What can be used as ’target-address’ in the simple queue?

A. address list name

B. client’s MAC address
C. client’s address
D. server’s address
Jawab : c
Penjelasan : karena untuk simple queue menggunakan ip address si client
2. When using routing option 'check-gateway=ping' after how many timeouts is gateway
considered unreachable:
A. 1
B. 3
C. 2
D. 4

Jawab : c
Penjelasan :
3. The highest queue priority is
A. 1
B. 8
C. 256
D. 16

Jawab :b
Penjelasan : priority terbesar yang dapat diberikan pada client adlah 8 semakin kecil
angkanya semaikn I prioritaskan
4. The 'connect-list' of wireless interfaces is used
A. for specifying APs not to connect to
B. for preventing communications between the clients
C. for specifying APs to connect to
D. for configuring SSID on the interface

Jawab : a dan c
Penjelasan : fungsi dari access-list ialah membatasi mana saja yang bisa connect ke ap
tersebut

5. Which option in the configuration of a wireless

s card must be disabled to cause the router to permit ONLY known clients listed in the
access list to connect?

A. Default Forward
B. Default Authenticate
C. Security Profile
D. Enable Access List

Jawab : b
Penjelasan : karena dengan default authenticate semua bisa connect ke ap tersebut
6. DHCP server is configured on a router’s ether1 interface. IP address 192.168.0.100/24 is
assigned to the interface. Possible IP pools, that can be used by this DHCP server, are:

A. 192.168.0.1-192.168.0.255
B. 192.168.0.1-192.168.0.99,192.168.0.101-192.168.0.254
C. 192.168.0.1-192.168.0.14
D. 192.169.0.1-192.169.0.254

Jawab : b dan c
Penjelasan : karena untuk jawaban A dan B akan terjai overlap ip (ip gateway tidak dipisah)

7. There can be more than one PPPoE server in a single broadcast domain:

Jawab : true
Penjelasa: karena dalam satu broadcast domain bisa menjalankan lebih dari satu point to
point dalam satu network

8. There are two wireless cards (wlan1 and wlan2) which are bridged together. On wlan1
card there is a setting "Forwarding=no". Choose the correct answer(s):
A. To prevent communication between wlan1 and wlan2 one cannot use Bridge Filters
B. Stations on wlan2 will be able to communicate with stations on wlan1
C. Stations on wlan1 will be able to communicate with stations on wlan2
D. Stations on wlan1 will be able to communicate with stations on wlan1
E. Stations on wlan2 will be able to communicate with stations on wlan2
9. When viewing the routes in Winbox, some routes will show "DAC" in the first column.
These flags mean:

A. Dynamic, Active, Console

B. Dynamic, Available, Created
C. Dynamic, Active, Connected
D. Direct, Available, Connected
Penjelasan : bisa dilihat di bawah ini
Flags: X - disabled, A - active, D - dynamic,

C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,

B - blackhole, U - unreachable, P - prohibit

10. For static routing functionality, additionally to the RouterOS 'system' package, you will
also need the following software package:
A. no extra package required
B. routing
C. advanced-tools
D. dhcp
Jawaban : a
Penjelasan :jika hanya static routing tidak memerlukan paket tambahan/extra package
11. Which of the following Routes statuses are possible?
A. C = Connected
B. A = Active
C. S = Static
D. D = Drop

Jawab : abc
Penjelsan : d tidak termasuk karena dia termasuk action dari firewall bukan status dari table
routing
12. It is possible to create an encrypted PPPoE tunnel in RouterOS:

Jawab true
penjelasan: karena dalam satu broadcast domain bisa menjalankan lebih dari satu point to
point dalam satu network
13. Action=redirect allows you to make

A. Transparent HTTP Proxy

B. Enable Local Service
C. Transparent DNS Cache
D. Forward DNS to another device IP address

Jawab : a dan c
Penjelasan : karena redirect yang terpasang di dm chain=dstnat ini berfungsi untuk
transparent http proxy dan juga transparent dns cache

14. What is possible with Netinstall?

A. MikroTik RouterOS password reset with saving router's configuration
B. MikroTik RouterOS configuration reset
C. MikroTik RouterOS reinstall

Jawaban : semua benar

Penjelasan : netiinstall dapat melakukan ketiganya
15. A client uses a RouterBOARD1000. The clock is configured in '/system clock'. The
clock resets to default after each reboot.
Select the best solution for the problem.

A. Write a script in '/system script' to set the clock

B. Configure '/system ntp client' and set a valid and reachable NTP server address.
C. Open the router and ensure the CMOS battery is fine.
D. Configure '/system ntp server' and set a valid and reachable NTP client address.

Jawab : b
Penjelasan : dengan memasang ntp client, maka ia akan mensingkronisasikan waktu
sesuai dengan yang ada di internet,
A, salah karna ketika reboot ia akan tetap kembali ke waktu sebelumnya
B salah karena dhcp server digunakan untuk memberikan waktu (dan bertindak sebagai
server) an ia tidak tersambung ke klien manapun
D. rb 1000 tidak memiliki battry cmos
16.
A. One
B. Unlimited
C. Five
D. Two

Jawaban : a
Penjelasan ; setiap interface hanya mendappat jatah 1 untuk setiap interface
17. A wireless interface 'wlan1' is added to a bridge interface 'br-lan'. To enable dhcp-server
for wireless interface 'wlan1', on which interface should dhcp-server be configured?

A. On both 'br-lan' and 'wlan1'

B. The dhcp-server cannot be enabled neither on 'wlan1', nor on 'br-lan'
C. On 'wlan1'
D. On 'br-lan'

Jawaban :D
Penjelasan tidak perlu lagi membuat ip address di wlan apabila sudah dimasukan kedalam
bridge
18. It is possible to have PPTP Client and PPTP server on one MikroTik router at the same
time.

Jawab : true
Penjelasa: karena d
19. Which firewall chain should be used for filters that protect your router interface?
A. post-routing
B. forward
C. pre-routing
D. input
20. What does the firewall action "Redirect" do? Select all true statements.
A. Redirects a packet to a specified port on a host in the network
B. Redirects a packet to a specified IP
C. Redirects a packet to a specified port on the router
D. Redirects a packet to the router
21. Which of the following would prevent unknown clients from connecting to your AP?
Choose the BEST answer.
A. Uncheck "Default Authenticate" in the wireless card configuration, and add each known
client's MAC address to your connect-list configuration
B. Configure the radius server under "/radius"
C. Add each known client's MAC address to your access-list configuration is the only step
needed
D. Uncheck "Default Authenticate" in the wireless card configuration, and add each known
client's MAC address to your access-list configuration ensuring that you enable
"authenticate" in the entry
E. Check the "Do not permit unknown client" box in the wireless configuration

Jawb
Penjelasan : karena dengan default authenticate semua bisa connect ke ap tersebut
22. Which port does PPTP use by default?
A. UDP 1723
B. UDP 1721
C. TCP 1723
D. TCP 1721

Jawab : c
Penjelasan : Port yang dipakai pptp ialah 1723secara default
23. Which are necessary sections in /queue simple to set bandwidth limitation?
A. target-address, max-limit
B. max-limit
C. target-address, dst-address
D. target-address, dst-address, max-limit

Jawab : a
Penjelasan : karena untuk simple queue hanya membutuhkan target dan juga max limit nya

24. It is required to make a web server on a private LAN visible on the Public Internet. Only
the web server port should be visible to the public. Which of the following configuration
steps must be met. (select all that apply)
A. A route between the NAT Router and the webserver must exist
B. in ip firewall NAT there should be a dst-nat between the public ip of the router and the
private ip of the webserver
C. LAN address of the webserver should be routable on the internet
D. Public IP address of the webserver must be installed on the NAT Router
E. Connection Tracking must be enabled on NAT router
25. What is the default protocol/port of (secure) winbox?
A. UDP/5678
B. TCP/22
C. TCP/8291
D. TCP/8080

Jawab : c
Penjelasan ; port default dari winbox aalah 8291