Font size
WorksheetsLAB MTK-SKANSA 75 B
Total questions: 78
Worksheet time: 44mins
Which version of software can be installed to the following type of RouterBoard?
routeros-mipsbe-x.xx.npk on RB433
routeros-powerpc-x.xx.npk on RB333
routeros-mipsle-x.xx.npk on RB133
routeros-x86-x.xx.npk on RB1100
routeros-mipsbe-x.xx.npk on RB133
EoiP is:
MikroTik's exclusive Tunnel Protocol
Layer-3 Tunnel
Layer-2 Tunnel
Netinstall can be used to:
Reinstall software without losing licence
Install package for different hardware architecture
Install different software version (upgrade or downgrade)
Keep configuration, but reset a lost admin password
PPP Secrets is used for:
PPtP clients
Router users
L2TP clients
PPPoE clients
IPSec clients
Mark all correct statements about / export file = {name of an rsc file}.
Exports files which can not edited
Exports full configuration of the router (without RouterOS user passwords)
Exports logs from /log print
Exports only part of the configuration (for example /ip firewall)
The possible IP action of the firewall filter is:
bounce
tarpit
accept
tarp
log
What firewall actions are "Redirect"? Select all correct statements.
Redirects a packet to a specified port on the router
Redirects a packet to a specified IP
Redirects a packet to the router
Redirects a packet to a specified port on a host in the network
On MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved using subnet addresses from:
/ 31
/ 29
/ 32
/ 30
Which computer can communicate directly (without a router involved)
192.168.17.15 / 29 and 192.168.17.20/28
192.168.0.5 / 26 and 192.168.0.100
10.5.5.1 / 24 and 10.5.5.100/25
10.10.0.17 / 22 and 10.10.1.30/23
Which of the following protocols / ports is used for SNMP? (Simple Network Management Protocol)
UDP 162
TCP 123
UDP 161
TCP 162
TCP 25
Which of the following protocols / ports is used for SNMP? (Simple Network Management Protocol)
TCP 25
UDP 162
UDP 161
TCP 123
TCP 162
What letters appear next to the route, which is automatically generated by RouterOS when the user adds a valid address to the active interface?
A
B
C
D
E
What wireless standards can we use to achieve 100 Mbps throughput?
802.11 a / b / g
802.11 b / g
802.11 a / n
802.11 a / n / ac
802.11 a / b / g / n
Action = redirect allows you to create
Transparan DNS Cache
Forward DNS to the other device's IP address
Enable Local Services
Transparan HTTP Proxy
Mark all features that are compatible with Nstreme
WDS between the device in station-wds mode and the device in station wds mode
Enkripsi
WDS between the device in ap-bridge mode and the device in wds station mode
Bridging devices in station mode with devices in ap-bridge mode
Which of the following locations can you get from Winbox?
Router web page
File menu on your router
Through the console cable
mikrotik.com
Two hosts, A and B, are connected to the broadcast LAN. Select all answers that indicate pairs of IP addresses / masks that allow IP connections to be formed between the two hosts.
What types of users are listed in the Secret PPP menu window?
pptp users
l2tp users
pppoe users
wireless users
winbox users
Clients of the MikroTik RouterOS DHCP-server can receive the following options:
You want to use PCQ and allow a maximum of 256k downloads and uploads for each client. Select the correct argument value for the required queue.
jenis = pcq pcq-limit = 1256000 pcq-classifier = dst-address
jenis = pcq pcq-limit = 256000 pcq-classifier = dst-address
jenis = pcq pcq-limit = 5000000 pcq-classifier = src-address
jenis = pcq pcq-limit = 256000 pcq-classifier = src-address
jenis = pcq pcq-limit = 5000000 pcq-classifier = dst-address
Which of the following is true for connection tracking?
Enabling connection tracking reduces CPU usage on RouterOS
Connection tracking must be activated for an effective firewall
Connection tracking must be activated for NAT networks
Disable connection tracking for mangle to work
Among the following statements are possible solutions for managing two network bridges via a wireless link:
Both devices are in AP mode and activate WDS mode
One device in AP mode, another in station-pseudobridge-clone
One device in AP mode, another at the pseudobridge station
One device in AP mode, another at the station
Identify the types of QoS available in RouterOS
DRR - Defisit Round Robin
FIFO - First In First Out
PCQ - Per Connection Queuing
SFQ - Antimisial Stochastic Fairness
RED - Random Early Detect
In which situations can Netinstall NOT be used to install RouterBOARD?
The router does not have an operating system
The router is only connected to the wireless network
You do not know the router password
The router is connected only to the secondary Ethernet port
You are planning a migration from a wireless link using 802.11a at 5GHz (without nstrem) to using Nv2 at 5GHz. If you change the AP from 802.11a to Nv2, you don't want the client to release it for more than a few seconds during the upgrade. Assuming the client is able to operate with Nv2 (the correct hardware, encryption key and the correct version of ROS), the settings for 'wireless protocol' must be enabled on the client so that the client can automatically detect the protocol used by the AP and continue to connect with 802.11a or Nv2: (select all that apply)
Nv2
Nv2-nstreme-802.11
anyt
What can you do with Netinstall?
Reset password di RouterOS
Instal Linux
Add configuration to RouterOS
Reinstall RouterOS
Netinstall can be used for
Install a different software version (upgrade or downgrade)
Save the configuration, but reset the admin password that is missing
Reinstall the software without losing the license
Install packages for different hardware architectures
In Winbox, hide password is not checked so it can show a password for the following
RouterOS User
User Hotspot
RADIUS User
PPP Secret
Choose the correct statement for the MikroTik proxy.
NAT destination rules are required to utilize transparent proxy facilities
To deny access to certain websites, caching must be activated
Control the domain or server that is allowed to be cached by the proxy
Can deny access to certain domains or servers, but not specific web pages
Before installing a wireless access point radio, it helps you scan the area, Name 2 wireless tools that can be used to scan!
snooper
a scan
scanning
sniffing
Mikrotik has a DHCP client feature that can get IP automatically from a DHCP server. Mention 2 types of interfaces that can be used as DHCP clients in addition to Ethernet!
a. wireless
b. bridge
c. vlan
d. pppeo
Regarding routing, the default route on the proxy can be monitored using the check gateway feature. Mention 2 monitoring methods that are applied to the check gateway process?
a. Arp
b. Ping
c. Trace
d. Trace route
We can block certain data packages by using the firewall filter feature. What parameters can we use to detect data packages both the source port and the destination port on a connection?
a. Protocol
d. Out Interfaces
c. In Interfaces
e. Target Port
b. Port
Name 2 minimum parameters used to configure hosts on Queues!
a. Target-address
b. Max limit
c. Etc. Adreess
e. Priority
d. Limit-At
Which chain firewall should you use to filter ICMP packets from the router itself?
Input
Forward
Postrouting
The output
One of the network security can be done by the port knocking method, for example before being able to access a server the user must first send a packet with a certain size, for example 1000 bytes. What parameters in the firewall can we use to detect the size of a packet?
Package Size
Counter Package
Conten Size
Counting Package
Collisions are possible on a full-duplex Ethernet network
Correct
False
The default 'target-scope' value for static routes is:
30
1
10
255
Routers have Wireless and Ethernet client interfaces, all client interfaces are bridged. To create DHCP services for all clients you must configure the DHCP server on:
every Port on the Bridge
only in Bridge Interface
Every Ethernet and Wireless interface
DHCP service is not possible in this setting
One of the functions that exist in RouterOS is SMS, the RouterOS system can be instructed to send an SMS to a certain number. What additional tools are needed so that this can be done?
GSM mode
SMS server
SMS gateway
What does the letter "R" in an active session in the PPP Active Connections menu mean?
Run
Radius
Random
Running
On Mikrotik wireless there is a tool that can detect the percentage of density usage around the frequency?
freq. used
a scan
snooper
sniff
MikroTik proxy features are:
POP3 caching
DNS Filtering
SMTP caching
HTTP caching
FTP caching
MikroTik WebProxy is able to perform cache storage functions on internal and external storage. What parameters are there on WebProxy to determine where cache storage is stored, what parameters?
Cache path
Disk Cache
Cache on Storage
Cache On Disk1
What parameters impose limits on a Queues that can be reached if the perent above still has residual bandwidth that can be used?
max limit
max bandwidth
max queue
max rate
What is needed for PPPoE client configuration?
ip firewall nat masquerade rule
Interface (where the PPPoE client will work)
Static IP address on PPPoE client interface
You start a wireless scan on your Access Point. What will happen ?
All connected clients will disconnect
You will see all connected clients
You will see the available frequency
If we use simple queues, what parameters determine the total amount of automatic downloads and uploads
total max limit
Max total bandwidth
total max queue
total max rate
Check the permitted input formats for the Wireless scan list.
5500 5700
5500-5700
5500,5700
5500 - 5700
5500/5700
You want to limit bandwidth for your HotSpot users. HotSpot can create a Dynamic Queue for user logins to limit bandwidth.
Yes, right
Not wrong
Action = redirect applies to
SRC-NAT rules
DST-NAT rules
Firewall Filter Rules
Route rules
You have a Wireless interface with Security to use the nstreme protocol?
Yes, but Nstreme will be used for all SSIDs assigned to that physical interface
Yes, but Nstreme can only be used for SSID = WLAN1.
No, Nstreme cannot be used on the Wireless interface if VirtualAP is in it.
Yes, but Nstreme can only be used for SSID = VAP1.
Where can you see real-time connections processed by the router?
Query Tree
Torch Tool
Firewall Counter
Connection Tracking Firewall
What types of users are listed on the "/ user" menu?
PPTP User
Wireless User
User Hotspot
User Router
Router OS can set vlan-id values from - to:
1-2049
1-4096
1-4095
1-2048
On the bridge interface there is a parameter called RSTP
prevent looping
stabilize the connection
split lane division
selection of bridge type
If a packet enters the router and starts a new connection that was not previously there, then it is called:
no connection status will be applied to the package
new
invalid
establish
releated
Could the same IP address be included in several address lists and still be used by some of the address lists?
correct
is wrong
/ ip route configuration on router, / ip route add dst-address = 0.0.0.0/0 gateway = 192.168.0.1 / ip route add dst-address = 192.168.1.0 / 24 gateway = 192.168.0.2 / ip route add dst-address = 192.168.2.0 / 24 gateway = 192.168.0.3 / ip route add dst-address = 192.168.3.0 / 26 gateway = 192.168.0.4 The router needs to send packets to 192.168.3.240. Which gateway will be used?
192.168.0.2
192.168.0.1
192.168.0.3
192.168.0.4
There is a subnet with ip 10.10.10.167/26, what is the broadcast ip of that IP address?
10.10.10.191
10.10.10.164
10.10.10.192
10.10.10.165
10.10.10.190
After entering this rule: / ip firewall add chain = input action = drop, You can still access the Router using mac-address.
Yes
Not
When a packet is sent, then the process of adding packet header is known as?
encapsulation
decapsulation
compression
labeling
Regarding the OSI layer, which layer is responsible for maintaining the host to host connection and also the stability of the connection?
Transport Layer
b
If you want to use pcq for per-protocol perimeter, for example web, email, ftp, etc. What classifier should we use to identify upload traffic?
Src. Address
Etc. Address
Upload Target
Upstream Tager
Which chain firewall will be used to block MSN client traffic on the router?
Forward
Static
Input
The output
Look at the queue structure below! queue "GP" max-limit = 10M - queue "M" parent = "GP" limit-at = 4M max-limit = 6M - - queue "C1" parent = "M" limit-at = 1M max-limit = 7M priority = 4 - - queue "C2" parent = "M" limit-at = 1M max-limit = 4M priority = 1 - - queue "C3" parent = "M" limit-at = 2M max-limit = 7M priority = 8 - queue "F" parent = "GP" limit-at = 5M max-limit = 8M - - queue "D1" parent = "F" limit-at = 3M max-limit = 4M priority = 5 - - queue "D2 "parent =" F "limit-at = 2M max-limit = 5M priority = 2 Which queue will get more bandwidth than the limit-at in the worst case scenario? Select one:
a.C3
b. C1
c. D1
d. C2
e. D2
There are various tools provided on the proxy for monitoring networks. What monitoring tools are able to identify the protocol as well as the port in realtime?
a. Torch
b. Traffic Monitoring
c. Graph
d. Realtime Traffic
on firewall actions, one of them is through. What is the function of passthrough?
traffic just passes through the router
traffic will be forwarded to the next rule
traffic will be blocked
traffic will be forwarded but recorded first.
There are features on the proxy where the Ethernet interface that is in the routerboard can be combined into 1 segment but it can also be transferred without the need to overload the CPU. What features does this feature use?
a. Switch chip
b. Master-Slave
c. Hardware-Offload
d. Bridge
What tools can monitor the amount of traffic on an interface and will run a triger if there is a change in traffic passing under certain tools?
monitor traffic
monitoring interface
traffic interface
torch
Regarding the OSI layer, which layer is responsible for maintaining the host to host connection and also the stability of the connection?
a. Transport Layer
b. Network Layer
c. Session Layer
d. Presentation Layer
Among the flow packets containing input, output, and postrouting, which packet is the last packet, if the data packet from outside the router goes to the router?
the input
the output
postrouting
On a web proxy we can limit the total cache amount on our OS router. What parameters can we use to do this?
a. Max cache size
b. Max cache object size
c. Max proxy disk
d. Max Storage Used
To secure wireless access points on a proxy we can activate the security profile and use WPA 1 or WPA 2. Explain what happens if both WPA 1 and WPA 2 are activated as security!
a. The client cannot be connected because it cannot determine what Security mode is used
b. The client will automatically choose the strongest Security
c. Mikrotik will randomly choose the security method
d. Mikrotik will arrange the security of the strongest in accordance with security facilities on the client
HTTPS protocol usually uses TCP protocol and port 443. Mention the type of tunnel that is supported by proxy which also uses the protocol and the port!
a. OVPN
b. PPTP
c. PPOE
d. L2TP
There is a router whose ETH 1 interface is connected to a client pc device which then ETH 2 is connected to an internet device to capture data downloaded from the client, the ETH 1 interface can be used as what parameter on the firewall filter
a. Out interface
b. in interface
c. in interfaces list
d. out interfaces list
Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33. Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client 10.10.0.33 is be able to obtain
A. 2M upload / download
B. 4M upload / download
C. 0M upload / download
D. 6M upload / download
In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?
The router is connected only to a secondary Ethernet port
The router does not have an operating system
The router is connected only to a wireless network
The password of the router is not known
