Ujian MTCNA

Certification example test

1. Is ARP used in the IPv6 protocol ?
[True / False]

2. Select which of the following are ‘Public IP addresses’:
[multiple answers]
a. 192.168.0.1
b. 11.63.72.21
c. 172.28.73.21
d. 10.110.50.37
e. 172.168.254.2

3. In MikroTik RouterOS, Layer-3 communication between 2 hosts can be achieved by using an address subnet of:
[multiple answers]
a. /30
b. /29
c. /32
d. /31

4. A PC with IP 192.168.1.2 can access internet, and static ARP has been set for that IP address on gateway. When the PC Ethernet card failed, the user change it with a new card and set the same IP for it.
What else should be done?
[multiple answers]
a. Old static ARP entry on gateway has to be updated for the new card
b. Nothing – it will work as before
c. MAC-address of the new card has to be changed to MAC address of old card
d. Another IP has to be added for Internet access

5. How many usable IP addresses are there in a 20-bit subnet?
[single answer]
a. 2047
b. 4096
c. 2048
d. 2046
e. 4094

6. What is the default TTL (time to live) on a router that an IP packet can experience before it will be discarded ?
[multiple answers]
a. 60
b. 30
c. 1
d. 64

7. The network address is
[multiple answers]

a. The first usable address of the subnet
b. The last address of the subnet
c. The first address of the subnet

8. Choose all valid hosts address range for subnet 15.242.55.62/27
[single answer]
a. 15.242.55.32-15.242.55.63
b. 15.242.55.33-15.242.55.63
c. 15.242.55.33-15.242.55.62
d. 15.242.55.31-15.242.55.62

9. Which ones of the following are valid IP addresses?
[multiple answers]
a. 192.168.13.255
b. 1.27.14.254
c. 10.10.14.0
d. 192.168.256.1

10. Which of the following is NOT a valid MAC Address?
[multiple answers]
a. 95:B5:DD:EE:78:8A
b. 13:16:86:53:89:43
c. 80:GF:AA:67:13:5D
d. 88:0C:00:99:5F:EF
e. EA:BA:AA:EE:FF:CB

11. If ARP=reply-only is configured on an interface, what will this interface do
[multiple answers]
a. Add new IP addresses in /ip arp list
b. Accept all IP/MAC combinations listed in /ip arp as static entries
c. Accept all MAC-addresses listed in /ip arp as static entries
d. Add new MAC addresses in /ip arp list
e. Accept all IP addresses listed in /ip arp as static entries

12. What is term for the hardware coded address found on an interface?
[single answer]
a. IP Address
b. Interface Address
c. MAC Address
d. FQDN Address

13. Which of the following IP addresses are publicly routable?
[multiple answers]
a. 127.34.155.3
b. 192.168.1.4
c. 172.16.13.23
d. 11.3.10.4

14. What protocol does ping use?
[single answer]
a. UDP
b. TCP
c. ARP
d. ICMP

15. MAC layer by OSI model is also known as
[single answer]
a. Layer 3
b. Layer 7
c. Layer 2
d. Layer 6
e. Layer 1

16. How many layers does Open Systems Interconnection model have?
[single answer]
a. 12
b. 6
c. 9
d. 5
e. 7

17. How many IP addresses can one find in the header of an IP packet?
[single answer]
a. 3
b. 4
c. 1
d. 2

18. Select valid MAC-address
[single answer]
a. G2:60:CF:21:99:H0
b. 00:00:5E:80:EE:B0
c. 192.168.0.0/16
d. AEC8:21F1:AA44:54FF:1111:DDAE:0212:1201

19. The basic unit of a physical network (OSI Layer 1) is the:
[single answer]
a. Byte
b. Frame
c. Bit
d. Header

20. You have a router with configuration
- Public IP :202.168.125.45/24
- Default gateway:202.168.125.1
- DNS server: 248.115.148.136, 248.115.148.137
- Local IP: 192.168.2.1/24
Mark the correct configuration on client PC to access to the Internet
[single answer]
a. IP:192.168.0.1/24 gateway:192.168.2.1
b. IP:192.168.2.253/24 gateway:202.168.0.1
c. IP:192.168.1.223/24 gateway:248.115.148.136
d. IP:192.168.2.115/24 gateway: 192.168.2.1
e. IP:192.168.2.2/24 gateway:202.168.125.45

Real Test

1. On the advanced menu of the wireless setup there is a parameter called “Area”, it works directly with:

A. Connect List
B. Access List
C. None of these
D. Security Profile

2. What menus should be used to allow certain websites to be accessed from behind a hotspot interface, without client authentication

A. ip hotspot ip-binding
B. ip hotspot profile
C. ip hotspot walled-garden
D. ip hotspot walled-garden ip

3. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.

A. kind=pcq pcq-limit=1256000 pcq-classifier=dst-address
B. kind=pcq pcq-limit=256000 pcq-classifier=dst-address
C. kind=pcq pcq-limit=5000000 pcq-classifier=src-address
D. kind=pcq pcq-limit=256000 pcq-classifier=src-address
E. kind=pcq pcq-limit=5000000 pcq-classifier=dst-address

4. Which of the following is true for connection tracking

A. Enabling connection tracking reduces CPU usage in RouterOS
B. Connection tracking must be enabled for firewall to be effective
C. Connection tracking must be enable for NAT’ed network
D. Disable connection tracking for mangle to work

5. Which of these are possible solutions to bridge two networks over a wireless link:

A. Both devices in AP mode and enable WDS mode
B. One device in AP mode, another one in station-pseudobridge-clone
C. One device in AP mode, another one in station-pseudobridge
D. One device in AP mode, another one in station

6. What kind of users are listed in the Secrets window of the PPP menu?

A. hotspot users
B. pppoe users
C. pptp users
D. l2tp users
E. wireless users
F. winbox users

7. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A to use “/ppp secret” accounts from Router B to authenticate PPPoE customers ?

8. You have a 802.11b/g wireless card. Which frequencies can be set?

A. 5210MHz
B. 2327MHz
C. 2422MHz
D. 2412MHz
E. 5800MHz

9. Which of the following Routes statuses are possible?

A. C = Connected
B. S = Static
C. A = Active
D. D = Drop

10. Can you manually add drivers to RouterOS in case your PCI Ethernet card is not recognized, and you suspect it is a driver issue?

A. No
B. Yes

11. Action=redirect applies to

A. Route rules
B. DST-NAT rules
C. Firewall Filter rules
D. SRC-NAT rules

12. When backing up your router by using the ‘Export’ command, the following happens:

A. Winbox usernames and passwords are backed up
B. The Export file can be edited with a standard text editor after its creation
C. You are requested to give the export file a name

13. You need to reboot a RouterBoard after importing a previously exported rsc file to activate the new configuration.

14. If ARP=reply-only is configured on an interface, what will this interface do

A. Add new IP addresses in /ip arp list
B. Accept all IP/MAC combinations listed in /ip arp as static entries
C. Add new MAC addresses in /ip arp list
D. Accept all IP addresses listed in /ip arp as static entries
E. Accept all MAC-addresses listed in /ip arp as static entries

15. It is impossible to disable user “admin” at the menu “/user”

16. If a packet comes to a router and starts a new, previously unseen connection, which connection state would be applied to it?

A. no connection state would be applied to such packet
B. new
C. unknown
D. invalid
E. established

17. We have two radio cards in a point-to-point link with settings:

Card Nr 1.: mode=ap-bridge ssid=”office”
frequency=2447 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa

Card Nr 2.: mode=station ssid=”office”
frequency=2412 band=2.4ghz-b/g default-authentication=yes default-forwarding=yes security-profile=wpa2

Is Card Nr2. able to connect to Card Nr 1.?

A. Yes, if Nstreme is enabled or disabled on both
B. Yes, when security profile settings are compatible with each other and Nstreme is enabled or disabled on both
C. No, because of the different frequencies
D. No, because of the different security profiles

18. If you need to make sure that one computer in your HotSpot network can access the Internet without HotSpot authentication, which menu allows you to do this?

A. Walled-garden IP
B. Walled-garden
C. Users
D. IP bindings

19. Consider the following network diagram. In R1, you have the following configuration:
/ip route
add dst-address=192.168.1.0/24 gateway=192.168.99.2

/ip firewall nat
add chain=srcnat out-interface=Ether1 action=masquerade

On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?

A. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
B. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
C. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop
D. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.10 action=drop

20. What is the default protocol/port of (secure) winbox?

A. UDP/5678
B. TCP/8291
C. TCP/22
D. TCP/8080

21. What protocol is used for Ping and Trace route?

A. UDP
B. ICMP
C. IP
D. TCP
E. DHCP

22. Mark the queue types that are available in RouterOS

A. SFQ – Stochastic Fairness Queuing
B. DRR – Deficit Round Robin
C. FIFO – First In First Out (for Bytes or for Packets)
D. LIFO – Last In First Out
E. PCQ – Per Connection Queuing
F. RED – Random Early Detect (or Drop)

23. Select which of the following are ‘Public IP addresses’:

A. 10.110.50.37
B. 11.63.72.21
C. 172.28.73.21
D. 192.168.0.1
E. 172.168.254.2

24. What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface?

A. S
B. I
C. A
D. D
E. C

25. Which is the default port of IP-Winbox?

A. TCP 80
B. TCP 8291
C. TCP 8192
D. UDP 8291