Exam MTCTCE

1. RouterOS log messages are stored on disk by default FALSE

2. DHCP server is configured on a router’s ether1 interface. IP address 192.168.0.100/24 is assigned to the interface. Possible IP pools, that can be used by this DHCP server, are: A. 192.168.0.1-192.168.0.255 B. 192.168.0.1192.168.0.99,192.168.0.101192.168.0.254 C. 192.169.0.1-192.169.0.254 D. 192.168.0.1-192.168.0.14 3. In RouterOS queue configurations the word "total" usually represents A. download B. upload C. download - upload D. upload + download 4. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue. A. kind=pcq pcq-rate=5000000 pcqclassifier=src-address B. kind=pcq pcq-rate=256000 pcqclassifier=dst-address C. kind=pcq pcq-rate=256000 pcqclassifier=src-address D. kind=pcq pcq-rate=1256000 pcqclassifier=dst-address E. kind=pcq pcq-rate=5000000 pcqclassifier=dst-address 5. Firewall Filter Action "Tarpit" can be applied for protocol A. All Protocol B. TCP C. ICMP D. UDP 6. Which action do you need to use with an NAT rule, to NAT a private address range to public address range? A. Netmap B. Masquerade

C. Same D. Src-nat 7. You have a queue structure: queue "MK" max-limit=23M -queue "A" parent="MK" limit-at=10M max-limit=18M --queue "AA" parent="A" limit-at=3M max-limit=5M priority=1 --queue "AB" parent="A" limit-at=1M max-limit=2M priority=2 --queue "AC" parent="A" limit-at=4M max-limit=8M priority=4 -queue "B" parent="MK" limit-at=10M max-limit=18M --queue "BA" parent="B" limit-at=1M max-limit=10M priority=1 --queue "BB" parent="B" limit-at=2M max-limit=3M priority=3 Select the correct answer for the worst case scenario when all queues are trying to get all available traffic. A. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 3M B. queue "AA" will get 3M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M C. queue "AA" will get 3M, "AB" 1M, "AC" 8M, "BA" 1M, "BB" 3M D. queue "AA" will get 5M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M E. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 2M 8. If router receives packet with TTL=1 then: A. packet will always reach its destination B. packet will not be forwarded C. packet will be forwarded only to next L3 device 9. You are using Port Scan Detection feature in MikroTik Firewall. What ports are considered as Low Ports? A. 1024-10000 B. 1-80 C. 1-1000 D. 20-1024

E. 1-1024 10. What does this simple queue do (check the image)? A. Queue limits host 192.168.1.10 upload data rate to one megabit per second. B. Queue guarantees download data rate of one megabit per second for host 192.168.1.10 C. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10 D. Queue limits host 192.168.1.10 download data rate to one megabit per second. 11. What does the firewall action "Redirect" do? Select all true statements. A. Redirects a packet to a specified port on a host in the network B. Redirects a packet to a specified port on the router C. Redirects a packet to the router D. Redirects a packet to a specified IP 12. To be able to do NAT the connection tracking does not need to be enabled. FALSE 13. You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or CDP. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions to accomplish this. A. Remove/Disable all discovery interfaces B. Add a Deny All input firewall rule C. Place a proper forward firewall rule to block mac discovery D. Remove/Disable all interfaces under mac-server telnet E. Place a proper input firewall rule to block mac discovery F. Remove/Disable all interfaces under mac-Server winbox G. Remove/Disable the Interfaces

14. You want to offer a static route to your DHCP clients (besides the defaultroute). What is the best way to do that? A. Set a static IP into /ip route and it will automatically be sent to clients B. Set DHCP options 3 C. Set DHCP options 121 D. There is no way to send a staticroute to DHCP clients 15. An IP packet has matched all the conditions of a firewall rule and the action reject and the option icmp-network-unreachable was initiated for that packet. What will happen with the packet content ? A. The whole packet will be forwarded back to the sender regardless of its contents B. The packet header will receive a flag of \\\"icmp-networkunreacheble\\\" C. The packet will be discarded regardless of its content D. The packet will be rejected only if the destination network is unreachable 16. What does the firewall action "log" do? A. It logs and blocks the packet B. It logs the packet C. It adds a prefix to the packet and passes it through D. It blocks and logs the packet 17. Consider the example Queue Tree diagram. Customers B, C and D are downloading. What is the bandwidth allocation given to each of these customers? A. B. 10M - C. 4.5M - D. 5.5M B. B. 10M - C. 1M - D. 9M C. B. 10M - C. 1.5M - D. 8.5M D. B 20M - C. None - D. None 18. To mangle all traffic going to the router itself on chain=prerouting, we can use parameter: A. dst-address=localhost B. dst-address-type=local C. dst-address=127.0.0.1 D. dst-address-type=unicast

19. Is it possible for a client to get an IP address but no gateway after a successful DHCP request? False

20. You can set ANY "DHCP option" from 1 to 254, including private use DHCP options (224-254) on MikroTik RouterOS DHCP server. TRUE

21. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4 - - queue "C2" parent="M" limit-at=1M max-limit=4M priority=1 - - queue "C3" parent="M" limit-at=3M max-limit=7M priority=8 - queue "F" parent="GP" limit-at=5M max-limit=8M - - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5 - - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2 If queues "C2" and "C3" are not requiring any traffic, how is all the available bandwidth going to be distributed in worst case scenario when all other queues are trying to get all available traffic? A. queue "C1" will get 4M, "D2" 7M, "D1" 4M B. queue "C1" will get 3M, "D2" 3M, "D1" 5M C. queue "C1" will get 5M, "D2" 2M, "D1" 3M D. queue "C1" will get 2M, "D2" 5M, "D1" 3M E. queue "C1" will get 4M, "D2" 3M, "D1" 3M 22. What is the recommended sequence for traffic marking by mangle for QoS? A. Add action=passtrough B. Add mark-connection then markpacket C. Add only mark-packet D. Add only mark-connection 23. MikroTik RouterBoard serial port can be used directly from RouterOS to control some external machine (without using IP firewall NAT port forwarding)? A. Yes, it can be used as an

input/output port to control any serial controller B. It can be used to write to a display, i.e. to send commands but not to receive 24. To make all DNS requests coming from your network to resolve on your router (regardless of the clients\' configuration), which action would you specify for the DST-NAT rule? A. dst-nat B. you can\'t use DST-NAT to achieve this C. masquerade D. redirect 25. Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33. Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client 10.10.0.33 is be able to obtain A. 6M upload/download B. 2M upload/download C. 0M upload/download D. 4M upload/download