MTCNA sample exam

1. In Ip Firewall NAT, you can Classify Traffic in SRC Nat Chain based on ” in-interface”.

False

2. To use masquerade, you need to specify

A. action=masquerade, out-interface, chain=src-nat

B. action=accept, out-interface, chain=src-nat

C. action=masquerade, in-interface, chain=src-nat

D. action=masquerade, out-interface, chain=dst-nat

3. Which option in the configuration of a wireless card must be disabled to cause the router to
permit ONLY known clients listed in the access list to connect?

A. Default Forward

B. Enable Access List

C. Default Authenticate

D. Security Profile

4. Is it possible to limit how many clients are able to connect to an access point?

A. Yes, but only with access-lists

B. No it’s not possible at all

C. Yes

5. Which of the following Routes statuses are possible?

A. D = Drop

B. C = Connected

C. S = Static

D. A = Active

6. It is necessary to configure a local DNS server to be able to give out a DNS setting to clients via
DHCP server.

True
7. What kind of users are listed in the “/user” menu?

A. pptp users

B. hotspot users

C. router users

D. wireless users

8. How many DHCP servers could you run on one interface?

A. 255

B. 1024

C. 4

D. 1

9. What configuration is added by /ip hotspot setup command? (select all that apply)

A. /ip hotspot user

B. /queue tree

C. /ip service

D. /ip dhcp-server

E. /ip hotspot walled-garden

10. What is the default protocol/port of (secure) winbox?

A. TCP/8080

B. TCP/22

C. UDP/5678

D. TCP/8291
11. Router has Wireless and Ethernet client interfaces, all client interfaces are bridged.

To create a DHCP service for all clients you must configure DHCP server on

A. only on bridge interface

B. every bridge port

C. DHCP service is not possible in this setup

D. Ethernet and wireless interfaces

12. A routing table has following entries:

0 dst-address=10.0.0.0/24 gateway=10.1.5.126

1 dst-address=10.1.5.0/24 gateway=10.1.1.1

2 dst-address=10.1.0.0/24 gateway=25.1.1.1

3 dst-address=10.1.5.0/25 gateway=10.1.1.2

Which gateway will be used for a packet with destination address 10.1.5.126?
A. 10.1.1.1

B. 10.1.1.2

C. 10.1.5.126

D. 25.1.1.1

13. Is it possible to have PPTP Client and PPTP server on one MikroTik router at the same time?

True

14. Router A and B are both running as PPPoE servers on different broadcast domains of your
network. Is it possible to set Router A to use “/ppp secret” accounts from Router B to authenticate
PPPoE customers ?

False

15. You want to skip HotSpot (authorization, accounting, etc.) for a specific host. What should you
use?

A. /ip hotspot ip-binding

B. /ip hotspot walled-garden ip

C. /ip hotspot walled-garden

D. /ip address
16. What does the firewall action “Redirect” do?

A. Redirects a packet to a specified port on a host in the network

B. Redirects a packet to a specified IP

C. Redirects a packet to the router

D. Redirects a packet to a specified port on the router

17. Which wireless mode allows you to connect to any standard AP (not only MikroTik) and to be
able to bridge this wireless interface to an Ethernet?

A. station

B. bridge

C. station-pseudobridge

D. station-wds

18. Possible actions of ip firewall filter are:

A. bounce

B. accept

C. tarp

D. add-to-list

E. log

F. tarpit

19. How many layers does Open Systems Interconnection model have?

A. 9

B. 6

C. 5

D. 7

E. 12
20. What does this simple queue do (check the image)? Image can not display

A. Queue guarantees download data rate of one megabit per second for host 192.168.1.10

B. Queue limits host 192.168.1.10 upload data rate to one megabit per second.

C. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10

D. Queue limits host 192.168.1.10 download data rate to one megabit per second.

21. You can control bandwidth of a client connected to AP with the resource / interface wireless
access-list ( assume the client uses MikroTik RouterOS).

True

22. Choose all valid hosts address range for subnet 15.242.55.62/27

A. 15.242.55.33-15.242.55.63

B. 15.242.55.33-15.242.55.62

C. 15.242.55.31-15.242.55.62

D. 15.242.55.32-15.242.55.63

23. Which configuration menu should you use to change router’s Winbox default port?

A. /ip service
B. /ip firewall service-ports

C. /ip firewall filter

D. /system resource

24. A backup file from a MikroTik router is stored in plain text format

False

25. In RouterOS queue configurations the word “total” usually represents

A. download

B. upload + download

C. download – upload

D. upload