Вы находитесь на странице: 1из 10

MikroTik Certification Exam Sample Questions Page 1

MTCRE

Static Routing

1. There are two routes in the routing table:


• 0 dst-addr=10.1.1.0/24 distance=10 gateway=10.10.10.10
• dst-addr=10.1.1.4/30 distance=20 gateway=10.20.20.20
Which gateway will be used to send packet with destination IP address 10.1.1.6?
A. 10.20.20.20
B. both
C. 10.10.10.10
D. None, because distance is >=10

2. Which static-route rule will have priority for destination 192.168.0.18?

A. dst-address=192.168.0.0/26 gateway=192.168.1.1 distance=3

B. dst-address=192.168.0.0/28 gateway=192.168.3.1 distance=1


C. dst-address=192.168.0.0/26 gateway=192.168.2.1 distance=2
D. dst-address=192.168.0.0/28 gateway=192.168.4.1 distance=5
E. dst-address=192.168.0.0/24 gateway=192.168.3.1 distance=1

3. MikroTik router needs to forward IP-packet targeted to 11.12.4.5. Router routing table has 3 routes,
• 1. dst-address=11.12.4.0/24, distance=10, gateway=1.1.1.1
• 2. dst-address=11.12.4.0/28, distance=20, gateway=1.1.1.2.
• 3. dst-address=0.0.0.0/0, distance=1, gateway=1.1.1.254. Which of the gateways will router select?
A. 2
B. 3
C. Nowhere.
D. Host will get "destination host unreachable".
E. 1

4. There are two routes in the routing table:


• 0 dst-addr=10.1.1.0/24 gateway=5.5.5.5
• 1 dst-addr=10.1.1.4/30 gateway=5.6.6.6
Which gateway will be used to get to the IP address 10.1.1.6?
A. both - half of the traffic will be routed through one gateway, half through the other

B. 5.6.6.6

C. 5.5.5.5
SMK Daarut Tauhid
MikroTik Certification Exam Sample Questions Page 2

D. the required route is not in the routing table

5. Consider the following output from the command "/ip address print":
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 10.10.10.1/32 10.10.10.2 0.0.0.0 pppoe-1
1 10.10.10.1/32 10.10.10.3 0.0.0.0 pppoe-2
This configuration is invalid because of the duplicate IP's. (TRUE/FALSE)

6. Select the correct statements about routing marks:


A. each packet can have more than one routing mark
B. can be assigned by IP firewall mangle chains input and output
C. a packet with a routing mark is ignored by main routing table if there is at least one route for the routing
mark
D. check-gateway option is not compatible with routing-mark

7. /ip route can have DS flags simultaneously. (TRUE/FALSE)

8. If route type is 'blackhole', then packets to the destination network are going to be

A. dropped on this router and ICMP message will be sent back to the source
B. sent back to the source
C. sent back to the previous router
D. dropped on this router

9. Define a routing loop (choose the most precise description)


A. situation where the TTL of the packet expires
B. Situation where the packet does not reach it\'s destination
C. situation where the packet is routed through the same sequence of routers until the TTL expires
D. situation where the packet is routed through the same router twice

10. Which routing table is used to apply recursive routing at MikroTik RouterOS
A. It is possible in all the routing tables installed in a router
B. It is not possible
C. It is only possible on the x86 platform
D. It is only possible in the main routing table /

11. The default value of 'target-scope' for a static route is:


A. 255
B. 10
C. 30
D. 1
SMK Daarut Tauhid
MikroTik Certification Exam Sample Questions Page 3

12. When using the "check gateway" function in creating a route, the following protocols can be utilized to ensure the gateway
address is reachable (choose all correct answers):
A. UDP
B. MNDP
C. ARP
D. ICMP

13. To assign specific traffic to a route – traffic must be identified by a routing mark. Each packet can only have one routing mark.
(TRUE/FALSE)

14. Which route will be used to reach host 192.168.1.55? /ip route add disabled=no distance=1 dst-address=192.168.1.0/24
gateway=1.1.1.1 add disabled=no distance=1 dst-address=192.168.1.0/25 gateway=2.2.2.2 add disabled=no distance=1
dstaddress=192.168.0.0/16 gateway=3.3.3.3
A. Route via gateway 3.3.3.3
B. Route via gateway 2.2.2.2
C. Route via gateway 1.1.1.1

15. Router has two gateways to reach a certain network both with check gateway activated. Choose the option you can use to
control active and backup gateway.
A. Routing mark
B. Interface
C. Scope
D. Distance

16. ECMP provides:


A. per src address load balancing to multiple gateways
B. per src/dst address pair load balancing to multiple gateways
C. per connection load balancing to multiple gateways
D. per packet load balancing to multiple gateways

17. When adding a static route, you must always ensure that you add both the gateway and the interface. (TRUE/FALSE)

18. If we change TTL to 2 in mangle chain prerouting


A. packet will not be forwarded
B. packet will always reach its destination
C. packet will be forwarded only to next L3 device
D. packet will be forwarded to the next 2 L3 devices

19. If 'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable, then
A. the ECMP route becomes inactive
B. ECMP is going to send packets to all gateways even if one is unreachable
C. the unreachable gateway is not going be used in Round Robin algorithm

SMK Daarut Tauhid


MikroTik Certification Exam Sample Questions Page 4

20. It is possible to change the Time To Live in Firewall Mangle. (TRUE/FALSE)

21. When sending out an ARP request, an IP host is expecting what kind of address for an answer?
A. VLAN ID
B. 802.11g
C. IP address
D. MAC Address

22. Consider the following diagram. We want to communicate from a device on LAN1 to a device on LAN2. Assuming that all
necessary configurations are already included on R2, which of the following configurations in R1 would enable this
communication?

A. /ip route add dst-address=0.0.0.0/0 gateway=Ether1


B. /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2
C. /ip route add dst-address=192.168.0.0/24 gateway=192.168.0.1
D. /ip route add dst-address=192.168.1.0/24 src-address=192.168.0.0/24 gateway=192.168.99.2 E. /ip route add dst-
address=0.0.0.0/0 gateway=192.168.99.2

23. Mangle Routing (routing-mark) is possible, by using chains:


A. input and output
B. forward and postrouting
C. prerouting and output
D. forward and output
E. prerouting and forward

24. There are four routes in the routing table. Host 10.10.10.10 becomes unreachable.
• 1 dst-addr=0.0.0.0/0 gateway=11.11.11.11
• 2 dst-addr=20.20.20.0/24 gateway=10.10.10.10 check-gateway=ping
• 3 dst-addr=30.30.30.0/24 gateway=10.10.10.10
• 4 dst-addr=30.30.30.0/25 gateway=13.13.13.13 check-gateway=ping

Which gateway is used to get to the IP address 30.30.30.145?

A. 10.10.10.10
B. 13.13.13.13
C. 11.11.11.11
D. None. Packets to that host will be dropped until host 10.10.10.10 becomes active again.

25. /ip route configuration on router,

SMK Daarut Tauhid


MikroTik Certification Exam Sample Questions Page 5

• /ip route add gateway=192.168.0.1


• /ip route add dst-address=192.168.1.0/24 gateway=192.168.0.2
• /ip route add dst-address=192.168.2.0/24 gateway=192.168.0.3
• /ip route add dst-address=192.168.3.0/26 gateway=192.168.0.4 Router needs to send packets to
192.168.3.240. Which gateway will be used?
A. 192.168.0.1
B. 192.168.0.2
C. 192.168.0.4
D. 192.168.0.3

26. A MikroTik Router has the following configuration


• /ip address add address=1.1.1.2/30
interface=ether1 add
address=2.2.2.2/30 interface=ether2
add address=192.168.10.1/24
interface=ether3
• /ip firewall mangle add
action=markconnection
chain=prerouting dstport=80 new-
connectionmark=web_c
passthrough=yes protocol=tcp add
action=markrouting chain=prerouting
connection-mark=web_c newrouting-
mark=web passthrough=no
• /ip firewall nat add
action=masquerade chain=srcnat out-
interface=ether3
• /ip route add gateway=1.1.1.1 add
gateway=2.2.2.2 routing-mark=web

What can be said about the Web Access (port 80) by a customer connected at ether3 interface with IP 192.168.10.2/24, gateway
192.168.10.1?
A. The customer will access the Web using the gateway 2.2.2.2
B. The Customer will access the Web by ECMP, by using both gateways 1.1.1.1 and 2.2.2.2
C. The Customer is unable to access the Web.
D. The customer will access the Web using the gateway 1.1.1.1

27. When creating a route, it is possible to specify the gateway to a network even if the gateway is not directly connected by using
recursive next-hop resolving from an existing route. (TRUE/FALSE)

28. Routing table has several routes with the same gateway. If 'check-gateway' is enabled for one of the routes, and the gateway
becomes unreachable, then
A. only this one route would become inactive
B. all routes with the same gateway would become inactive
C. the 'check-gateway' feature would not work at all, since the same gateway is used for more than one route

29. routing table has following entries:

SMK Daarut Tauhid


MikroTik Certification Exam Sample Questions Page 6

• 0 dst-address=10.0.0.0/24 gateway=10.1.5.126
• 1 dst-address=10.1.5.0/24 gateway=10.1.1.1
• 2 dst-address=10.1.0.0/24 gateway=25.1.1.1
• 3 dst-address=10.1.5.0/25 gateway=10.1.1.2
Which gateway will be used for a packet with destination address
10.1.5.126?
A. 10.1.1.2

B. 25.1.1.1

C. 10.1.5.126
D. 10.1.1.1

OSPF

1. Only OSPF routes distributed as "external" can be filtered with routing filters (TRUE/FALSE)

2. OSPF starts working on the router as soon as


A. at least one area is specified in the ospf area menu
B. at least one IP network is assigned in the ospf network menu
C. at least one interface is defined in the ospf interface menu
D. the routing package is enabled on the router

3. A MikroTik system administrator implemented OSPF Routing protocol in the network. But realized that he has a static route on
the routers. What can be done to make the static route work as a failover whenever the dynamic routing protocol fails?
A. He should use "netwatch" to trigger static routes whenever OSPF fails
B. He should manually disable the static routes and enable them whenever OSPF fails
C. He should increase the administrative distance of the static route
D. Delete all static routes because there is no way for it to work with OSPF

4. An OSPF area consists of 15 routers connected in 6 different broadcast networks. How many Designated routers there will be in
the area?
A. 6
B. 1
C. 0
D. 15

5. Which is the correct way to set a comment in a OSPF dynamic route:


A. It can be configured by setting up Routing filters
B. A comment cannot be configured in a dynamic route
C. It can be configured manually in the Routing Table

SMK Daarut Tauhid


MikroTik Certification Exam Sample Questions Page 7

6. What is the minimum configuration a network administrator needs to do on a MikroTik router to enable OSPF?
A. Nothing; OSPF instance can run with no configuration
B. Both interface and network must be added to OSPF configuration
C. Add an interface to OSPF interface configuration

7. In OSPF settings, the NBMA Neighbor setting can be used to improve the stability of OSPF across wireless links. (TRUE/FALSE)

8. It is possible to have OSPF and BGP configured on the same router? (YES/NO)

9. In this ospf network (see diagram), we want to re-distribute routes from R5 to the R3 router. Where do I have to create a virtual
link?

A. There is no need for a virtual-link


B. Between R1 and R4
C. Between R5 and R3
D. Between R4 and R2

10. Which of the following conditions have to be fulfilled for two routers on one ethernet segment to become ospf neighbors?
A. Network-type must be the same
B. Hello and dead timers must be the same
C. MTU must be the same
D. Cost must be the same

11. You have a router with the following IP addresses:


• ether1: 10.40.1.1/24
• ether2: 10.250.1.1/30
• ether3: 10.251.1.1/30
• wlan1: 10.50.1.1/30
• wlan2: 10.50.2.1/30

SMK Daarut Tauhid


MikroTik Certification Exam Sample Questions Page 8

You have a customer directly connected to ether2, and another customer directly connected to ether3. Your wireless radios are
used for wireless connectivity to two different towers, and ether1 goes to another wireless access point for other subscribers.
You need all of the subnets distributed across your OSPF Network. You need to configure OSPF to talk on this router, what
would be the best configuration.
A. Set OSPF Networks to 10.40.1.0/24, 10.250.1.0/30, 10.251.1.0/24, 10.50.1.0/30, and 10.50.2.0/30
B. set distribute-default=always-type-1
C. Set OSPF networks to 0.0.0.0/0
D. Set OSPF Networks to 10.40.1.0/24, 10.250.1.0/30, 10.251.1.0/30, 10.50.1.0/30, and 10.50.2.0/30
E. Set OPSF networks to 10.0.0.0/8 only
F. Set OSPF networks, to 10.50.1.0/30, 10.50.2.0/30
G. Set Distribute-Connected=yes
H. Set Ethernet 2 and 3 to passive mode
I. set distribute-state=yes
J. Set Ethernet 1, 2, and 3 to passive mode

12. New area OSPF \"area1\" has been created. What could be used as a valid area id?

A. 1.2.3.4

B. 0.0.0.1
C. 0.0.0.0

13. True or False: BGP can be used for internal routing, using an internal AS number. (TRUE/FALSE)

14. Which type of ip route is the highest priority for routing decision ?
A. OSPF Route
B. BGP Route
C. Static Route
D. Connected Route

15. In OSPF interface configuration what effect will a “passive=yes” option have on a specific interface ?
A. It will prevent routes learned through the interface from being listed in the routing table.
B. It will action a mirroring of all routing upgrades to
that interface
C. It will prevent all OSPF traffic through that interface

D. It will prevent all traffic through that interface

VLAN

1. VLAN is an implementation of the 802.1Q VLAN protocol by the MikroTik RouterOS. It allows you to have multiple Virtual LANs
on a single ethernet or wireless interface, giving the ability to segregate LANs efficiently. How many different vlans are possible
on a single ethernet port?
SMK Daarut Tauhid
MikroTik Certification Exam Sample Questions Page 9

A. 4096
B. Only one
C. 63
D. 4095

2. A network administrator has 2 vlans /interface vlan add name=vlan1 vlan-id=101 interface=ether1 add name=vlan2 vlanid=102
interface=vlan1
Any packet sent over "vlan2" interface …
A. will have one vlan tag added to ethernet header - "101"
B. will have one vlan tag added to ethernet header - "102"
C. Wrong configuration because it is not possible to have a vlan over another vlan
D. will have two vlan tags added to ethernet header - "101" and "102"
E. will not go through at all because vlan1 will drop it

3. It is possible to create a configuration where VLAN and PPTP interfaces are bridged together. (TRUE/FALSE)

4. How many VLAN headers do IEEE 802.1Q permit?


A. 1
B. more than 2
C. unlimited
D. 2

Tunneling

1. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router
A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers? (YES/NO)

2. To route two private networks together over a public routed network (there are multiple hops between the gateway routers of
the private networks), you can use the following tunnel types (mark all that are correct):
A. PPTP
B. PPPOE
C. L2TP
D. IPIP
E. EOIP

3. Which ones of these are Point-to-Point addresses?


A. address=10.0.0.1/24 network=10.0.0.0
B. address=1.1.1.1/32 network=10.0.0.0
C. address=10.0.0.1/32 network=10.0.0.0
D. address=10.0.0.1/32 network=10.0.0.254

SMK Daarut Tauhid


MikroTik Certification Exam Sample Questions Page 10

4. The correct order for PPPOE discovery stage is


A. Request, Offer, Initialization and Session confirmation
B. Request, Initialization, Session confirmation and Offer
C. Initialization, Session confirmation, Request and Offer
D. Initialization, Offer, Request and Session confirmation

5. When you set up a L2TP server in MikroTik RouterOS, is it mandatory to configure an IPSec policy? (YES/NO)

6. When adding a user to your local ppp secrets/ppp profiles database, it is possible to
A. Allow/deny use of more than one login by this user
B. Allow login by pppoe and pptp, but deny login by l2tp
C. Deny services (like telnet) only for this user or for one group of users
D. Set max values for total transferred bytes (up- and download)
E. Allow only pppoe login

7. A MikoTik PPPoE Server can be used only within a broadcast domain, that is, users can not run PPPoE protocol with a server if
there is a router between the customer and that PPPoE server. (TRUE/FALSE)

8. To securely bridge together 2 remote networks you can use


A. PPTP BCP
B. EoIP over PPTP
C. PPPoE over EoIP
D. PPTP over EoIP

9. Settings in /ppp secret user database override corresponding /ppp profile settings. (TRUE/FALSE)

SMK Daarut Tauhid

Вам также может понравиться