ADS

SOAL LATIHAN MTCNA CAPTER 1

 


CAPTER 1


Soal - soal ini berdasarkan dari soal MTCNA

Soal - soal ini dimaksudkan untuk latihan dan untuk dipelajari. Jawaban dari soal-soal ini belum tentu semuanya benar, apabila ada jawaban yang keliru, mohon diberitahu pada kolom komentar

Selamat mengerjakan, semoga lulus ujian dan semoga tetap istiqomah semangat belajarnya   :)


1.  You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.

2/2

A. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=256000 pcq-classifier=src-address

 

D. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

E. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

 

 

2. During a scan, in order to see all the available wireless frequencies that are supported by the card, the following option must be selected in the wireless card's "Frequency Mode":

0/2

A. superchannel

B. regulatory domain

 

C. manual txpower

 

3. Why is it useful to set a Radio Name on the radio interface?

2/2

A. To identify a station in the Access List

B. To identify a station in Neighbor discovery

 

C. To identify a station in a list of connected clients

 

4. Which firewall chain would be used to block a client's MSN traffic on a router?

0/2

A. static

 

B. forward

C. output

D. input

 

5. Which firewall chain you should use to filter SSH access to the router itself?

0/2

A. output

 

B. input

C. prerouting

D. forward

 

 

6. What is the correct action to be specified in the NAT rule to hide a private network when communicating to the outside world?

2/2

A. masquerade

 

B. allow

C. passthrough

D. tarpit

 

7. You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do:

2/2

A. Export global configuration and remove everything apart from '/ip firewall filter'

B. Create backup only of '/ip firewall filter' rules

C. Create backup, edit backup file and restore on target router

D. Export only '/ip firewall filter'

 

 

8. A DHCP server is configured on a LAN interface which is a port on a bridge. The DHCP server does not start. What could be the reason(s)?

2/2

A. The DHCP server can not run on an interface which is also a bridge port

 

B. There might not be an IP address assigned to the LAN Interface

C. The IP address pool could be incorrectly defined

D. There may be multiple IP addresses set on the LAN interface

 

9. There can be more than one PPPoE server in a single broadcast domain:

0/2

1. True

2. False

 

 

 

10. /interface wireless access-list is used for ?

0/2

A. Handles a list of Client's MAC Address to permit/deny connection to AP

B. Shows a list of Client's MAC Address that are already registered at AP

C. Contains the security profiles settings

D. Authenticate Hotspot users

 

 

11. How long is level 1 (free) license valid?

0/2

A. 1 month

B. 24 hours

C. 1 year

 

D. Infinite time

 

 

12. In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?

2/2

A. The router does not have an operating system

B. The password of the router is not known

C. The router is connected only to a wireless network

 

D. The router is connected only to a secondary Ethernet port

 

13. The highest queue priority is

0/2

A. 1

B. 256

 

C. 16

D. 8

 

 

14. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.

2/2

A. kind=pcq pcq-rate=256000 pcq-classifier=src-address

 

B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

 

D. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

E. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

 

15. How many different priorities can be selected for queues in MikroTik RouterOS?

0/2

A. 16

B. 1

 

C. 8

D. 0

 

 

16. One host on an internal network is accessing an external web page through a MikroTik router that is doing source NAT. Select correct statement about the packets that flow from that web page to the host ?

0/2

A. Packets go through the input chain

B. Packets go through the forward chain

C. Packets go through the output chain

D. Packets go through the input chain before the routing decision and after that through output chain

 

 

 

17. How many wireless clients can connect, when wireless card is configured to mode=bridge ?

0/2

A. 1

B. 100

C. 2007

D. 2

 

 

18. What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server?

0/2

A. tarpit

B. dst-nat

 

C. passthrough

D. redirect

 

 

 

19. What is marked by connection-state=established matcher?

0/2

A. Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection

B. Packet is related to, but not part of an existing connection

 

C. Packet does not correspond to any known connection

D. Packet begins a new TCP connection

 

 

 

20. For static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:

0/2

A. no extra package required

B. advanced-tools

C. routing

D. dhcp

 

 

 

21. PPP Secrets are used for

0/2

A. PPP clients

 

B. L2TP clients

C. IPSec clients

D. PPtP clients

 

E. PPPoE clients

 

F. Router users

 

22. Which is the default port of IP-Winbox?

0/2

A. TCP 8192

B. TCP 80

C. TCP 8291

D. UDP 8291

 

 

 

23. Which of the following Routes statuses are possible?

0/2

A. A = Active

B. C = Connected

 

C. S = Static

D. D = Drop

 

 

24. What does this simple queue do (check the image)?

0/2

A. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10

B. Queue limits host 192.168.1.10 download data rate to one megabit per second.

 

C. Queue limits host 192.168.1.10 upload data rate to one megabit per second.

D. Queue guarantees download data rate of one megabit per second for host 192.168.1.10

 

 

25. Is it possible to limit how many clients are able to connect to an access point?

2/2

A. No it's not possible at all

B. Yes, but only with access-lists

 

C. Yes

 

26. It is possible to have PPTP Client and PPTP server on one MikroTik router at the same time.

0/2

1. True

 

2. False

 

 

27. Which of the following is used in standard 802.11 wireless networks?

0/2

A. FDD

 

B. CDMA

C. CSMA/CA

D. CSMA/CD

 

 

28. In the Route List, the identification DAb for a route stands for

0/2

A. direct - active - bgp

B. direct - acknowledge - backup

C. dynamic - active - backup

 

D. dynamic - active - bgp

 

 

29. In which order are the entries in Access List and Connect List processed?

0/2

A. By Signal Strength Range

 

B. By interface name

C. In sequence order

D. In a random order

 

 

30. You have a DHCP server on your MikroTik router. The IP addresses 10.1.2.2-10.2.2.20 are distributed in the DHCP network. Additionally, 3 static IP address are defined for your servers: 10.1.2.31-10.1.2.33. After a while 20 more IP addresses need to be distributed in the network. It is possible to distribute the extra IP address without adding another DHCP Server:

0/2

1. True

 

2. False

 

 

31. What does the firewall action "Redirect" do? Select all true statements

2/2

A. Redirects a packet to a specified port on the router

B. Redirects a packet to a specified IP

 

C. Redirects a packet to the router

D. Redirects a packet to a specified port on a host in the network

 

 

32. There are two routes in the routing table: 0 dst-addr=10.1.1.0/24 gateway=5.5.5.5 1 dst-addr=10.1.1.4/30gateway=5.6.6.6 Which gateway will be used to get to the IP address 10.1.1.6?

0/2

A. both - half of the traffic will be routed through one gateway, half through the other

B. 5.5.5.5

 

C. the required route is not in the routing table

D. 5.6.6.6

 

 

33. It is possible to create an encrypted PPPoE tunnel in RouterOS:

2/2

1. True

 

2. False

 

34. You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do:

2/2

A. Export global configuration and remove everything apart from '/ip firewall filter'

B. Export only '/ip firewall filter'

 

C. Create backup, edit backup file and restore on target router

D. Create backup only of '/ip firewall filter' rules

 

35. Router A and B are both running as PPPoE servers on different broadcast domains of your network. It is possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers.

2/2

1. True

2. False

 

 

36. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply)

0/2

A. Public IP address of the webserver must be installed on the NAT Router

 

B. A route between the NAT Router and the webserver must exist

C. Connection Tracking must be enabled on NAT router

 

D. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver

E. LAN address of the webserver should be routable on the internet

 

 

37. Which features are removed when advanced-tools package is uninstalled?

0/2

A. neighbors

 

B. LCD support

C. ip-scan

D. ping

E. netwatch

F. bandwidth-test

 

 

38. MikroTik RouterOS commands can be run once a day by:

0/2

A. /system watchdog

 

B. /system cron

C. /system scheduler

 

39. DHCP server is configured on a router’s ether1 interface. IP address 192.168.0.100/24 is assigned to the interface. Possible IP pools, that can be used by this DHCP server, are:

0/2

A. 192.168.0.1-192.168.0.255

B. 192.169.0.1-192.169.0.254

C. 192.168.0.1-192.168.0.99 , 192.168.0.101-192.168.0.254

D. 192.168.0.1-192.168.0.14

 

40. For static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:

0/2

A. no extra package required

B. advanced-tools

C. dhcp

 

D. routing

 

 

 

41. Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1 add disabled=no distance=5 dst-address=0.0.0.0/0gateway=2.2.2.2

2/2

A. Route via gateway 2.2.2.2

 

B. Route via gateway 1.1.1.1

 

 

42. When using routing option 'check-gateway=ping' what is the ICMP echo request interval (in seconds)?

0/2

A. 30s

 

B. 20s

C. 10s

D. 60s

 

 

43. In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?

0/2

A. The router is connected only to a secondary Ethernet port

B. The router does not have an operating system

 

C. The router is connected only to a wireless network

 

D. The password of the router is not known

 

 

 

44. Which port does PPTP use by default?

0/2

A. TCP 1721

B. UDP 1721

C. UDP 1723

 

D. TCP 1723

 

 

45. When viewing the routes in Winbox, some routes will show "DAC" in the first column. These flags mean:

2/2

A. Dynamic, Active, Console

B. Dynamic, Active, Connected

 

C. Direct, Available, Connected

D. Dynamic, Available, Created

 

46. PPP Secrets are used for

0/2

A. PPPoE clients

 

B. L2TP clients

C. IPSec clients

D. PPP clients

 

E. PPtP clients

 

F. Router users

 

 

47. Where can you monitor (see addresses and ports) real-time connections which are processed by the router?

0/2

A. Firewall Connection Tracking

 

B. Firewall Counters

C. Tool Torch

D. Queue Tree

 

 

48. What can be used as ’target-address’ in the simple queue?

0/2

A. client’s MAC address

 

B. server’s address

C. address list name

D. client’s address

 

 

 

49. Which port does PPTP use by default?

0/2

A. TCP 1721

B. UDP 1723

 

C. TCP 1723

D. UDP 1721

 

50. In order to use dynamic keys in your wireless security profile for an AP, you MUST set up the dhcp server to provide the dynamic keys.

0/2

1. True

 

2. False

Post a Comment

0 Comments