MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  1

MTCRE

Static Routing

1. The
There
re a
are
re two
two rrout
outes
es in
in th
the
e ro
routi
uting
ng tabl
table:
e:
• 0 dst-addr=10.1.1.0/24
dst-addr=10.1.1.0/24 distance=10 gateway=10.10.10.10
gateway=10.10.10.10
• dst-addr=10.1.1.4/30
dst-addr=10.1.1.4/30 distance=20 gateway=10.20.20.20
gateway=10.20.20.20
Which gateway will be used to send packet with destination IP address 10.1.1.6?
A. 10.20.20.20
B. both
C. 10.10.10.10
D. No
None
ne,, b
bec
ecau
ause
se dist
distan
ance
ce is >=
>=10
10

2. Which static-rou
static-route
te rule
rule wil
willl have priority
priority fo
forr des
destinat
tination
ion 192.168
192.168.0.18
.0.18??

A.   dst-address=192.168.0.0/26
dst-address=192.168.0.0/26 gateway=192.168.1.1
gateway=192.168.1.1 distance=3

B. dst-addr
dst-address=
ess=192.1
192.168.0.
68.0.0/28
0/28 gateway=1
gateway=192.16
92.168.3.
8.3.1
1 distanc
distance=1
e=1
C. dst-addr
dst-address=
ess=192.1
192.168.0.
68.0.0/26
0/26 gateway=1
gateway=192.16
92.168.2.
8.2.1
1 distanc
distance=2
e=2
D. dst-addr
dst-address=
ess=192.1
192.168.0.
68.0.0/28
0/28 gatewa
gateway=192
y=192.168.
.168.4.1
4.1 distanc
distance=5
e=5
E. dst-
dst-addr
address=
ess=192.1
192.168.0.
68.0.0/24
0/24 gateway=1
gateway=192.16
92.168.3.
8.3.1
1 distance=
distance=1
1

3. MikroTik
MikroTik rou
router
ter needs
needs to forward
forward IP-packet
IP-packet ta
target
rgeted
ed to 11.12
11.12.4.5.
.4.5. Router
Router routing
routing table
table has 3 routes,
routes,
• 1. dst-address=11.12.4.0/24,
dst-address=11.12.4.0/24, distance=10, gateway=1.1.1.1
• 2. dst-address=11.12.4.0/28,
dst-address=11.12.4.0/28, distance=20, gateway=1.1.1.2.
• 3. dst-address=0.0.0.0/0, distance=1, gateway=1.1.1.254.
gateway=1.1.1.254. Which of the gateways will router select?
A. 2
B. 3
C. Nowhere.
D. Hos
Hostt will
will get
get "d
"dest
estina
inatio
tion
n host
host un
unrea
reacha
chabl
ble".
e".
E. 1

4. The
There
re a
are
re two
two rrout
outes
es in
in th
the
e ro
routi
uting
ng tabl
table:
e:
• 0 dst-addr=10.1.1.0/24
dst-addr=10.1.1.0/24 gateway=5.5.5.5
• 1 dst-addr=10.1.1.4/30
dst-addr=10.1.1.4/30 gateway=5.6.6.6
Which gateway will be used to get to the IP address 10.1.1.6?
 

A. both - half of the traffic will be routed through one gateway, half through the other
 B.   5.6.6.6

 C.   5.5.5.5
 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  2

D. the required route is not in the routing table

 

5. Consider
Consider tthe
he followi
following
ng out
output
put fr
from
om the ccomman
ommand
d "/ip add
address
ress p
print"
rint"::
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
1 10.10.10.1/32 10.10.10.2 0.0.0.0 pppoe-1
2 10.10.10.1/32 10.10.10.3 0.0.0.0 pppoe-2
This configuration is invalid because of the duplicate IP's. (TRUE/FALSE)

6. Select
Select tthe
he cor
correc
rectt stat
stateme
ements
nts about
about routi
routing
ng marks
marks::
A.   each packet can have more than one routing mark
B. can be be assigned
assigned by IP fire
firewall
wall mang
mangle
le chains
chains iinput
nput and outpu
outputt
C. a packet
packet with a routing
routing mark
mark is ignor
ignored
ed by main routing
routing ttable
able if th
there
ere is at least
least one route for the
the routing
routing
mark
D. check-ga
check-gatewa
tewayy opti
option
on is not
not com
compati
patible
ble with
with routin
routing-ma
g-mark
rk

7. /ip route can have DS flags

flags simultane
simultaneousl
ously.
y. (TRUE/F
(TRUE/FALSE)
ALSE)

8. If route
route type is 'black
'blackhole
hole',', then packet
packetss to the destinat
destination
ion network
network are
are going
going to be

A. drop
dropped
ped o
on
n this router
router and
and ICMP
ICMP mes
message
sage w
will
ill be
be sent b
back
ack to the
the sou
source
rce
B. se
sent
nt bac
back
k tto
o the
the so
sour
urce
ce
C. sen
sentt back
back to the previ
previous
ous router
router
D. drop
droppe
ped
d on
on tthi
hiss rou
route
terr

9. Define
Define a rout
routing
ing lloop
oop ((choos
choose
e th
the
e most prec
precise
ise d
descri
escription
ption))
A. sit
situat
uation
ion where
where tthe
he T
TTL
TL of
of tthe
he p
pack
acket
et e
expi
xpires
res
B. Sit
Situat
uation
ion wh
where
ere th
the
e pac
packet
ket does
does not
not reach
reach it
it\'s
\'s dest
destina
inatio
tion
n
C. situ
situation
ation where
where th
the
e pack
packet
et is routed
routed thro
through
ugh th
the
e same sequenc
sequence
e of routers
routers until
until the TTL ex
expire
piress
D. situ
situation
ation where
where the packet
packet is rout
routed
ed through
through the ssame
ame rrouter
outer twice
twice

10. Which routing table is u

used
sed to ap
apply
ply recursiv
recursive
e routing at MikroTik Route
RouterOS
rOS
A. It is possible
possible in all
all the routing
routing ttable
abless install
installed
ed iin
n a route
routerr
B. It iiss n
no
ot po
possible
C. It is
is on
only
ly pos
possi
sibl
ble
e on the
the x86
x86 pla
platf
tfor
orm
m
D. It is
is on
only
ly poss
possibl
ible
e in the main
main ro
routi
uting
ng ttabl
able
e/

11. The def

default
ault val
value
ue of 'target-s
'target-scope'
cope' ffor
or a static rou
route
te is:
A. 255
B. 10
C. 30
D. 1
 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  3

12. When using the "check

"check gateway" ffunction
unction in cre
creating
ating a route, the
the following p
protocols
rotocols can be utilized
utilized to ensur
ensure
e the gateway
address is reachable (choose all correct answers):
A. UDP
B. MNDP
C. ARP
D. ICMP

13. To assign specific traffic

traffic to a route – traffic must be identified
identified by a routing mark. Ea
Each
ch packet can only have one routin
routing
g mark.
(TRUE/FALSE)

14. Which route will

will be used to re
reach
ach host 192.168.1.55? /ip route add disabled=n
disabled=no
o distance=1 dst-address=192.168
dst-address=192.168.1.0/24
.1.0/24
gateway=1.1.1.1 add disabled=no distance=1 dst-address=
dst-address=192.168.1.0/25
192.168.1.0/25 gateway=2.2.2.2 add disabled=no
disabled=no distance=1
dstaddress=192.168.0.0/16
dstaddress=192. 168.0.0/16 gateway=3.3.3.3
A. Rout
Route
e via
via gate
gatewa
wayy 3.3
3.3.3
.3.3
.3
B. Rout
Route
e vvia
ia gate
gatewa
wayy 2
2.2
.2.2
.2.2
.2
C. Rout
Route
e via
via gate
gatewa
wayy 1.1
1.1.1
.1.1
.1

15. Router has two gateways

gateways to reach a certain
certain network both with check gateway
gateway activated. Choose
Choose the option you can
can use to
control active and backup gateway.
A. Routing mark
B. Interface
C. Scope
D. Distance

16
16.. EC
ECMP
MP pr
prov
ovid
ides
es::
A. pe
perr src addr
address
ess load
load bala
balanci
ncing
ng to m
mul
ultip
tiple
le gatew
gateways
ays
B. pe
perr src/dst
src/dst ad
addr
dress
ess p
pair
air load
load bala
balanci
ncing
ng to multi
multipl
ple
e gatewa
gateways
ys
C. pe
perr connec
connectio
tion
n load
load ba
balan
lancin
cing
g to mu
multi
ltiple
ple gate
gateway
wayss
D. pe
perr packe
packett loa
load
d ba
balan
lancin
cing
g to m
mult
ultip
iple
le g
gate
ateway
wayss

17. When adding a static route, you mu

must
st always ensure that
that you add both the gateway and the interface. (TRUE/FALSE)

18. If we cha
change
nge TT
TTLL to 2 in mang
mangle
le chain
chain preroutin
prerouting
g
A. pa
pack
cket
et will
will not
not be
be ffor
orwa
ward
rded
ed
B. pac
packet
ket wi
will
ll al
alway
wayss reac
reach
h its
its de
desti
stinat
nation
ion
C. pac
packet
ket will
will be forw
forward
arded
ed o
onl
nlyy to next
next L3 d
devi
evice
ce
D. pac
packet
ket will
will be
be fo
forwa
rwarde
rded
d to th
the
e next
next 2 L3 devi
devices
ces

19. If 'check-gateway'
'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable,
unreachable, then
then
 

 A. the ECMP route becomes inactive

B. ECM
ECMPP is going
going to sen
send
d packets
packets to all gate
gateways
ways e
even
ven if one is unreachab
unreachable
le
C. the u
unreac
nreachabl
hable
e gat
gateway
eway is not going
going be used in Round
Round Robin
Robin a
algor
lgorithm
ithm

 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  4

20. It is possible
possible to chang
change
e the Time To Live in Firewall M
Mangle.
angle. (TRUE/FALSE)

21. When sending out

out an ARP reques
request,
t, an IP host is ex
expecting
pecting what k
kind
ind of address
address for an answer?
answer?
A. VLAN ID
B. 802.11g
C. IP a
ad
ddress
D. MAC Address

22. Consider the following

following diagram.
diagram. We want to communicate from a device on LAN1 LAN1 to a device on LAN2.
LAN2. Assuming that all
necessary configurations are already included on R2, which of the following configurations in R1 would enable this
communication?

A. /ip rrout
oute
e add dst-a
dst-add
ddres
ress=0
s=0.0.
.0.0.0
0.0/0
/0 gatew
gateway=
ay=Eth
Ether1
er1
B. /ip route add dst-a
dst-addr
ddress=1
ess=192.1
92.168.1.
68.1.0/24
0/24 gate
gateway=1
way=192.16
92.168.99.
8.99.2
2
C. /ip route add dst-a
dst-addr
ddress=1
ess=192.1
92.168.0.
68.0.0/24
0/24 gate
gateway=1
way=192.16
92.168.0.1
8.0.1
D. /ip ro
route
ute add dst-a
dst-addr
ddress=1
ess=192.1
92.168.1.
68.1.0/24
0/24 src-ad
src-addres
dress=192
s=192.168
.168.0.0/
.0.0/24
24 gateway=1
gateway=192.1
92.168.99
68.99.2
.2 E.  /ip route add dst-
 

address=0.0.0.0/0
address=0.0.0.0/0 gateway=192.168
gateway=192.168.99.2
.99.2

23. Mangle Routing ((routing-mark)

routing-mark) is possib
possible,
le, by using chains:
A. input a
an
nd ou
output
B. forw
forwar
ard
daand
nd po
post
stro
rout
utin
ing
g
C. pr
prer
erou
outi
ting
ng and
and outp
output
ut
D. forwa
orward
rd an
and
doou
utput
tput
E. pr
prer
erou
outi
ting
ng and
and fo
forw
rwar
ard
d

24. There are four

four routes in the routing table. Host 10.10.10.10 becomes
becomes unreachable.
unreachable.
• 1 dst-addr=0.0.0.0/0
dst-addr=0.0.0.0/0 gateway=11.11.11.11
gateway=11.11.11.11
• 2 dst-addr=20.20.20.0/24
dst-addr=20.20.20.0/24 gateway=10.10.10.10
gateway=10.10.10.10 check-gateway=ping
check-gateway=ping
• 3 dst-addr=30.30.30.0/24
dst-addr=30.30.30.0/24 gateway=10.10.10.10
• 4 dst-addr=30.30.30.0/25
dst-addr=30.30.30.0/25 gateway=13.13.13.13
gateway=13.13.13.13 check-gateway=ping
check-gateway=ping

Which gateway is used to get to the IP address 30.30.30.145?

A. 10.10.10.10
B. 13.13.13.13
C. 11.11.11.11
D. None. Packets to that host will be dropped until host 10.10.10.10 becomes active again.
 

25. /ip rroute

oute confi
configura
guration
tion o
on
n rout
router,
er,
 /ip route add gateway=192.168.0.1
• gateway=192.168.0.1
SMK Daarut Tauhid  
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  5

 
•  /ip route add dst-address=192.168.1.0/24
dst-address=192.168.1.0/24 gateway=192.168.0.2
gateway=192.168.0.2
•  /ip route add dst-address=192.168.2.0/24
dst-address=192.168.2.0/24 gateway=192.168.0.3
gateway=192.168.0.3
•  /ip route add dst-address=192.168.3.0/26
dst-address=192.168.3.0/26 gateway=192.168.0.4
gateway=192.168.0.4 Router
Router needs to send packets to 192.168.3.240.
192.168.3.240.
Which gateway will be used?
A. 192.168.0.1
B. 192.168.0.2
C. 192.168.0.4
D. 192.168.0.3

26. A MikroT
MikroTik
ik Router
Router has the foll
followin
owing
g confi
configur
guration
ation
•  /ip address add addre
address=1.1.1.2/30
ss=1.1.1.2/30
interface=ether1
interface=ethe r1 add
address=2.2.2.2/30
address=2.2.2 .2/30 interface=ether2
interface=ether2
add address=192.
address=192.168.10.1/24
168.10.1/24
interface=ether3
•  /ip firewall
firewall mangle add
action=markconnection
chain=prerouting
chain=prerout ing dstport=80 new-
connectionmark=web_c
passthrough=yes protocol=tcp add
action=markrouting chain=prerouting
action=markrouting chain=prerouting
connection-mark=web_c
connection-mark=web_c newrouting-
mark=web passthrough=no
•  /ip firewall
firewall nat add
action=masquerade
action=masquer ade chain=srcnat out-
interface=ether3
•  /ip route add gateway=1.1.1.1 add
gateway=2.2.2.2 routing-mar
routing-mark=web
k=web

What can be said about the Web Access (port 80) by a customer connected at ether3 interface with IP 192.168.10.2/24, gateway
192.168.10.1?
A. The ccust
ustome
omerr wi
will
ll acces
accesss the W
Web
eb using
using the
the gatew
gateway
ay 2.
2.2.2
2.2.2
.2
B. The Cu
Customer
stomer will access
access the W
Web
eb by E
ECMP,
CMP, b
byy using both g
gatew
ateways
ays 1.1.1.1
1.1.1.1 and
and 2.2.2.2
2.2.2.2

C. The Custom
Customer
er is unable
unable to a
acce
ccess
ss the Web.
Web.
D. The customer
customer will access
access the
the We
Web
b us
using
ing the gateway
gateway 1.1.1
1.1.1.1
.1

27. When creating a route, it is possi

possible
ble to specify tthe
he gateway to a network
network even if the gateway is not directly
directly connected by using
recursive next-hop resolving from an existing route. (TRUE/FALSE)

28. Routing table has

has several routes w
with
ith the same gateway.
gateway. If 'check-gateway'
'check-gateway' is enab
enabled
led for one of the routes, and the gateway
becomes unreachable, then
A. onl
onlyy this
this one rou
route
te wou
would
ld be
becom
come
e inac
inactiv
tive
e
B. all routes
routes w
with
ith tthe
he sa
same
me ga
gatew
teway
ay would
would become
become iinac
nactiv
tive
e
C. the 'ch
'check-
eck-gate
gateway'
way' ffeatur
eature
e would n
not
ot work at all,
all, sin
since
ce the same
same gate
gateway
way is used
used for mo
more
re than one
one route
route

29. routi
routing
ng tab
table
le has follo
following
wing entries:
entries:
• 0 dst-address=10.0.0.0/24
dst-address=10.0.0.0/24 gateway=10.1.5.126

 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  6

• 1 dst-address=10.1.5.0/24
dst-address=10.1.5.0/24 gateway=10.1.1.1
• 2 dst-address=10.1.0.0/24
dst-address=10.1.0.0/24 gateway=25.1.1.1
• 3 dst-address=10.1.5.0/25
dst-address=10.1.5.0/25 gateway=10.1.1.2
Which gateway will be used for a packet with destination address
10.1.5.126?
A. 10.1.1.2
 

B. 25.1.1.1
 

C. 10.1.5.126
D. 10.1.1.1

OSPF

1. Only OSPF
OSPF rout
routes
es distr
distribut
ibuted
ed as "externa
"external"
l" can be fil
filtered
tered w
with
ith routing
routing fil
filters
ters (TRUE/FALS
(TRUE/FALSE)
E)

2. OSP
OSPFF start
startss worki
working
ng o
on
n th
the
e router
router as so
soon
on as
as

A. at le
least
ast one
one ar
area
ea is
is speci
specifi
fied
ed in the ospf
ospf are
area
a menu
menu
B. at le
least
ast one
one IP net
networ
work
k is a
assi
ssign
gned
ed iin
n th
the
e ospf
ospf ne
netwo
twork
rk me
menu
nu
C. at le
least
ast one
one in
inter
terfac
face
e is de
defin
fined
ed in the
the os
ospf
pf inter
interfac
face
e men
menu
u
D. the routin
routing
g packa
package
ge iiss en
enab
abled
led on tthe
he rrout
outer
er

3. A MikroTik system administrator

administrator imp
implemented
lemented OOSPF
SPF Routing
Routing protoc
protocolol in the network. But realized
realized that he has a static route on
the routers. What can be done to make the static route work as a failover whenever the dynamic routing protocol fails?
fails?
A. He sshould
hould use "netw
"netwatch"
atch" to trigge
triggerr sta
static
tic routes
routes whenever
whenever OSPF fails
fails
B. He sho
should
uld ma
manual
nually
ly disabl
disable
e the st
static
atic rroutes
outes and
and ena
enable
ble them
them wheneve
wheneverr OSP
OSPFF fails
fails
C. He sshould
hould incr
increase
ease the administr
administrative
ative distance
distance of the
the static
static route
route
D. Dele
Delete
te all stati
staticc routes
routes be
becaus
cause
e ther
there
e is no way for
for it tto
o work
work with OSPF
OSPF

4. An OSPF area
area consists of 15 route
routers
rs connected in 6 different
different broadcast
broadcast networks. How
How many Designated
Designated route
routers
rs there will
will be in
in
the area?
A. 6
B. 1
C. 0
D. 15

5. Which is the
the correct
correct way
way to set
set a co
comment
mment in a O
OSPF
SPF dynamic
dynamic rroute:
oute:
A. It ca
can
n be conf
configu
igured
red by sett
setting
ing up
up Rou
Routin
ting
g fi
filte
lters
rs
B. A co
comme
mment
nt ccann
annot
ot b
be
e co
confi
nfigu
gured
red in a dynami
dynamicc ro
route
ute
C. It ca
can
n be conf
configu
igured
red manual
manually
ly in the Routin
Routing
g Table
Table

 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  7

 
6. What is the minimu
minimum
m configura
configuration
tion a network
network administ
administrator
rator needs
needs to do on a MikroTik
MikroTik rout
router
er to enable
enable OSPF?
OSPF?
A. Not
Nothin
hing;
g; OSPF
OSPF insta
instance
nce ccan
an run
run wi
with
th no cconf
onfigu
igurat
ration
ion
B. Both interfac
interface
e an
and
d network
network must be adde
added
d to OSP
OSPFF co
config
nfigurat
uration
ion
C. Add an iinte
nterf
rface
ace to
to OSP
OSPFF inter
interfac
face
e co
confi
nfigu
gurat
ration
ion

7. In OSPF settings, the NBMA N

Neighbor
eighbor setting can be used to improve the stabili
stability
ty of O
OSPF
SPF across
across wireless
wireless links. (TRUE/FALSE)

8. It is possibl
possible
e to have
have OSPF
OSPF and B
BGP
GP con
configu
figured
red on the
the same
same router?
router? (YES/NO)
(YES/NO)

9. In this ospf network (see

(see diagram)
diagram),, we want to re-distri
re-distribute
bute routes ffrom
rom R5 to the
the R3 router
router.. Where do I have to create
create a virtual
virtual
link?

A. Ther
There
e is no n
nee
eed
d fo
forr a vvir
irtu
tual
al-l
-lin
ink
k
B. Between R1 and R4
C. Between R
R5
5aan
nd R3
R3
D. Between R
R4
4 an
and R
R2
2

10. Which of the following

following condition
conditionss have to be fulfilled
fulfilled for two
two routers on one eth
ethernet
ernet segment to be
become
come ospf neig
neighbors?
hbors?
A. Ne
Netw
twor
ork-
k-ty
type
pe must
must be th
the
e ssam
ame
e
B. Hell
Hello
o an
and
dddea
ead
d tim
timer
erss mu
must
st b
be
e th
the
e same
same
C. MTU mu
must
st be the
the sa
same
me
D. Cost
ost m
mu
ust be tth
he ssa
ame

11. You hav

have
e a router
router with th
the
e following
following IIP
P add
addresse
resses:
s:
• ether1: 10.40.1.1/24
• ether2: 10.250.1.1/30
• ether3: 10.251.1.1/30
• wlan1: 10.50.1.1/30
•

wlan2: 10.50.2.1/30
You have a customer directly connected to ether2, and another customer directly connected to ether3. Your wireless radios are
used for wireless connectivity to two different towers, and ether1 goes to another wireless access point for other subscribers.

 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  8

You need all of the subnets distributed across your OSPF Network. You need to configure OSPF to talk on this router, what
would be the best configuration.
A. Set OSP
OSPFF Networks
Networks to 10.4
10.40.1.0
0.1.0/24,
/24, 10.250.
10.250.1.0/
1.0/30,
30, 10.251.1.
10.251.1.0/24
0/24,, 10.50.1.0/
10.50.1.0/30,
30, and 10.50.2.
10.50.2.0/30
0/30
B. set distri
distribu
bute-
te-def
defaul
ault=a
t=alwa
lways-
ys-typ
type-1
e-1
C. Set
Set O
OSP
SPFF net
netwo
work
rkss to
to 0.0
0.0.0
.0.0
.0/0
/0
D. Set OSP
OSPFF Networks
Networks to 10.40.1.0/2
10.40.1.0/24,
4, 10.250.1.0/
10.250.1.0/30,
30, 10.251.1.0
10.251.1.0/30,
/30, 10.50.1
10.50.1.0/30
.0/30,, and 10.50.2.0/
10.50.2.0/30
30

E. Set
Set OP
OPSF
SF netw
networ
orks
ks tto
o 10.0
10.0.0
.0.0
.0/8
/8 on
onlyly
F. Set OSP
OSPFF netwo
networks
rks,, to 10.
10.50.
50.1.0
1.0/30
/30,, 10
10.50
.50.2.
.2.0/3
0/30
0
G. Set
Set Di
Dist
stri
ribu
bute
te-C
-Con
onne
nect
cted
ed=y
=yes
es
H. Set
Set Et
Ethe
hern
rnet
et 2 an
and
d 3 to
to pass
passiv
ive
e mode
mode
I. se
sett dist
distrrib
ibu
ute-
te-st
stat
ate=
e=ye
yess
J. Set
Set E
Eth
ther
erne
nett 1
1,, 2,
2, and
and 3 tto
o pas
passi
sive
ve mode
mode

12. New area OSPF

OSPF \"area1\" has b
been
een created. W
What
hat could be used as a valid area id?

A.   1.2.3.4

B. 0.0.0.1

C. 0.0.0.0

13. True or False: BGP

BGP can be used
used for internal routing, using an internal AS n
number.
umber. (TRUE/FALSE)

14. Which type of ip rou

route
te is the h
highest
ighest priority
priority for rout
routing
ing decision ?
A. OSPF Route
B. BGP Route
C. Static R
Ro
oute
D. Co
Conn
nnec
ecte
ted
d Rout
Route
e

15. In OSPF interface

interface configu
configuration
ration what effe
effect
ct will a “passive=yes”
“passive=yes” option have
have on a specific
specific interface ?

A. It will prevent routes learned through the interface from being listed in the routing table.
 

B. It will
will action
action a mi
mirror
rroring
ing o
off all
all rou
routing
ting upgrades
upgrades to
that interface
C. It will
will preven
preventt all OSPF traf
traffic
fic through
through tthat
hat iinter
nterface
face

D. It will
will preven
preventt all traffic
traffic tthroug
hrough
h that
that in
interf
terface
ace

VLAN

1. VLAN is an implementation
implementation of the 802.1Q VLAN protocol
protocol by the MikroT
MikroTik
ik RouterOS.
RouterOS. It allows
allows you to have multiple Virtual LANs
LANs
on a single ethernet or wireless interface, giving the ability to segregate LANs efficiently. How many different vlans are possible
on a single ethernet port?
A. 4096

 
SMK Daarut Tauhid 
 

 MikroTik Certificat
Certification
ion Exam Sample
Sample Questions
Questions   Page
Page  9

 
B. Only one
C. 63
D. 4095

2. A network administrator has 2 vlans /int

/interface
erface vlan
vlan add name=vlan1 vlan-id=10
vlan-id=101
1 interface=ether1
interface=ether1 add name=vlan2 vlanid=102
interface=vlan1
Any packet sent over "vlan2" interface …
A. wil
willl ha
have
ve on
one
e vl
vlan
an tag
tag added
added to et
ether
hernet
net h
head
eader
er - ""101
101""
B. wil
willl have
have on
one
e vl
vlan
an tag
tag added
added to et
ether
hernet
net h
head
eader
er - ""102
102""
C. Wron
Wrong
g con
configu
figurati
ration
on be
because
cause it is not p
possib
ossible
le to h
have
ave a vlan
vlan over
over anothe
anotherr vla
vlan
n
D. will have two vlan
vlan ta
tags
gs added
added to
to ethe
ethernet
rnet heade
headerr - "1
"101"
01" and
and "102"
"102"
E. wil
willl not
not go throug
through
h at a
all
ll bec
becaus
ause
e vlan1
vlan1 will
will drop
drop it

3. It is possible
possible to create a config
configurat
uration
ion wher
where
e VLAN and PPTP
PPTP interfaces
interfaces are bridged
bridged togethe
together.
r. (TRUE
(TRUE/FALSE)
/FALSE)

4. How m
many
any V
VLAN
LAN hea
header
derss do IIEEE
EEE 8
802.
02.1Q
1Q perm
permit?
it?
A. 1
B. more than 2
C. unlimited
D. 2

Tunneling 

1. Router A and B are b

both
oth running as PPPoE servers on d
different
ifferent broadcast
broadcast domains
domains of your network. Is it possible to set Router
A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers? (YES/NO)

2. To route two private

private networks together over a public
public routed network (there
(there are multiple hops between
between the gateway routers
routers of
the private networks), you can use the following tunnel types (mark all that are correct):
A. PPTP
B. PPPOE
C. L2TP
D. IPIP
E. EOIP

3. Whi
Which
ch on
ones
es of th
these
ese ar
are
e Poi
Point-
nt-to-
to-Poi
Point
nt addre
addresse
sses?
s?
A. add
addres
ress=1
s=10.0
0.0.0.
.0.1/2
1/24
4 net
networ
work=1
k=10.0
0.0.0.
.0.0
0
B. add
addres
ress=1
s=1.1.
.1.1.1
1.1/32
/32 net
networ
work=1
k=10.0
0.0.0.
.0.0
0
C. add
addres
ress=1
s=10.0
0.0.0.
.0.1/3
1/32
2 net
networ
work=1
k=10.0
0.0.0.
.0.0
0

D. add
addres
ress=1
s=10.0
0.0.0.
.0.1/3
1/32
2nnetw
etwork
ork=10
=10.0.
.0.0.2
0.254
54

4. The ccorr
orrect
ect o
ord
rder
er fo
forr PPPO
PPPOE
E dis
discov
covery
ery stag
stage
e is

 
SMK Daarut Tauhid 
 

 MikroTik Certification
Certification Exam Sample
Sample Questions 
Questions  Page
Page  10

A. Requ
Request,
est, Offe
Offer,
r, Init
Initializ
ialization
ation and Sess
Session
ion confirmat
confirmation
ion
B. Req
Reques
uest,
t, Initia
Initializ
lizati
ation,
on, Se
Sessi
ssion
on con
confir
firmat
mation
ion and
and Off
Offer
er
C. Initia
Initializ
lizati
ation,
on, Se
Sessi
ssion
on con
confir
firmat
mation
ion,, Request
Request and Offe
Offerr
D. Initi
Initializa
alization,
tion, Off
Offer,
er, Request
Request and Sess
Session
ion confirmat
confirmation
ion

5. When you set

set up a L2TP serv
server
er in Mikr
MikroTik
oTik RouterOS
RouterOS,, is it manda
mandatory
tory to configur
configure
e an IPSec polic
policy?
y? (YES/NO)
(YES/NO)

6. When addin
adding
g a user to your
your loca
locall ppp se
secrets
crets/pp
/ppp
p profiles
profiles da
databa
tabase,
se, it is p
possib
ossible
le to
A. All
Allow/
ow/de
deny
ny use
use of
of mo
more
re than
than one login
login b
byy this
this user
user
B. All
Allow
ow llogi
ogin
n by p
ppp
ppoe
oe and
and pptp
pptp,, bu
butt den
denyy log
login
in by
by l2tp
l2tp
C. Deny services
services (lik
(like
e telnet)
telnet) only for this
this user
user o
orr for
for one grou
group
p of users
users
D. Set max vvalue
aluess for total trans
transferr
ferred
ed bytes
bytes ((up-
up- and down
download)
load)
E. Al
Allo
low
w onl
onlyy p
pp
ppoe lo
log
gin

7. A MikoTik PPPoE
PPPoE Server can be u
used
sed only w
within
ithin a broadcast
broadcast doma
domain,
in, that is
is,, users can not run PPPoE
PPPoE protoc
protocol
ol with a server if
there is a router between the customer and that PPPoE server. (TRUE/FALSE)

8. To securel
securelyy br
bridge
idge together
together 2 remote
remote networ
networks
ks you can use
A. PPTP BCP
B. EoIP ov
over P
PP
PTP
C. PPPoE over EoIP
D. PPTP over EoIP

9. Settings
Settings in /ppp sec
secret
ret user dat
databas
abase
e override
override corres
correspond
ponding
ing /pp
/ppp
p profi
profile
le setti
settings.
ngs. (TRUE/FALSE)
(TRUE/FALSE)

 
SMK Daarut Tauhid