MikroTik Certified Network Associate (MTCNA) Modules Practice Test

These questions are part of the practice quiz. Start practicing

• What are the two chains in the Firewall NAT section?
• What does a wireless security profile specify?
• Which of the following describes bridging PPP-based tunnels on a single router?
• How do you specify what address you want to ping from?
• Large volumes of Gratuitous ARP messages is usually a sign of
• Which of the following port types can be manually added to a bridge?
• What is the only 'AP Mode' available to a level 3 license?
• Which statement describes a valid use of a custom chain in RouterOS firewall?
• What is the gateway address configured for the DHCP server in the example?
• What must you ensure when enabling HTTPS for remote WebFig access besides enabling the service?
• Can PPPoE and DHCP be used on the same interface?
• Which OSI layer does a MikroTik bridge operate on?
• Which protocol prevents network loops by creating a tree structure?
• What are 'supported rates' in wireless terminology?
• How would you block all traffic from a specific IP using a firewall rule that uses an address list named "blocked"?
• What is a common recovery method if a misconfiguration prevents access to the device?
• Which RouterOS command is used to trace the route to a destination?
• Which information is normally passed with DHCP?
• Which of the following is true about Gratuitous ARP?
• If you are using custom chains, what two rules do you also need?
• What is the Burst Threshold value?
• Which MikroTik feature is designed to detect a host being up or down and take action accordingly?
• What is MicroTik's default IP address?
• What are the three chains in the Firewall Filter section?
• What is a practical test to confirm that a destination port forward is functioning?
• TKIP is associated with which encryption standard?
• What frequency mode must you be in to see the 'extra' wireless features?
• What is the purpose of the NAT masquerade rule in RouterOS?
• What is the file extension used for RouterOS backups?
• In the OSI and TCP/IP models, which layer is responsible for switching?
• What are custom chains used for?
• What is the purpose of Raw filters?
• In a firewall rule, what are the first three tabs used to identify?
• What speed is the console port set to by default?
• Which tool can monitor bandwidth utilization on a port?
• Why would you use /export file=... instead of /system backup when sharing config?
• Which of the following is a best practice for securing the MikroTik admin account?
• OPNVPN supports transport layers at least which option?
• What is the purpose of the /system scheduler in RouterOS?
• What modes can you use for connecting a MikroTik client to a non-MikroTik AP as a bridged interface?
• Which steps enable remote WebFig access over HTTPS?
• Is the order of Access List and Control List rules important?
• Which sequence creates a bridge named bridge1 and adds two ports ether2 and ether3 to it?
• NV2 wireless protocol is based on which access method?
• How do static routes differ from default routes in RouterOS?
• What does 0.0.0.0/0 represent in routing?
• Is double masquerading generally considered okay?
• What transport layer is PPTP, SSTP?
• 0.0.0.0/0 refers to which set of addresses?
• Which OSI/TCP/IP layer is routing?
• Which statement is true about NV2 security profiles?
• In a typical home MikroTik router, which interface is commonly connected to the ISP?
• What is the default queue type used by the simple queue?
• Traffic limiting can be applied at which scope for VPN tunnels?
• Laptops can connect to a MikroTik AP that uses NSTREME?
• Which statement correctly matches the two RouterOS firewall sections with their chains?
• How is the distance of dynamic routes changed?
• Which simple command helps verify reachability to a remote host from RouterOS?
• What physical port types can be switched?
• Which statement about address lists is true in RouterOS?
• Which command configures RouterOS to use Google DNS servers 8.8.8.8 and 8.8.4.4?
• Which bridging mode would you choose when both devices in the link are MikroTik units to ensure proper bridging?
• Which command correctly creates a VLAN interface named vlan10 with vlan-id 10 on bridge1?
• Should you add an IP address to a slave port?
• In the OSI model, routing operates at which layer?
• Where can you find out who is loggged into the router?
• What is the DHCP pool range defined in the example?
• The acronym STP stands for which protocol?
• What does the Active Flag on a route mean?
• Which RouterOS tool provides real-time observation of traffic on an interface?
• If three simple queues could all match the same traffic, which rule will process that traffic?
• Is it permissible to assign an IP address to a slave port?
• Where do you go to add the wireless security?
• What is the difference between RouterOS backup and export formats?
• What feature allows you to revert changes if a configuration mistake is made, by temporarily disabling new changes?
• Which transport layer(s) does OVPN use?
• What is the primary purpose of the Winbox utility in MikroTik RouterOS?
• Can you mix and match tunnel clients and servers on the same MikroTik router?
• Can you add drivers to RouterOS?
• Which configuration would drop traffic from any IP address in the 'blocked' address list at the input chain?
• Which property defines the outgoing interface in a NAT rule for masquerading?
• What does Proxy-ARP do?
• In MikroTik firewall, which chain handles traffic that is destined for the router itself?
• When transferring an export between MikroTik routers, which information should be removed?
• Which of the following is one of the basic five settings needed on a router for a LAN client to connect to the internet?
• Which option ensures log persistence across reboots when logging in RouterOS?
• What utilization range causes queues to turn Yellow?
• Where can you access the RouterOS manual besides wifi.microtik.com?
• Which NAT rule enables internet sharing by masquerading internal addresses on traffic leaving the WAN?
• Which form is suitable for version control and manual editing when sharing configurations?
• Which command sets the MTU on Ether1 to 1500?
• Which utility is specifically designed for real-time bandwidth monitoring on a port in MikroTik?
• Which frequency mode opens up extra channels?
• WPA3 uses what type of keys?
• Why should binary backups not be transferred between routers?
• Is a single IP pool allowed to be used for both a PPP based tunnel and DHCP address?
• What is the default IPv4 address you will typically use to access a fresh MikroTik device when connected directly via Ethernet?
• What does Netwatch do?
• In the PPPoE client example, what is the effect of add-default-route=yes?
• How do you update RouterOS to the latest stable version?
• What does STP stand for?
• What determines the encryption type for a PPP based tunnel?
• What does CIDR stand for?
• Which sequence creates a DHCP pool named dhcp_pool for 192.168.1.100-192.168.1.200 and a DHCP server using that pool with gateway 192.168.1.1 on interface bridge1?
• Is an SSID required to connect to a wireless network?
• Can 802.11ac be used on the 2.4 GHz band?
• Which of the following is true about bridging PPP tunnels on a router?
• Which statement about enabling Advanced mode on MikroTik is true?
• In routing, which distance value takes precedence?
• Which sequence enables wlan1 and sets its SSID to 'MySSID' in AP-Bridge mode with a default security profile?
• Wireless Access Lists are rule sets that apply to what wireless role?
• How do you assign a static IPv4 address 192.168.1.2/24 to interface ether1 using the RouterOS CLI?
• Which statement best describes the IPv4 address space size?
• What important mode is not available with a Level 3 RouterOS license?
• In wireless terms, what do 'supported rates' refer to?
• How would you implement a simple QoS rule to limit a specific host to 1 Mbps using a simple queue?
• Where do you specify what type of encryption is used for a PPP based tunnel?
• Which interfaces on a MikroTik router share the same collision bandwidth?
• What transport layer is PPPoE?
• Where do you turn encryption on or off for a PPP based tunnel?
• What mode must you be in to see the 'extra' wireless features?
• What is the default TCP port for WinBox?
• In the OSI and TCP/IP models, which layer is responsible for bridging?
• What queue type is used to equally separate traffic into sub-streams?
• Which of the following is true about the bridging mechanism used for PPP tunnels?
• What are Firewall Service Ports used for?
• Which remote management protocol is recommended for secure administration?
• Can PPPoE tunnels be added to a bridge?
• Is it possible to mix and match tunnel clients and servers on the same router?
• Which statement best describes the basic purpose of a firewall rule in MikroTik?
• Which protocol is commonly used for network monitoring?
• Which option is not a Firewall Filter chain name?
• How many bridges can be added to a router?
• What is the max TTL value?
• Which protocol is used for network management and monitoring?
• What is the function of the /tool torch command?
• OPNVN transport layer options are which of the following?
• Laptops can connect to a MikroTik AP that uses NV2?
• In a route entry, what does the DST Address field specify?
• If you connect to a MikroTik router using its default settings, which IP address would you likely use as the gateway?
• How do you enable and configure a basic wireless interface (wlan1) on a MikroTik device?
• Which service is commonly used for secure remote command access to RouterOS?
• What is the purpose of a bridge in MikroTik, and what is a bridge port?
• TTL behavior: Which statement is true about TTL in IP packets?
• When creating a route, how do you identify the gateway?
• How do you enable the SSH service on RouterOS?
• What is the purpose of Masquerade?
• Which statement is true about NAT chains in RouterOS firewall configuration?
• What does RSTP stand for?
• What exact term describes the mechanism used to bridge PPP tunnels?
• What is the maximum number of bridges that can be added to a MikroTik router?
• Which screen shows the list of currently active users connected to a MikroTik router?
• Which standard is not usable on the 2.4 GHz band according to the material?
• What does a Static ARP entry do?
• Which field specifies the next-hop IP address in a route?
• Which IP prefix is used in a default route?
• What is the only wireless mode you can be in when connecting a MikroTik station as a routed client?
• Can all PPP-based tunnels be bridged on the router?
• Which statement is true about PPP tunnels and bridge capability?
• Which statement about the WinBox connection is correct?
• Which command creates a full backup of the RouterOS configuration?
• What is the function of the default route in a routing table?
• Which NAT-related items should you inspect when troubleshooting port forwarding?
• If a router runs multiple PPP tunnel clients and servers, can their roles be mixed?
• Where can the RouterOS manual be found?
• What will a router do with a packet that has a TTL of 1?
• Which of the following best describes how traffic is processed when multiple queue rules match?
• What is the role of a Jump rule in custom chains?
• Which two rule types are mentioned as having an important order?
• What needs to be set to keep your logs after a reboot or power failure?
• What is the bridging mechanism called for PPP tunnels?
• How do you set the MAC address for a bridge?
• To access the area where you configure who can connect to your WLAN, what would you edit?
• When are support.rif files created?
• AES is used with which wireless encryption standard(s)?
• Bridging and switching on MikroTik RouterOS operate at which OSI layer?
• What is the basic purpose of VLANs in MikroTik?
• How many IPv4 addresses are available in total?
• Which command exports the current configuration to a file named 'config'?
• What does the distance value indicate in routing?
• What is the purpose of address lists in RouterOS?
• Which command forwards TCP port 80 to internal 192.168.1.100:80?
• What does the /ip address print command display?
• How do you configure a default route with gateway 192.168.1.1 from RouterOS?
• Which is the correct RouterOS CLI command to enable a DHCP client on an interface named wan1?
• If ARP is set to reply-only, what is needed for the router to communicate with any other host on the network?
• What bridged wireless mode should be used if both the AP and the station are MikroTiks?
• Which graphical management interfaces are used to configure RouterOS?
• Does the security profile affect anything when using NV2?
• If the Max Limit is set to 10M, what would be the recommended Burst Threshold?
• Which feature allows you to revert changes if you get disconnected after making changes in Winbox?
• AES (Advanced Encryption Standard) is used with which wireless encryption?
• What is the relationship between default-small and pfifo in MikroTik simple queue?
• Which protocol will provide the fastest speeds when interference is not a factor?
• Which of the following is NOT listed as one of the basic five settings?
• Which measures help prevent unauthorized Winbox access from the Internet?
• Where do you change the ports for accessing the router?
• Is the order of firewall rules important in the RouterOS firewall?
• At what utilization percentage do queues turn red?
• How do you ensure the DHCP client also adds a default route when obtaining an address via DHCP?
• Queues will turn Yellow at what percentage of utilization?
• Which statement about PPP-based tunnel bridging is true?
• If the Max Limit is set to 3M, what should the Burst Limit not exceed?
• Can limiting be done at the tunnel level?
• When are connected routes added?
• Wireless Connect List are rules that apply to what wireless role?
• WPA2 and WPA3 use which type of keys?
• Which commands help you verify interface status and assigned IP addresses?
• What is TTL?
• How do you recover a router if the password has been lost?
• Which tool provides real-time traffic observation on a RouterOS interface?
• Which of the following best describes a bridge's function in RouterOS?
• Which method confirms port forwarding is accessible from an external network?
• Which RouterOS command configures a PPPoE client on interface ether1 with username and password and adds a default route?
• When upgrading ROS on RouterBoard, what else should be upgraded?
• What is the role of /system logging in RouterOS?
• What is the difference between a bridge and a router in RouterOS?
• Encryption for a PPP tunnel is configured through which setting?
• Compare Masquerade and Source NAT in RouterOS. Which statement is true?
• What do the flags DAS/DAd mean?
• Which port types cannot be manually added to a bridge?
• In a simple queue rule, what does the target parameter specify?
• Which statement is true about the availability of a command-line interface in RouterOS?
• The Burst Threshold value is defined as which of the following in queue bursting?
• How can you view the current IPv4 routing table on RouterOS?
• WEP uses what type of keys?
• What is the default username and password?
• In MikroTik wireless configuration, which feature controls the extension of available channels beyond the standard set?
• In the PPPoE client example, which interface is used?
• Which protocol is a faster convergence of STP?
• Which method is explicitly mentioned for recovering a router if the password is lost?
• Raw filters are used to identify traffic at which stage?
• What is the maximum TTL value recommended by IANA?
• WPA, WPA2, and WPA3 use what type of keys?
• What is a wireless security profile in MikroTik?
• Which statement best describes OVPN’s transport layer usage?
• Which four wifi bands are supported by MikroTik manufactured products?
• TKIP (Temporal Key Integrity Protocol) is used with which wireless encryption?
• How can you view the current NAT rules configured on RouterOS?
• Which interface name is used for the first Ethernet port in the MikroTik examples?