8/23/2019 MikroTik Routers and Wireless

Search...

home about buy jobs hardware software support training account

Logout yasirmohy@[Link]

[Back To Main Menu]

[Link]
last save: 2019-08-21 [Link]
Save progress

1. Domain Name System (DNS) requests can use protocol/port:

A. TCP 80

B. UDP 80

C. TCP 53

D. UDP 53

2. You need to redirect a browser page from a search of "xxx" in google to another website such as [Link] Choose correct proxy
access rule.

A. /ip proxy access add dst-host=*.google.* path=*xxx* action=deny redirect-to=[Link]

B. /ip proxy access add path=*xxx* action=allow redirect-to=[Link]

C. /ip proxy access add dst-host=*xxx* action=deny redirect-to=[Link]

D. /ip proxy access add dst-host=*xxx* action=allow redirect-to=[Link]

3. You have a queue structure:

queue "GP" max-limit=10M

- queue "M" parent="GP" limit-at=4M max-limit=6M
- - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4
- - queue "C2" parent="M" limit-at=1M max-limit=4M priority=1
- - queue "C3" parent="M" limit-at=2M max-limit=7M priority=8
- queue "F" parent="GP" limit-at=5M max-limit=8M
- - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5
- - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2

Which queue will get more than limit-at in worst case scenario?

A. C3

B. C1

C. C2

D. D1

E. D2

4. SFQ queue types increase the drop probability even if the queue is not full. This is useful to equalize similar connections.

5. Routable traffic is received by a RouterOS router, with its destination found in an active working routing table entry to another router
elsewhere. The packet will be processed as follows:

A. Prerouting - Forward - Postrouting

B. Forward - Prerouting - Postrouting

C. Prerouting - Input - Interface

D. Postrouting -Forward - Prerouting

6. In RouterOS queue configurations the word "total" usually represents

A. download

B. download - upload

C. upload

D. upload + download

[Link] Routers and [Link] 1/4

8/23/2019 MikroTik Routers and Wireless
7. You have a queue structure:
queue "GP" max-limit=10M
- queue "M" parent="GP" limit-at=4M max-limit=6M
- - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4
- - queue "C2" parent="M" limit-at=1M max-limit=4M priority=1
- - queue "C3" parent="M" limit-at=3M max-limit=7M priority=8
- queue "F" parent="GP" limit-at=5M max-limit=8M
- - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5
- - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2

If queues "C2" and "C3" are not requiring any traffic, how is all the [Link]
available bandwidth going to be distributed in worst case scenario when all other queues are trying to get all available traffic?
last save: 2019-08-21 [Link]

A. queue "C1" will get 4M, "D2" 7M, "D1" 4M Save progress

B. queue "C1" will get 3M, "D2" 3M, "D1" 5M

C. queue "C1" will get 4M, "D2" 3M, "D1" 3M

D. queue "C1" will get 5M, "D2" 2M, "D1" 3M

E. queue "C1" will get 2M, "D2" 5M, "D1" 3M

8. Choose the correct PCQ argument values to allow 256kbps maximum download and upload for each client:

A. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

D. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

E. kind=pcq pcq-rate=256000 pcq-classifier=src-address

9. Which of these techniques equalizes the flow between connections when the link is completely full:

A. PFIFO

B. FIFO

C. PCQ

D. SFQ

E. RED

10. An IP packet has matched the conditions of a firewall rule and the rule actions 'action=reject reject-with=icmp-network-unreachable' were
initiated. What will happen to the contents of the packet?

A. The packet will be rejected only if the destination network is unreachable

B. The whole packet will be forwarded back to the sender regardless of its contents

C. The packet will be discarded regardless of its content

D. The packet header will receive a flag of 'icmp-network-unreacheble'

11. You have a queue structure:

queue "MK" max-limit=23M

-queue "A" parent="MK" limit-at=10M max-limit=18M

--queue "AA" parent="A" limit-at=3M max-limit=5M priority=1
--queue "AB" parent="A" limit-at=1M max-limit=2M priority=2
--queue "AC" parent="A" limit-at=4M max-limit=8M priority=4
-queue "B" parent="MK" limit-at=10M max-limit=18M
--queue "BA" parent="B" limit-at=1M max-limit=10M priority=1
--queue "BB" parent="B" limit-at=2M max-limit=3M priority=3

Select the correct answer for the worst case scenario when all queues are trying to get all available traffic.

A. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 3M

B. queue "AA" will get 3M, "AB" 1M, "AC" 8M, "BA" 1M, "BB" 3M

C. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 2M

D. queue "AA" will get 5M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M

E. queue "AA" will get 3M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M

12. Changes to the TTL (Time To Live) of a packet can not be adjusted, it is hard coded in RouterOS.

[Link] Routers and [Link] 2/4

8/23/2019 MikroTik Routers and Wireless

13. How can mangle rules be applied to dynamically created PPTP client interfaces (select all that apply):

A. It is not possible to do this

B. By enabling the 'PPTP Use Firewall' setting in the associated PPP Profile

C. By using 'all ppp' as the mangle 'In interface'

D. By using the Address List feature in the associated PPP Profile [Link]
14. You want to offer a static route to your DHCP clients (besides the default-route). What is the best way to do that?
last save: 2019-08-21 [Link]
Save progress
A. Set DHCP options 3

B. Set a static IP into /ip route and it will automatically be sent to clients

C. There is no way to send a static-route to DHCP clients

D. Set DHCP options 121

15. MikroTik RouterOS commands can be run once a day by:

A. /system cron

B. /system scheduler

C. /system watchdog

16. The Simple Queue Total tab controls both upload and download totals aggregated together.

A. True

B. False

17. How could you limit the impact of a DDoS (Distributed Denial of Service) attack?

A. Use the firewall limit function to limit number of connections to servers

B. Set the TCP SYN cookie option in IP settings

C. Use the firewall limit function to limit number of connections from clients

D. Create a tarpit rule to reject all "connection state=invalid" packets

18. If ARP=reply-only is configured on an interface, this interface will

A. accept IP and MAC address combinations listed in '/ip arp' list

B. add new IP addresses in '/ip arp' list

C. accept all MAC-addresses listed in '/ip arp' as static entries

D. add new MAC addresses in '/ip arp' list

E. accept all IP addresses listed in '/ip arp' as static entries

19. Router has wireless and ethernet client interfaces, all client interfaces are bridged. To create a DHCP service for all clients, DHCP server must
be configured on:

A. Only on the bridge interface

B. Every bridge port

C. DHCP service is not possible in this setup

D. Ethernet and wireless interfaces

20. Router is connected to [Link]/24 (public) and [Link]/24 (local) networks. There are two routes in the routing table:
0 dst-addr=[Link]/0 gateway=[Link]
1 dst-addr=[Link]/0 gateway=[Link] routing-mark=server_traffic

and 2 rules in firewall mangle

0 chain=prerouting src-address=[Link] action=mark-connection new-connection-mark=server_conn
1 chain=prerouting connection-mark=server_conn action=mark-routing new-routing-mark=server_traffic

Through which gateway will a client, with an IP address of [Link], establish a connection to internet?

A. through both gateways

B. through [Link]

C. connections are not possible in this configuration

D. through [Link]

[Link] Routers and [Link] 3/4

8/23/2019 MikroTik Routers and Wireless

21. What does the firewall action "Redirect" do? Select all true statements.

A. Redirects a packet to the router

B. Redirects a packet to a specified port on the router

C. Redirects a packet to a specified IP

D. Redirects a packet to a specified port on a host in the network

[Link]
22. To make load balancing using 2 or more gateways, we can use mangle (mark-route) with PCC. If we want a certain client to always use the
same gateway, we use PCC classifier :
last save: 2019-08-21 [Link]
Save progress
A. dst-address

B. both address

C. src-address

D. src-address and port

23. In IP firewall filter, "dst-limit" option is used to limit the number of hops a packet is allowed to take

24. Which of the following are reported by MikroTik Discovery Protocol:

A. Routing Protocol available

B. Remote router identity

C. All layer3 addresses from all interfaces

D. Remote Router routing Table

E. Remote router software version

F. Mac Address of reachable interface

25. A RouterOS firewall configuration (see illustration) contains several filter rules and pre-defined Regex Layer 7 rules. What will be actioned for
the 6 Layer 7 rules that are visible in the illustration? (Assume that the additional action of 'log' is not enabled on any drop rules)

A. All L7 detected packets will be 'DROPPED' first and then a 'LOG' entry will be made of each L7 protocol
detected

B. All L7 detected packets will be 'LOGGED' only and not 'DROPPED'

C. All L7 detected packets will be 'LOGGED' first and then the packet will be 'DROPPED'

D. All L7 detected packets will be 'DROPPED' only

Finish

© Mikrotik : RouterBOARD : Forum : MUM : Training : Wiki : Newsletters : Twitter

[Link] Routers and [Link] 4/4