okihkb

00:02:54 last save: 2016-05-20 11:14:47

1. It

is possible to create an encrypted PPPoE tunnel in RouterOS:

true

2. How

long is level 1 (free) license valid?

 A. 1 year B. Infinite time C. 24 hours D. 1 month 3. Which

type of encryption could be used to establish a connection with a simple passkey without using a 802.1X authentication server?  A. WPA PSK/WPA2 PSK/WPA2 PSK B. WPA EAP/WPA2 EAP

4. What

is the minimal possible wireless configuration to create an Access Point?

 A. radio name B. scan-list C. frequency D. band E. ssid F. DFS mode G. WDS H. mode 5. Which

port does PPTP use by default?

 A. TCP 1721 B. UDP 1721 C. TCP 1723 D. UDP 1723 6. Mark

all correct answers

 A. /ip firewall firewall filter allows allows to deny authentication authentication to AP B. Wireless access-list could allow and deny connect to your AP C. Default-Forwarding could be enabled for a specific clients by wireless access-list D. The only way to prevent wireless clients connections - disable wireless interface 7. You

want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.  A. kind=pcq pcq-rate=5000000 pcq-rate=5000000 pcq-classifier pcq-classifier=dst-address =dst-address B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-addr pcq-classifier=dst-address ess

C. kind=pcq pcq-rate=5000000 pcq-classifier=src-address D. kind=pcq pcq-rate=256000 pcq-classifier=dst-address E. kind=pcq pcq-rate=256000 pcq-rate=256000 pcq-classifier=src-addr pcq-classifier=src-address ess 8. To

connect your MikroTik router to a wireless access point, you have to:  A. Use the same same SSID as on accesspoint accesspoint B. Use the same Radio Name C. Use the same Band (5 GHz, 2.4 GHz, ...)

9. Firewall

NAT rules process only the first packet of each connection.

false

10. In

which situations Netinstall can not be used to install RouterOS on a RouterBOARD?

 A. The router is connected only only to a secondary secondary Ethernet port B. The router does not have an operating system C. The password of the router is not known D. The router is connected only to a wireless network 11. For

static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:  A. advanced-tools advanced-tools B. routing C. no extra package required D. dhcp

12. When

adding a static route, you must always ensure that you add both the gateway and the interface.

false

13. Bridging

loops can be avoided by enabling:

 A. RSTP protocol protocol B. STP protocol C. Connection tracking D. UDP filter E. ICMP filter 14. Netinstall

can be used to

 A. Keep configuration, configuration, but reset a lost admin password password B. Reinstall software without losing licence C. Install different software version (upgrade or downgrade) D. Install package for different hardware architecture 15. For

user in local PPP Secrets/PPP Profiles database, database, it is possible to

 A. Allow/deny use of more than one login by this user  B. Allow login by PPPoE and PPTP, but deny login by L2TP C. Set max values for transferred data (Rx/Tx) D. Allow only PPPoE login E. Deny services (like telnet) only for this user or for one group of users 16. What

is necessary for PPPoE client configuration?

 A. Interface (on (on which PPPoE PPPoE client is going to work) B. Static IP address on PPPoE client interface C. ip firewall nat masquerade rule 17. Evaluate

the following information:

Access Point configuration: -- wlan1 is in 'AP-Bridge' mode -- Bridge1 has wlan1 and ether1 as ports CPE configuration: -- wlan1 is in 'Station-Bridge' mode -- Bridge1 has wlan1 and ether1 as ports Select protocols that will pass from ether1 on the CPE to ether1 on the Access Point.  A. IPv4 B. ARP C. USB D. BGP E. Firewire F. IPv6 G. DHCP H. PPPoE 18. Mark

all packages required for PPPoE server on MikroTik RouterOS

 A. ppp B. user-manager user-manager C. radius D. synchronous E. system 19. Action=redirect

applies to

 A. Firewall Firewall Filter rules rules B. DST-NAT rules C. Route rules D. SRC-NAT rules

20. One

host on an internal network is accessing an external web page through a MikroTik router that is doing source NAT. Select correct statement about the packets that flow from that web page to the host ?  A. Packets go through the output chain chain B. Packets go through the forward chain C. Packets go through the input chain before the routing decision and after that through output chain D. Packets go through the input chain

21. When

viewing the routes in Winbox, some routes will show "DAC" in the first column. These flags mean:

 A. Dynamic, Active, Connected Connected B. Direct, Available, Connected C. Dynamic, Active, Console D. Dynamic, Available, Created 22. Simple

Queue number 0 defines 2M for upload and download for target IP 10.10.0.33. Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client 10.10.0.33 is be able to obtain  A. 0M upload/download upload/download B. 6M upload/download upload/download C. 4M upload/download upload/download D. 2M upload/download upload/download 23. The

total-max-limit under Simple Queues will limit the combined upload and download of the targetaddress of your simple queue. true

24. To

be able to do NAT, the connection tracking does not need to be enabled.

true

25. Which

of the following Routes statuses are possible?

 A. S = Static B. C = Connected C. A = Active D. D = Drop

1. When

setting "Frequency Mode" value to Regulatory Domain, and setting "country", this changes the available frequencies and power output levels available for selection to only those allowed for the selected country? true

2. You

want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.  A. kind=pcq pcq-rate=5000000 pcq-classifier=srcaddress B. kind=pcq pcq-rate=1256000 pcq-classifier=dstaddress C. kind=pcq pcq-rate=256000 pcq-classifier=dstaddress D. kind=pcq pcq-rate=256000 pcq-classifier=srcaddress E. kind=pcq pcq-rate=5000000 pcq-classifier=dstaddress

3. What

is necessary for PPPoE client configuration?

 A. Interface (on which PPPoE client is going to work) B. Static IP address on PPPoE client interface C. ip firewall nat masquerade rule 4. Which

port does PPTP use by default?

 A. UDP 1723 B. TCP 1723 C. UDP 1721 D. TCP 1721 5. To

be able to do NAT the connection tracking does not need to be enabled.

true

6. Is

it possible to limit l imit how many clients are able to connect to an access point?

 A. Yes B. No it's not possible at all C. Yes, but only with access-lists 7. Which

are necessary sections in /queue simple to set bandwidth limitation?

 A. target-address, dst-address, max-limit B. target-address, max-limit C. max-limit D. target-address, dst-address

8. For

static routing functionality, additionally to the RouterOS 'sy stem' package, you will also need the following software package:  A. no extra package required B. routing C. advanced-tools D. dhcp

9. You

want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do:  A. Export global configuration and remove everything apart from '/ip firewall filter' B. Create backup only of '/ip firewall filter' rules C. Export only '/ip firewall filter' D. Create backup, edit backup file and restore on target router

10. The

total-max-limit under Simple Queues will limit the combined upload and download of the target-address of your simple queue. true

11. What

is the minimal possible wireless configuration to create an Access Point?

 A. mode B. scan-list C. DFS mode D. WDS E. radio name F. ssid G. frequency H. band 12. Which

configuration menu should you use to change router's Winbox default port?

 A. /ip service B. /ip firewall filter C. /ip firewall service-ports D. /system resource 13. There

can be more than one PPPoE server in a single broadcast domain:

true

14. Consider

the following diagram. di agram. We want to communicate from a device on LAN1 to a device on LAN2. Assuming that all necessary configurations are already included on R2, which of the following configurations in R1 would enable this communication?

 A. /ip route add dst-address=0.0.0.0/0 gateway=192.168.99.2 B. /ip route add dst-address=192.168.0.0/24 gateway=192.168.0.1 C. /ip route add dst-address=0.0.0.0/0 gateway=Ether1 D. /ip route add dst-address=192.168.1.0/24 srcaddress=192.168.0.0/24 gateway=192.168.99.2 E. /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2

15. Which

following option(s) is/are considered as good practice when dealing with rogue DHCP servers?  A. Use the DHCP Server alert system B. Input on CLI '/ip dhcp-server authoritative=yes' C. Enable 'Always Broadcast' option D. Enable 'Add ARP for Leases' option E. Use only static leases

16. For

user in local PPP Secrets/PPP Profiles database, it is possible to

 A. Set max values for transferred data (Rx/Tx) B. Deny services (like telnet) only for this user or for one group of users C. Allow login by PPPoE and PPTP, but deny login by L2TP D. Allow/deny use of more than one login by this user E. Allow only PPPoE login 17. What

is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server?

 A. dst-nat B. passthrough C. redirect D. tarpit 18. What

does the firewall action "Redirect" do? Select all true statements.

 A. Redirects a packet to a specified IP B. Redirects a packet to a specified port on the router

C. Redirects a packet to a specified port on a host in the network D. Redirects a packet to the router 19. When

sending out an ARP request, an IP host is expecting what kind of address for an answer?

 A. IP address B. VLAN ID C. 802.11g D. MAC Address 20. Mark

correct statement.

 A. Backup files are editable B. Backup files are not editable C. Export files are not editable 21. When

using routing option 'check-gateway=ping' what is the ICMP echo request interval (in seconds)?  A. 20s B. 60s C. 10s D. 30s

22. Which

of the protocols below is used by Netinstall?

 A. bootp B. arp C. dhcp D. rarp 23. By

default info, error and warning messages are logged into memory of your RouterOS device. You can add logging of visited web-pages and other message topics true

24. Which

of the following would prevent unknown clients from connecting to your AP? Choose the BEST answer.  A. Uncheck "Default Authenticate" in the wireless card configuration, and add each known client's MAC address to your access-list configuration ensuring that you enable "authenticate" in the entry B. Configure the radius server under "/radius" C. Uncheck "Default Authenticate" in the wireless card configuration, and add each known client's MAC

address to your connect-list configuration D. Check the "Do not permit unknown client" box in the wireless configuration E. Add each known client's MAC address to your access-list configuration is the only step needed 25. Consider

the following network diagram. In R1, you have the following configuration:  /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2  /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located l ocated at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?  A. /ip firewall filter add chain=forward srcaddress=192.168.0.0/24 dst-address=192.168.1.10 action=drop B. /ip firewall filter add chain=input srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop C. /ip firewall filter add chain=forward srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop D. /ip firewall nat add chain=dstnat srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop