Select all true statements.

• Redirects a packet to a specified port on the router

• Redirects a packet to a specified port on a host in the network

• Redirects a packet to a specified IP

• Redirects a packet to the router

NAT rule is going to catch SMTP traffic and send it to a specific mail server.

What is the correct action for a NAT rule?

• Tarpit

• Passthrough

• dst-nat

• redirect

Destination NAT (chain dstnat, action dst-nat) can be used to:

• Hide your local network from the Internet

• Change destination port

• Direct users from the Internet to a server within your local network

• Change source port

One host on an internal network is accessing an external web page through a MikroTik router that is doing source NAT. Select correct statement about the packets that flow from that web page to the host ?

• Packets go through the input chain

• Packets go through the forward chain

• Packets go through the input chain before the routing decision and after that through output chain

• Packets go through the output chain

It is required to make a web server residing on a private subnet in a LAN visible on the public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met (select all that apply):

• The private IP address of the web server should be routable on the Internet

• In IP firewall NAT there should be a dst-nat rule between the public IP address of the router and the private IP of the web server

• The public IP address of the web server must be installed on the router

• A route between the router and the web server must exist

• Connection tracking must be enabled on the router

What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server?

• Redirect

• Passthrough

• Tarpit

• dst-nat

Firewall configuration is the following:

1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP

2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY

3) /ip firewall filter add chain=input protocol=icmp action=drop

4) /ip firewall filter add chain=ICMP protocol=icmp action=drop log=yes log-prefix=JUMP-ICMP-DENY

Client sends "ping" to router. What will the router do?

• Router will log it with prefix: ICMP-DENY

• Router will log it with prefix: JUMP-ICMP-DENY

• Router will drop the packet at the Input drop rule (3rd rule)

• Router will drop the packet at ICMP (jump) chain drop rule (4th rule)