Mtctce-2 1b1l2j
This document was ed by and they confirmed that they have the permission to share it. If you are author or own the copyright of this book, please report to us by using this report form. Report r6l17
Overview 4q3b3c
& View Mtctce-2 as PDF for free.
More details 26j3b
- Words: 1,395
- Pages: 5
1. after putting this rule: /ip firewall add chain=input action=drop, you will still be able to access the Router using the mac-address.
2. Simple Queue number 0 defines 2M for and for target IP 10.10.0.33. Simple Queue number 1 defines 4M for and for target IP 10.10.0.33. Client 10.10.0.33 is be able to obtain A. 0M / B. 4M / C. 6M / D. 2M / 3. In RouterOS queue configurations the word "total" usually represents A. - B. + C. D. 4. An IP address pool can contain addresses from more than one subnet.
5. Firewall NAT rules process only the first packet of each connection.
6. Is it possible to use the serial port of MikroTik to communicate with an external device connected by null-modem cable? A. Yes, when other is a MikroTik router. B. Yes, it is always possible by /system serial-terminal command. C. Yes, if port is not being used 7. You have a queue structure: queue "MK" max-limit=23M -queue "A" parent="MK" limit-at=10M max-limit=18M --queue "AA" parent="A" limit-at=3M max-limit=5M priority=1 --queue "AB" parent="A" limit-at=1M max-limit=2M priority=2 --queue "AC" parent="A" limit-at=4M max-limit=8M priority=4 -queue "B" parent="MK" limit-at=10M max-limit=18M --queue "BA" parent="B" limit-at=1M max-limit=10M priority=1 --queue "BB" parent="B" limit-at=2M max-limit=3M priority=3 Select the correct answer for the worst case scenario when all queues are trying to get all available traffic. A. queue "AA" will get 3M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M
B. queue "AA" will get 5M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M C. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 2M D. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 3M E. queue "AA" will get 3M, "AB" 1M, "AC" 8M, "BA" 1M, "BB" 3M 8. DH server is configured on a router’s ether1 interface. IP address 192.168.0.100/24 is assigned to the interface. Possible IP pools, that can be used by this DH server, are:
A. 192.168.0.1-192.168.0.99,192.168.0.101-192.168.0.254 B. 192.169.0.1-192.169.0.254 C. 192.168.0.1-192.168.0.255 D. 192.168.0.1-192.168.0.14 9. An IP packet has matched all the conditions of a firewall rule and the action reject and the option icmp-network-unreachable was initiated for that packet. What will happen with the packet content ? A. The packet will be discarded regardless of its content B. The whole packet will be forwarded back to the sender regardless of its contents C. The packet will be rejected only if the destination network is unreachable D. The packet header will receive a flag of \\\"icmp-network-unreacheble\\\" 10. According to the picture, if both laptops have same priority, how much bandwidth will be available for every laptop ? A. 2 B. 4 C. 3 D. 1 11. By default HTBs have no way of knowing what amount of bandwidth is available, this information can be provided by specifying max-limit on main parent queue in HTB
12. Which of the following is true for mangle facility in RouterOS? A. Marks packet can be used by other router facilities like routing and bandwidth management B. Mangle facility can be used to modify some fields in the IP header and TTL fields C. Mangle facility is used to mark IP packets with special marks for future processing D. The mangle mark can be transmitted across the network, and used by other routers 13. What does this simple queue do (check the image)? A. Queue guarantees data rate of one megabit per second for host 192.168.1.10 B. Queue limits host 192.168.1.10 data rate to one megabit per second. C. Queue limits host 192.168.1.10 data rate to one megabit per second.
D. Queue guarantees data rate of one megabit per second for host 192.168.1.10 14. You have default configuration, the firewall filter configuration is /ip firewall filter add chain=input src-address=192.168.0.1 action=accept /ip firewall filter add chain=input action=log /ip firewall filter add chain=input action=drop Which host is allowed to access the router? A. IP address 192.168.0.1, MAC-address 00:0C:42:01:01:02 B. IP address 192.168.0.2, MAC-address 00:0C:42:01:01:02 C. IP address 5.8.8.8, MAC-address 00:0C:42:01:02:03 D. IP address 192.168.0.1, MAC-address 00:0C:42:05:05:01
15. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4 - - queue "C2" parent="M" limit-at=1M max-limit=4M priority=1 - - queue "C3" parent="M" limit-at=3M max-limit=7M priority=8 - queue "F" parent="GP" limit-at=5M max-limit=8M - - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5 - - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2 If queues "C2" and "C3" are not requiring any traffic, how is all the available bandwidth going to be distributed in worst case scenario when all other queues are trying to get all available traffic? A. queue "C1" will get 4M, "D2" 3M, "D1" 3M B. queue "C1" will get 4M, "D2" 7M, "D1" 4M C. queue "C1" will get 2M, "D2" 5M, "D1" 3M D. queue "C1" will get 3M, "D2" 3M, "D1" 5M E. queue "C1" will get 5M, "D2" 2M, "D1" 3M 16. The cache hit DS (TOS) number under the Web Proxy Settings is used A. To identify data coming from the cached data to the client B. To Identify data the proxy system has stored and returned to clients C. To Identify data coming from the internet to the web proxy clients D. To identify data received by the web proxy from the internet 17. Is it possible for a client to get an IP address but no gateway after a successful DH request?
18. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4
-
- queue "C2" parent="M" limit-at=1M max-limit=4M priority=1 - queue "C3" parent="M" limit-at=2M max-limit=7M priority=8 queue "F" parent="GP" limit-at=5M max-limit=8M - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5 - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2
Which queue will get more than limit-at in worst case scenario?
A. C1 B. C3 C. D2 D. D1 E. C2 19. You want to offer a static route to your DH clients (besides the default-route). What is the best way to do that? A. There is no way to send a static-route to DH clients B. Set DH options 121 C. Set a static IP into /ip route and it will automatically be sent to clients D. Set DH options 3 20. You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or CDP locally. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions to accomplish this.
A. Remove/Disable the Interfaces B. Place a proper forward firewall rule to block mac discovery C. Remove/Disable all interfaces under mac-Server winbox D. Remove/Disable all interfaces under mac-server telnet E. Place a proper input firewall rule to block mac discovery F. Remove/Disable all discovery interfaces G. Add a Deny All input firewall rule 21. You can apply input firewall rules based on prerouting or forward mangle marks
22. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply) A. Connection Tracking must be enabled on NAT router B. LAN address of the webserver should be routable on the internet C. Public IP address of the webserver must be installed on the NAT Router D. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver E. A route between the NAT Router and the webserver must exist
23. In Ip Firewall NAT, you can Classify Traffic in SRC Nat Chain based on " in-interface".
24. Consider the following network diagram. In R1, you have the following configuration: /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed? A. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.10 action=drop B. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop C. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop D. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop 25. Two mangle rules defining different mangle packet marks for the same traffic type, will make it have both mangle marks.
2. Simple Queue number 0 defines 2M for and for target IP 10.10.0.33. Simple Queue number 1 defines 4M for and for target IP 10.10.0.33. Client 10.10.0.33 is be able to obtain A. 0M / B. 4M / C. 6M / D. 2M / 3. In RouterOS queue configurations the word "total" usually represents A. - B. + C. D. 4. An IP address pool can contain addresses from more than one subnet.
5. Firewall NAT rules process only the first packet of each connection.
6. Is it possible to use the serial port of MikroTik to communicate with an external device connected by null-modem cable? A. Yes, when other is a MikroTik router. B. Yes, it is always possible by /system serial-terminal command. C. Yes, if port is not being used 7. You have a queue structure: queue "MK" max-limit=23M -queue "A" parent="MK" limit-at=10M max-limit=18M --queue "AA" parent="A" limit-at=3M max-limit=5M priority=1 --queue "AB" parent="A" limit-at=1M max-limit=2M priority=2 --queue "AC" parent="A" limit-at=4M max-limit=8M priority=4 -queue "B" parent="MK" limit-at=10M max-limit=18M --queue "BA" parent="B" limit-at=1M max-limit=10M priority=1 --queue "BB" parent="B" limit-at=2M max-limit=3M priority=3 Select the correct answer for the worst case scenario when all queues are trying to get all available traffic. A. queue "AA" will get 3M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M
B. queue "AA" will get 5M, "AB" 2M, "AC" 4M, "BA" 10M, "BB" 2M C. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 2M D. queue "AA" will get 5M, "AB" 2M, "AC" 8M, "BA" 10M, "BB" 3M E. queue "AA" will get 3M, "AB" 1M, "AC" 8M, "BA" 1M, "BB" 3M 8. DH server is configured on a router’s ether1 interface. IP address 192.168.0.100/24 is assigned to the interface. Possible IP pools, that can be used by this DH server, are:
A. 192.168.0.1-192.168.0.99,192.168.0.101-192.168.0.254 B. 192.169.0.1-192.169.0.254 C. 192.168.0.1-192.168.0.255 D. 192.168.0.1-192.168.0.14 9. An IP packet has matched all the conditions of a firewall rule and the action reject and the option icmp-network-unreachable was initiated for that packet. What will happen with the packet content ? A. The packet will be discarded regardless of its content B. The whole packet will be forwarded back to the sender regardless of its contents C. The packet will be rejected only if the destination network is unreachable D. The packet header will receive a flag of \\\"icmp-network-unreacheble\\\" 10. According to the picture, if both laptops have same priority, how much bandwidth will be available for every laptop ? A. 2 B. 4 C. 3 D. 1 11. By default HTBs have no way of knowing what amount of bandwidth is available, this information can be provided by specifying max-limit on main parent queue in HTB
12. Which of the following is true for mangle facility in RouterOS? A. Marks packet can be used by other router facilities like routing and bandwidth management B. Mangle facility can be used to modify some fields in the IP header and TTL fields C. Mangle facility is used to mark IP packets with special marks for future processing D. The mangle mark can be transmitted across the network, and used by other routers 13. What does this simple queue do (check the image)? A. Queue guarantees data rate of one megabit per second for host 192.168.1.10 B. Queue limits host 192.168.1.10 data rate to one megabit per second. C. Queue limits host 192.168.1.10 data rate to one megabit per second.
D. Queue guarantees data rate of one megabit per second for host 192.168.1.10 14. You have default configuration, the firewall filter configuration is /ip firewall filter add chain=input src-address=192.168.0.1 action=accept /ip firewall filter add chain=input action=log /ip firewall filter add chain=input action=drop Which host is allowed to access the router? A. IP address 192.168.0.1, MAC-address 00:0C:42:01:01:02 B. IP address 192.168.0.2, MAC-address 00:0C:42:01:01:02 C. IP address 5.8.8.8, MAC-address 00:0C:42:01:02:03 D. IP address 192.168.0.1, MAC-address 00:0C:42:05:05:01
15. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4 - - queue "C2" parent="M" limit-at=1M max-limit=4M priority=1 - - queue "C3" parent="M" limit-at=3M max-limit=7M priority=8 - queue "F" parent="GP" limit-at=5M max-limit=8M - - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5 - - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2 If queues "C2" and "C3" are not requiring any traffic, how is all the available bandwidth going to be distributed in worst case scenario when all other queues are trying to get all available traffic? A. queue "C1" will get 4M, "D2" 3M, "D1" 3M B. queue "C1" will get 4M, "D2" 7M, "D1" 4M C. queue "C1" will get 2M, "D2" 5M, "D1" 3M D. queue "C1" will get 3M, "D2" 3M, "D1" 5M E. queue "C1" will get 5M, "D2" 2M, "D1" 3M 16. The cache hit DS (TOS) number under the Web Proxy Settings is used A. To identify data coming from the cached data to the client B. To Identify data the proxy system has stored and returned to clients C. To Identify data coming from the internet to the web proxy clients D. To identify data received by the web proxy from the internet 17. Is it possible for a client to get an IP address but no gateway after a successful DH request?
18. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M priority=4
-
- queue "C2" parent="M" limit-at=1M max-limit=4M priority=1 - queue "C3" parent="M" limit-at=2M max-limit=7M priority=8 queue "F" parent="GP" limit-at=5M max-limit=8M - queue "D1" parent="F" limit-at=3M max-limit=4M priority=5 - queue "D2" parent="F" limit-at=2M max-limit=5M priority=2
Which queue will get more than limit-at in worst case scenario?
A. C1 B. C3 C. D2 D. D1 E. C2 19. You want to offer a static route to your DH clients (besides the default-route). What is the best way to do that? A. There is no way to send a static-route to DH clients B. Set DH options 121 C. Set a static IP into /ip route and it will automatically be sent to clients D. Set DH options 3 20. You wish to secure your RouterOS system. You do not want the RouterOS to be discoverable using MNDP or CDP locally. You also want to deny management via the MAC addresses on all interfaces. Select the correct actions to accomplish this.
A. Remove/Disable the Interfaces B. Place a proper forward firewall rule to block mac discovery C. Remove/Disable all interfaces under mac-Server winbox D. Remove/Disable all interfaces under mac-server telnet E. Place a proper input firewall rule to block mac discovery F. Remove/Disable all discovery interfaces G. Add a Deny All input firewall rule 21. You can apply input firewall rules based on prerouting or forward mangle marks
22. It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply) A. Connection Tracking must be enabled on NAT router B. LAN address of the webserver should be routable on the internet C. Public IP address of the webserver must be installed on the NAT Router D. in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver E. A route between the NAT Router and the webserver must exist
23. In Ip Firewall NAT, you can Classify Traffic in SRC Nat Chain based on " in-interface".
24. Consider the following network diagram. In R1, you have the following configuration: /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed? A. /ip firewall filter add chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.10 action=drop B. /ip firewall filter add chain=input src-address=192.168.99.1 dst-address=192.168.1.10 action=drop C. /ip firewall filter add chain=forward src-address=192.168.99.1 dst-address=192.168.1.10 action=drop D. /ip firewall nat add chain=dstnat src-address=192.168.99.1 dst-address=192.168.1.10 action=drop 25. Two mangle rules defining different mangle packet marks for the same traffic type, will make it have both mangle marks.
More Documents from "ArturGolban" i3e23
Mtctce-2 1b1l2j
February 2021 0