MikroTik Certification Exam Sample Questions

MTCRE

Static Routing

1. There are two routes in the routing table:

• 0 dst-addr=10.1.1.0/24 distance=10 gateway=10.10.10.10

• dst-addr=10.1.1.4/30 distance=20 gateway=10.20.20.20

Which gateway will be used to send packet with destination IP address 10.1.1.6?

A. 10.20.20.20
B. both
C. 10.10.10.10
D. None, because distance is >=10

2. Which static-route rule will have priority for destination 192.168.0.18?

A. dst-address=192.168.0.0/26 gateway=192.168.1.1 distance=3

B. dst-address=192.168.0.0/28 gateway=192.168.3.1 distance=1
C. dst-address=192.168.0.0/26 gateway=192.168.2.1 distance=2
D. dst-address=192.168.0.0/28 gateway=192.168.4.1 distance=5
E. dst-address=192.168.0.0/24 gateway=192.168.3.1 distance=1

3. MikroTik router needs to forward IP-packet targeted to 11.12.4.5. Router routing table has 3
routes,

• 1. dst-address=11.12.4.0/24, distance=10, gateway=1.1.1.1

• 2. dst-address=11.12.4.0/28, distance=20, gateway=1.1.1.2.
• 3. dst-address=0.0.0.0/0, distance=1, gateway=1.1.1.254.

Which of the gateways will router select?

A. 2
B. 3
C. Nowhere.
D. Host will get "destination host unreachable".
E. 1

4. There are two routes in the routing table:

• 0 dst-addr=10.1.1.0/24 gateway=5.5.5.5

• 1 dst-addr=10.1.1.4/30 gateway=5.6.6.6

P a g e 1 | 13
 MikroTik Certification Exam Sample Questions

Which gateway will be used to get to the IP address 10.1.1.6?

A. both - half of the traffic will be routed through one gateway, half through the other

B. 5.6.6.6

C. 5.5.5.5

D. the required route is not in the routing table

5. Consider the following output from the command "/ip address print":

Flags: X - disabled, I - invalid, D - dynamic

# ADDRESS NETWORK BROADCAST INTERFACE

0 10.10.10.1/32 10.10.10.2 0.0.0.0 pppoe-1

1 10.10.10.1/32 10.10.10.3 0.0.0.0 pppoe-2

This configuration is invalid because of the duplicate IP's. (TRUE/FALSE)

6. Select the correct statements about routing marks:

A. each packet can have more than one routing mark

B. can be assigned by IP firewall mangle chains input and output

C. a packet with a routing mark is ignored by main routing table if there is at least one route for
the routing

mark

D. check-gateway option is not compatible with routing-mark

7. /ip route can have DS flags simultaneously. (TRUE/FALSE)

8. If route type is 'blackhole', then packets to the destination network are going to be

A. dropped on this router and ICMP message will be sent back to the source

B. sent back to the source

C. sent back to the previous router

D. dropped on this router

9. Define a routing loop (choose the most precise description)

P a g e 2 | 13
 MikroTik Certification Exam Sample Questions

A. situation where the TTL of the packet expires

B. Situation where the packet does not reach it\'s destination

C. situation where the packet is routed through the same sequence of routers until the TTL
expires D. situation where the packet is routed through the same router twice

10. Which routing table is used to apply recursive routing at MikroTik RouterOS

A. It is possible in all the routing tables installed in a router

B. It is not possible

C. It is only possible on the x86 platform

D. It is only possible in the main routing table /

11. The default value of 'target-scope' for a static route is:

A. 255

B. 10

C. 30

D. 1

12. When using the "check gateway" function in creating a route, the following protocols can be
utilized to ensure the gateway address is reachable (choose all correct answers):

A. UDP

B. MNDP

C. ARP

D. ICMP

13. To assign specific traffic to a route – traffic must be identified by a routing mark. Each packet
can only have one routing mark. (TRUE/FALSE)

14. Which route will be used to reach host 192.168.1.55? /ip route add disabled=no distance=1
dst-address=192.168.1.0/24 gateway=1.1.1.1 add disabled=no distance=1 dst-
address=192.168.1.0/25 gateway=2.2.2.2 add disabled=no distance=1 dstaddress=192.168.0.0/16
gateway=3.3.3.3

A. Route via gateway 3.3.3.3

B. Route via gateway 2.2.2.2

P a g e 3 | 13
 MikroTik Certification Exam Sample Questions

C. Route via gateway 1.1.1.1

15. Router has two gateways to reach a certain network both with check gateway activated.
Choose the option you can use to control active and backup gateway.

A. Routing mark

B. Interface

C. Scope

D. Distance

16. ECMP provides:

A. per src address load balancing to multiple gateways

B. per src/dst address pair load balancing to multiple gateways

C. per connection load balancing to multiple gateways

D. per packet load balancing to multiple gateways

17. When adding a static route, you must always ensure that you add both the gateway and the
interface. (TRUE/FALSE)

18. If we change TTL to 2 in mangle chain prerouting

A. packet will not be forwarded

B. packet will always reach its destination

C. packet will be forwarded only to next L3 device

D. packet will be forwarded to the next 2 L3 devices

19. If 'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable,
then

A. the ECMP route becomes inactive

B. ECMP is going to send packets to all gateways even if one is unreachable

C. the unreachable gateway is not going be used in Round Robin algorithm

20. It is possible to change the Time To Live in Firewall Mangle. (TRUE/FALSE)

P a g e 4 | 13
 MikroTik Certification Exam Sample Questions

21. When sending out an ARP request, an IP host is expecting what kind of address for an
answer?

A. VLAN ID

B. 802.11g

C. IP address

D. MAC Address

22. Consider the following diagram. We want to communicate from a device on LAN1 to a device
on LAN2. Assuming that all necessary configurations are already included on R2, which of the
following configurations in R1 would enable this communication?

A. /ip route add dst-address=0.0.0.0/0 gateway=Ether1

B. /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2

C. /ip route add dst-address=192.168.0.0/24 gateway=192.168.0.1

D. /ip route add dst-address=192.168.1.0/24 src-address=192.168.0.0/24

gateway=192.168.99.2 E. /ip route add dstaddress=0.0.0.0/0 gateway=192.168.99.2

23. Mangle Routing (routing-mark) is possible, by using chains:

A. input and output

B. forward and postrouting

C. prerouting and output

D. forward and output

E. prerouting and forward

24. There are four routes in the routing table. Host 10.10.10.10 becomes unreachable.

• 1 dst-addr=0.0.0.0/0 gateway=11.11.11.11

• 2 dst-addr=20.20.20.0/24 gateway=10.10.10.10 check-gateway=ping

• 3 dst-addr=30.30.30.0/24 gateway=10.10.10.10

• 4 dst-addr=30.30.30.0/25 gateway=13.13.13.13 check-gateway=ping

Which gateway is used to get to the IP address 30.30.30.145?

A. 10.10.10.10

B. 13.13.13.13

P a g e 5 | 13
 MikroTik Certification Exam Sample Questions

C. 11.11.11.11

D. None. Packets to that host will be dropped until host 10.10.10.10 becomes active again.

25. /ip route configuration on router,

• /ip route add gateway=192.168.0.1

• /ip route add dst-address=192.168.1.0/24 gateway=192.168.0.2

• /ip route add dst-address=192.168.2.0/24 gateway=192.168.0.3

• /ip route add dst-address=192.168.3.0/26 gateway=192.168.0.4 Router needs to send

packets to 192.168.3.240. Which gateway will be used?

A. 192.168.0.1

B. 192.168.0.2

C. 192.168.0.4

D. 192.168.0.3

26. A MikroTik Router has the following configuration

• /ip address add address=1.1.1.2/30 interface=ether1 add address=2.2.2.2/30

interface=ether2 add address=192.168.10.1/24 interface=ether3

• /ip firewall mangle add action=markconnection chain=prerouting dstport=80

newconnectionmark=web_c passthrough=yes protocol=tcp add action=markrouting
chain=prerouting connection-mark=web_c newroutingmark=web passthrough=no

• /ip firewall nat add action=masquerade chain=srcnat outinterface=ether3

• /ip route add gateway=1.1.1.1 add gateway=2.2.2.2 routing-mark=web

What can be said about the Web Access (port 80) by a customer connected at ether3 interface with
IP 192.168.10.2/24, gateway 192.168.10.1?

A. The customer will access the Web using the gateway 2.2.2.2

B. The Customer will access the Web by ECMP, by using both gateways 1.1.1.1 and 2.2.2.2

C. The Customer is unable to access the Web.

D. The customer will access the Web using the gateway 1.1.1.1

27. When creating a route, it is possible to specify the gateway to a network even if the gateway
is not directly connected by using recursive next-hop resolving from an existing route. (TRUE/FALSE)

P a g e 6 | 13
 MikroTik Certification Exam Sample Questions

28. Routing table has several routes with the same gateway. If 'check-gateway' is enabled for one
of the routes, and the gateway becomes unreachable, then

A. only this one route would become inactive

B. all routes with the same gateway would become inactive

C. the 'check-gateway' feature would not work at all, since the same gateway is used for more
than one route

29. routing table has following entries:

• 0 dst-address=10.0.0.0/24 gateway=10.1.5.126

• 1 dst-address=10.1.5.0/24 gateway=10.1.1.1

• 2 dst-address=10.1.0.0/24 gateway=25.1.1.1

• 3 dst-address=10.1.5.0/25 gateway=10.1.1.2

Which gateway will be used for a packet with destination address

10.1.5.126?

A. 10.1.1.2

B. 25.1.1.1

C. 10.1.5.126

D. 10.1.1.1

OSPF
1. Only OSPF routes distributed as "external" can be filtered with routing filters (TRUE/FALSE)

2. OSPF starts working on the router as soon as

A. at least one area is specified in the ospf area menu

B. at least one IP network is assigned in the ospf network menu

C. at least one interface is defined in the ospf interface menu

D. the routing package is enabled on the router

3. A MikroTik system administrator implemented OSPF Routing protocol in the network. But
realized that he has a static route on the routers. What can be done to make the static route work as
a failover whenever the dynamic routing protocol fails?

A. He should use "netwatch" to trigger static routes whenever OSPF fails

P a g e 7 | 13
 MikroTik Certification Exam Sample Questions

B. He should manually disable the static routes and enable them whenever OSPF fails

C. He should increase the administrative distance of the static route

D. Delete all static routes because there is no way for it to work with OSPF

4. An OSPF area consists of 15 routers connected in 6 different broadcast networks. How many
Designated routers there will be in the area?

A. 6

B. 1

C. 0

D. 15

5. Which is the correct way to set a comment in a OSPF dynamic route:

A. It can be configured by setting up Routing filters

B. A comment cannot be configured in a dynamic route

C. It can be configured manually in the Routing Table

6. What is the minimum configuration a network administrator needs to do on a MikroTik

router to enable OSPF?

A. Nothing; OSPF instance can run with no configuration

B. Both interface and network must be added to OSPF configuration C. Add an interface to
OSPF interface configuration

7. In OSPF settings, the NBMA Neighbor setting can be used to improve the stability of OSPF
across wireless links. (TRUE/FALSE)

8. It is possible to have OSPF and BGP configured on the same router? (YES/NO)

9. In this ospf network (see diagram), we want to re-distribute routes from R5 to the R3 router.
Where do I have to create a virtual link?

A. There is no need for a virtual-link

B. Between R1 and R4

C. Between R5 and R3
P a g e 8 | 13
 MikroTik Certification Exam Sample Questions

D. Between R4 and R2

10. Which of the following conditions have to be fulfilled for two routers on one ethernet
segment to become ospf neighbors?

A. Network-type must be the same

B. Hello and dead timers must be the same

C. MTU must be the same

D. Cost must be the same

11. You have a router with the following IP addresses:

• ether1: 10.40.1.1/24

• ether2: 10.250.1.1/30

• ether3: 10.251.1.1/30

• wlan1: 10.50.1.1/30

• wlan2: 10.50.2.1/30

You have a customer directly connected to ether2, and another customer directly connected to
ether3. Your wireless radios are used for wireless connectivity to two different towers, and ether1
goes to another wireless access point for other subscribers. You need all of the subnets distributed
across your OSPF Network. You need to configure OSPF to talk on this router, what would be the best
configuration.

A. Set OSPF Networks to 10.40.1.0/24, 10.250.1.0/30, 10.251.1.0/24, 10.50.1.0/30, and

10.50.2.0/30

B. set distribute-default=always-type-1

C. Set OSPF networks to 0.0.0.0/0

D. Set OSPF Networks to 10.40.1.0/24, 10.250.1.0/30, 10.251.1.0/30, 10.50.1.0/30, and

10.50.2.0/30

E. Set OPSF networks to 10.0.0.0/8 only

F. Set OSPF networks, to 10.50.1.0/30, 10.50.2.0/30

G. Set Distribute-Connected=yes

H. Set Ethernet 2 and 3 to passive mode

I. set distribute-state=yes

J. Set Ethernet 1, 2, and 3 to passive mode

P a g e 9 | 13
 MikroTik Certification Exam Sample Questions

12. New area OSPF \"area1\" has been created. What could be used as a valid area id?

A. 1.2.3.4

B. 0.0.0.1

C. 0.0.0.0

13. True or False: BGP can be used for internal routing, using an internal AS number.
(TRUE/FALSE)

14. Which type of ip route is the highest priority for routing decision ?

A. OSPF Route

B. BGP Route

C. Static Route

D. Connected Route

15. In OSPF interface configuration what effect will a “passive=yes” option have on a specific
interface ? A. It will prevent routes learned through the interface from being listed in the routing
table.

B. It will action a mirroring of all routing upgrades to that interface

C. It will prevent all OSPF traffic through that interface

D. It will prevent all traffic through that interface

VLAN
1. VLAN is an implementation of the 802.1Q VLAN protocol by the MikroTik RouterOS. It allows
you to have multiple Virtual LANs on a single ethernet or wireless interface, giving the ability to
segregate LANs efficiently. How many different vlans are possible on a single ethernet port?

A. 4096

B. Only one

C. 63

D. 4095

2. A network administrator has 2 vlans /interface vlan add name=vlan1 vlan-id=101

interface=ether1 add name=vlan2 vlanid=102 interface=vlan1

P a g e 10 | 13
 MikroTik Certification Exam Sample Questions

Any packet sent over "vlan2" interface …

A. will have one vlan tag added to ethernet header - "101"

B. will have one vlan tag added to ethernet header - "102"

C. Wrong configuration because it is not possible to have a vlan over another vlan

D. will have two vlan tags added to ethernet header - "101" and "102" E. will not go through at
all because vlan1 will drop it

3. It is possible to create a configuration where VLAN and PPTP interfaces are bridged together.
(TRUE/FALSE)

4. How many VLAN headers do IEEE 802.1Q permit?

A. 1

B. more than 2

C. unlimited

D. 2

Tunneling

1. Router A and B are both running as PPPoE servers on different broadcast domains of your
network. Is it possible to set Router

A to use "/ppp secret" accounts from Router B to authenticate PPPoE customers? (YES/NO)

2. To route two private networks together over a public routed network (there are multiple
hops between the gateway routers of the private networks), you can use the following tunnel types
(mark all that are correct):

A. PPTP

B. PPPOE

C. L2TP

D. IPIP

E. EOIP

3. Which ones of these are Point-to-Point addresses?

A. address=10.0.0.1/24 network=10.0.0.0

B. address=1.1.1.1/32 network=10.0.0.0

C. address=10.0.0.1/32 network=10.0.0.0
P a g e 11 | 13
 MikroTik Certification Exam Sample Questions

D. address=10.0.0.1/32 network=10.0.0.254

4. The correct order for PPPOE discovery stage is

A. Request, Offer, Initialization and Session confirmation

B. Request, Initialization, Session confirmation and Offer

C. Initialization, Session confirmation, Request and Offer

D. Initialization, Offer, Request and Session confirmation

5. When you set up a L2TP server in MikroTik RouterOS, is it mandatory to configure an IPSec
policy? (YES/NO)

6. When adding a user to your local ppp secrets/ppp profiles database, it is possible to

A. Allow/deny use of more than one login by this user

B. Allow login by pppoe and pptp, but deny login by l2tp

C. Deny services (like telnet) only for this user or for one group of users

D. Set max values for total transferred bytes (up- and download)

E. Allow only pppoe login

7. A MikoTik PPPoE Server can be used only within a broadcast domain, that is, users can not
run PPPoE protocol with a server if there is a router between the customer and that PPPoE server.
(TRUE/FALSE)

8. To securely bridge together 2 remote networks you can use

A. PPTP BCP

B. EoIP over PPTP

C. PPPoE over EoIP

D. PPTP over EoIP

9. Settings in /ppp secret user database override corresponding /ppp profile settings.
(TRUE/FALSE)

P a g e 12 | 13
MikroTik Certification Exam Sample Questions

P a g e 13 | 13