Font size
WorksheetsSD KELAS 1
Total questions: 82
Worksheet time: 44mins
What is marked by connection-state=established matcher?
Packet does not correspond to any known connection
Packet is related to, but not part of an existing connection
Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection
Packet begins a new TCP connection
What protocol is used for Ping and Trace route?
UDP - trace route
IP
TCP
ICMP - ping
If 'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable, then:
The unreachable gateway is not going be used in Round Robin algorithm.
The ECMP route becomes inactive.
ECMP is going to send packets to all gateways even if one is unreachable.
Which of the following protocols / port s are used for SNMP. (Simple Network Managemnt Protocol)
TCP 25
TCP 162
UDP 162
UDP 161
TCP 161
In WinBox when clicking the 'Backup' button in the Files window, the following happens (select all that apply):
Backup file will contain usernames and passwords of the router
Backup file is saved to the computer desktop
Optionally backup name and password can be specified
Backup file is created. Name contains the router identity, the date and time of its creation
To connect your MikroTik router to a wireless access point, you have to:
Use the same Band (5 GHz, 2.4 GHz, ...)
Use the same Radio Name
Use the same SSID as on accesspoint
Is it possible to limit how many clients are able to connect to an access point?
No it's not possible at all
Yes
Yes, but only with access-lists
Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?
No
Yes
How many wireless clients can connect, when wireless card is configured to mode=bridge?
2007
1
100
2
What protocols are used to configure trunking on a switch?
VLAN Trunking Protocol
VLAN
802.1Q
ISL
1 only
3 and 4
2 only
1 and 2
Which protocol does Ping use?
TCP
BootP
ARP
ICMP
Which of the following Routes statuses are possible?
A = Active
S = Static
D = Drop
C = Connected
If your router is facilitating a CSU/DSU, which of the following commands do you need to use to provide the router with a 64000bps serial link?
RouterA(config-if)#clock rate 64
RouterA(config-if)#bandwidth 64000
RouterA(config)#bandwidth 64
RouterA(config-if)#clock rate 64000
If you use either Telnet or FTP, which is the highest layer you are using to transmit data?
Application
Session
Presentation
Transport
Consider a wireless access point with mode=ap-bridge. What is the maximum number of concurrent clients that can connect to it?
2048
1024
2012
2007
The correct order for PPPOE discovery stage is
Request, Offer, Initialization and Session confirmation
Request, Initialization, Session confirmation and Offer
Initialization, Offer, Request and Session confirmation
Initialization, Session confirmation, Request and Offer
Which of the following is used in standard 802.11 wireless networks?
CSMA/CD
CDMA
FDD
CSMA/CA
Mark the queue types that are available in RouterOS
LIFO - Last In First Out
RED - Random Early Detect (or Drop)
FIFO - First In First Out (for Bytes or for Packets)
SFQ - Stochastic Fairness Queuing
PCQ - Per Connection Queuing
In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?
The router does not have an operating system
The router is connected only to a wireless network
The password of the router is not known
The router is connected only to a secondary Ethernet port
One host on an internal network is accessing an external web page through a MikroTik router that is doing source NAT. Select correct statement about the packets that flow from that web page to the host ?
Packets go through the input chain before the routing decision and after that through output chain
Packets go through the forward chain
Packets go through the input chain
Packets go through the output chain
A DHCP server is configured on a LAN interface which is a port on a bridge. The DHCP server does not start.
What could be the reason(s)?
The IP address pool could be incorrectly defined
There might not be an IP address assigned to the LAN Interface
There may be multiple IP addresses set on the LAN interface
The DHCP server can not run on an interface which is also a bridge port
A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45 functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of
255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to the device?
192.168.100.71/255.255.255.252
192.168.100.70/255.255.255.252
192.168.100.69/255.255.255.252
192.168.100.68/255.255.255.252
Which of the following is NOT a valid MAC Address?
95:B5:DD:EE:78:8A
80:GF:AA:67:13:5D
13:16:86:53:89:43
EA:BA:AA:EE:FF:CB
Where can you monitor (see addresses and ports) real-time connections which are processed by the router?
Firewall Connection Tracking
Firewall Counters
Queue Tree
Tool Torch
In a network with dozens of switches, how many root bridges would you have?
12
1
5
2
Which of the following are layers in the TCP/IP model?
Application
Session
Transport
Internet
Data Link
Physical
3, 4 and 5
1 and 2
1, 3 and 4
2, 3 and 5
Which of the following services use UDP?
DHCP
SMTP
SNMP
FTP
HTTP
TFTP
1, 2 and 4
1, 3 and 6
All of the above
2 and 4
In MikroTik RouterOS, Layer3 communication between 2 hosts can be achieved by using an address subnet of:
/29
/31
/32
/30
Netinstall can be used to
Keep configuration, but reset a lost admin password
Install different software version (upgrade or downgrade)
Reinstall software without losing licence
Install package for different hardware architecture
Consider the following network diagram. In R1, you have the following configuration:
/ip route
add dst-address=192.168.1.0/24 gateway=192.168.99.2
/ip firewall nat
add chain=srcnat out-interface=Ether1 action=masquerade
On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?
/ip firewall filter add chain=input srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop
/ip firewall filter add chain=forward srcaddress=192.168.0.0/24 dst-address=192.168.1.10 action=drop
/ip firewall filter add chain=forward srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop
/ip firewall nat add chain=dstnat srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop
Select all tunnels that support authentication of clients with a username and password.
EoIP
OpenVPN
PPTP/L2TP
PPPoE
MikroTik RouterOS commands can be run once a day by:
/system watchdog
system cron
/system scheduler
It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply)
LAN address of the webserver should be routable on the internet
Connection Tracking must be enabled on NAT router
in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver
A route between the NAT Router and the webserver must exist
Which firewall chain should you use to filter ICMP packets from the router itself?
input
output
forward
postrouting
Which class of IP address provides a maximum of only 254 host addresses per network ID?
Class D
Class C
Class A
Class B
How many usable IP addresses are there in a 20-bit subnet?
4096
2048
2046
4094
If you wish to block user access to MSN messenger, which chain should the firewall rule be placed in?
forward
process
output
input
A client that has successfully connected to a wireless network is considered to be which of the following?
Choose all that apply :
Unauthenticated
Authenticated
Associated
Unassociated
Which computers would be able to communicate directly (without any routers involved):
10.10.0.17/22 and 10.10.1.30/23
192.168.17.15/29 and 192.168.17.20/28
192.168.0.5/26 and 192.168.0.100
10.5.5.1/24 and 10.5.5.100/25
MikroTik RouterOS is sending logs to an external syslog server. Which protocol and port is used by RouterOS for sending logs (by default)?
UDP 21
TCP 110
UDP 514
UDP 113
What is the main reason the OSI model was created?
So application developers can change only one layer's protocols at a time
So Cisco could use the model.
So different networks could communicate.
To create a layered model larger than the DoD model.
How many different priorities can be selected for queues in MikroTik RouterOS?
16
8
1
0
Which class of IP address has the most host addresses available by default?
C
A and B
A
B
The network address is
The first usable address of the subnet
The first address of the subnet
The last address of the subnet
What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server?
passthrough
dst-nat
redirect
tarpit
What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded?
64
1
30
60
MAC layer by OSI model is also known as
Layer 7
Layer 3
Layer 2
Layer 6
What does the passive command provide to dynamic routing protocols?
Stops the router from receiving any dynamic updates.
Stops an interface from sending or receiving periodic dynamic updates.
Stops the router from sending any dynamic updates.
Stops an interface from sending periodic dynamic updates but not from receiving updates.
What is term for the hardware coded address found on an interface?
FQDN Address
Interface Address
MAC Address
IP Address
How many IP addresses can one find in the header of an IP packet?
1
3
2
4
A client uses a RouterBOARD1000. The clock is configured in '/system clock'. The clock resets to default after each reboot.
Select the best solution for the problem.
Write a script in '/system script' to set the clock
Open the router and ensure the CMOS battery is fine.
Configure '/system ntp client' and set a valid and reachable NTP server address.
Configure '/system ntp server' and set a valid and reachable NTP client address.
Which command is used to upgrade an IOS on a Cisco router?
copy tftp flash
copy tftp start
copy tftp run
config net
Mark all packages required for PPPoE server on MikroTik RouterOS
user-manager
synchronous
system
ppp
radius
What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface?
D
C
S
I
A
How long is an IPv6 address?
32 bits
128 bytes
128 bits
64 bits
Mark all the features that can be used for limiting client registrations to your access point:
registration-table
wpa
access-list
WDS
Choose all valid hosts address range for subnet 15.242.55.62/27
15.242.55.3315.242.55.63
15.242.55.3215.242.55.63
15.242.55.3315.242.55.62
15.242.55.3115.242.55.62
Why is it useful to set a Radio Name on the radio interface?
To identify a station in a list of connected clients
To identify a station in Neighbor discovery
To identify a station in the Access List
Which of the following are valid IP addresses?
192.168.256.1
10.10.14.0
192.168.13.255
1.27.14.254
Is action=masquerade allowed in chain=dstnat?
yes
yes, but only if dst-addr is specified
yes, but it works only for incoming connections
no
What does this simple queue do (check the image)?
Queue guarantees upload data rate of one megabit per second for host 192.168.1.10
Queue guarantees download data rate of one megabit per second for host 192.168.1.10
Queue limits host 192.168.1.10 upload data rate to one megabit per second.
Queue limits host 192.168.1.10 download data rate to one megabit per second.
There are two routes in the routing table:
0 dst-addr=10.1.1.0/24 gateway=5.5.5.5
1 dst-addr=10.1.1.4/30 gateway=5.6.6.6
Which gateway will be used to get to the IP address 10.1.1.6?
5.6.6.6
5.5.5.5
both - half of the traffic will be routed through one gateway, half through the other
the required route is not in the routing table
Which of the protocols below is used by Netinstall?
arp
rarp
dhcp
bootp
RouterOS log messages are stored on disk by default
False
True
What kind of users are listed in the "/user" menu?
pptp users
wireless users
Hot-Spot users
router users
What is possible with Netinstall?
MikroTik RouterOS password reset with saving router's configuration
MikroTik RouterOS configuration reset
MikroTik RouterOS reinstall
Which one of the following is true regarding VLANs?
VTP is used to send VLAN information to switches in a configured VTP domain.
Two VLANs are configured by default on all Cisco switches.
VLANs only work if you have a complete Cisco switched internetwork. No off-brand switches are allowed.
You should not have more than 10 switches in the same VTP domain.
Which option in the configuration of a wireless card must be disabled to cause the router to permit ONLY known clients listed in the access list to connect?
Default Forward
Security Profile
Enable Access List
Default Authenticate
To use masquerade, you need to specify
action=masquerade, in-interface, chain=src-nat
action=masquerade, out-interface, chain=dst-nat
action=accept, out-interface, chain=src-nat
action=masquerade, out-interface, chain=src-nat
Which of the following keystrokes enables safe mode in console:
Ctrl+c
Ctrl+d
Ctrl+s
Ctrl+x
You can not use OSPF and RIP routing protocols simultaneously on the RouterOS.
FALSE
TRUE
When using routing option 'check-gateway=ping' after how many timeouts is gateway considered unreachable:
3
2
1
4
/interface wireless access-list is used for
Authenticate Hot-Spot users
Handles a list of Client's MAC Address to permit/deny connection to AP
Shows a list of Client's MAC Address that are already registered at AP
Contains the security profiles settings
If you need to make sure that one computer in your Hot-Spot network can access the Internet without Hot-Spot authentication, which menu allows you to do this?
IP bindings
Walled-garden IP
Walled-garden
Users
What is the correct action to be specified in the NAT rule to hide a private network when communicating to the outside world?
passthrough
masquerade
allow
tarpit
Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33.
Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client
10.10.0.33 is be able to obtain
4M upload/download
6M upload/download
0M upload/download
2M upload/download
In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?
The router is connected only to a wireless network
The router is connected only to a secondary Ethernet port
The password of the router is not known
The router does not have an operating system
If ARP=reply-only is configured on an interface, this interface will
add new IP addresses in '/ip arp' list
accept all MAC-addresses listed in '/ip arp' as static entries
accept all IP addresses listed in '/ip arp' as static entries
accept IP and MAC address combinations listed in '/ip arp' list
Which of the following are TCP/IP protocols used at the Application layer of the OSI model?
IP
TCP
Telnet
FTP
TFTP
All of the above
1, 3 and 5
1 and 3
3, 4 and 5
Which is the default port of IP-Winbox?
TCP 8192
TCP 80
UDP 8291
TCP 8291
Select valid MAC-address
AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201
192.168.0.0/16
00:00:5E:80:EE:B0
G2:60:CF:21:99:H0
Which of the following allows a router to respond to an ARP request that is intended for a remote host?
Inverse ARP (IARP)
Proxy ARP
Reverse ARP (RARP)
Gateway DP
