If 'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable, then:

A. The unreachable gateway is not going be used in Round Robin algorithm

B. ECMP is going to send packets to all gateways even if one is unreachable.

C. The ECMP route becomes inactive.

Correct Answer: A

Action=redirect can be used in NAT chain src-nat

A. true

B. false
Correct Answer: B

PPPoE server only works within one Ethernet broadcast domain that it is connected to. If there is a router
between server and end-user host, it will not be able to create PPPoE tunnel to that PPPoE server.

A. True

B. False
Correct Answer: B

How long is an IPv6 address?

A. 128 bits B. 128 bytes C. 32 bits D. 64 bits

Correct Answer: A

One host on an internal network is accessing an external web page through a MikroTik router that is doing
source NAT. Select correct statement about the packets that flow from that web page to the host ?

A. Packets go through the input chain before the routing decision and after that through output chain

B. Packets go through the forward chain

C. Packets go through the output chain

D. Packets go through the input chain

Correct Answer: B

A routing table has following entries:

0 dst-address=10.0.0.0/24 gateway=10.1.5.126
1 dst-address=10.1.5.0/24 gateway=10.1.1.1
2 dst-address=10.1.0.0/24 gateway=25.1.1.1
3 dst-address=10.1.5.0/25 gateway=10.1.1.2
Which gateway will be used for a packet with destination address 10.1.5.126?

A. 10.1.1.1 B. 10.1.5.126 C. 25.1.1.1 D. 10.1.1.2

Correct Answer: D
It is possible to create an encrypted PPPoE tunnel in RouterOS:

A. false B. true
Correct Answer: B

You have a router with configuration

- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24
Mark the correct configuration on client PC to access to the Internet

A. IP:192.168.0.1/24 gateway:192.168.2.1

B. IP:192.168.2.253/24 gateway:202.168.0.1

C. IP:192.168.1.223/24 gateway:248.115.148.136

D. IP:192.168.2.115/24 gateway: 192.168.2.1

E. IP:192.168.2.2/24 gateway:202.168.125.45
Correct Answer: D

There are two routes in the routing table:

0 dst-addr=10.1.1.0/24 gateway=5.5.5.5
1 dst-addr=10.1.1.4/30 gateway=5.6.6.6
Which gateway will be used to get to the IP address 10.1.1.6?

A. the required route is not in the routing table

B. both - half of the traffic will be routed through one gateway, half through the other

C. 5.5.5.5

D. 5.6.6.6
Correct Answer: D

Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33.
Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. Client
10.10.0.33 is be able to obtain

A. 0M upload/download

B. 6M upload/download

C. 4M upload/download

D. 2M upload/download
Correct Answer: D
When backing up your router by using the 'Export' command, the following happens:

A. The Export file can be edited with a standard text editor after its creation

B. Winbox usernames and passwords are backed up

C. You are requested to give the export file a name

Correct Answer: A,C

Which statements are true regarding ICMP packets?

ICMP guarantees datagram delivery.
ICMP can provide hosts with information about network problems.
ICMP is encapsulated within IP datagrams.
ICMP is encapsulated within UDP datagrams.

A. 1 only

B. 2 and 3

C. 1 and 4

D. All of the above

Correct Answer: B

When sending out an ARP request, an IP host is expecting what kind of address for an answer?

A. IP address B. VLAN ID C. MAC Address D. 802.11g

Correct Answer: C

To connect your MikroTik router to a wireless access point, you have to:

A. Use the same Band (5 GHz, 2.4 GHz, ...) B. Use the same Radio Name C. Use the same SSID as
on accesspoint
Correct Answer: A,C

What command will display the line, protocol, DLCI, and LMI information of an interface?

A. sh pvc B. show interface C. show frame-relay pvc D. show run

Correct Answer: B

Select minimal set of software packages in RouteOS required to configuring a wireless AP

A. advanced-tools B. System C. routing D. dhcp E. Wireless

Correct Answer: B,E
You have 10 users plugged into a hub running 10Mbps half-duplex. There is a server connected to the switch
running 10Mbps half-duplex as well. How much bandwidth does each host have to the server?

A. 2 Mbps B. 1 Mbps C. 10 Mbps D. 100 kbps

Correct Answer: C

There can be more than one PPPoE server in a single broadcast domain:

A. True B. False
Correct Answer: A

If you wish to block user access to MSN messenger, which chain should the firewall rule be placed in?

A. output B. input C. process D. forward

Correct Answer: D

Action=redirect allows you to make

A. Transparent HTTP Proxy B. Transparent DNS Cache C. Forward DNS to another device IP address

D. Enable Local Service

Correct Answer: A,B

A network ready device is directly connected to a MikroTik RouterBOARD 750 with a correct U.T.P. RJ45
functioning cable. The device is configured with an IPv4 address of 192.168.100.70 using a subnet mask of
255.255.255.252. What will be a valid IPv4 address for the RouterBOARD 750 for a successful connection to
the device?

A. 192.168.100.71/255.255.255.252

B. 192.168.100.69/255.255.255.252

C. 192.168.100.68/255.255.255.252

D. 192.168.100.70/255.255.255.252
Correct Answer: B

You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new
configuration.

A. False B. True
Correct Answer: A
To block communications between wireless clients connected to the same access point interface, you
should set

A. 'max-station-count=1'

B. 'default-authentication=no'

C. 'default-forwarding=no'

D. 'default-authentication=no' and 'default-forwarding=no'

Correct Answer: C

Why is it useful to set a Radio Name on the radio interface?

A. To identify a station in a list of connected clients

B. To identify a station in the Access List:

C. To identify a station in Neighbor discovery

Correct Answer: B

Which type of encryption could be used to establish a connection with a simple passkey without using a
802.1X authentication server?

A. WPA PSK/WPA2 PSK B. WPA EAP/WPA2 EAP

Correct Answer: B

You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct
argument values for the required queue.

A. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

B. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

D. kind=pcq pcq-rate=256000 pcq-classifier=src-address

E. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

Correct Answer: D,E

You want to transfer existing '/ip firewall filter' configuration from one router to a new system.
Choose the best possible way to do:

A. Export only '/ip firewall filter' B. Create backup only of '/ip firewall filter' rules C. Create backup, edit

backup file and restore on target router D. Export global configuration and remove everything apart from '/ip
firewall filter'
Correct Answer: A
Router A and B are both running as PPPoE servers on different broadcast domains of your network. It is
possible to set Router A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers.

A. false B. true
Correct Answer: A

You want to implement a mechanism that automates the IP configuration, including IP address, subnet mask,
default gateway, and DNS information. Which protocol will you use to accomplish this?

A. SNMP B. ARP C. DHCP D. SMTP

Correct Answer: C

What does the firewall action "Redirect" do? Select all true statements.

A. Redirects a packet to a specified port on the router

B. Redirects a packet to the router

C. Redirects a packet to a specified port on a host in the network

D. Redirects a packet to a specified IP

Correct Answer: C,D

You have a DHCP server on your MikroTik router. The IP addresses 10.1.2.2-10.2.2.20 are distributed in the
DHCP network. Additionally, 3 static IP address are defined for your servers: 10.1.2.31-10.1.2.33.
After a while 20 more IP addresses need to be distributed in the network. It is possible to distribute the extra
IP address without adding another DHCP Server:

A. False B. True
Correct Answer: A

Destination NAT (chain dstnat, action dst-nat) can be used to:

A. Change destination port B. Hide your local network from the Internet C. Direct users from the

Internet to a server within your local network D. Change source port

Correct Answer: A

What protocol does PPP use to identify the Network layer protocol?

A. LCP B. HDLC C. NCP D. ISDN

Correct Answer: C