MK Exam Cert Mtcte [PDF]

Zitiervorschau

Translate to Spanish : OFF 00:58:19 last save: 2018-04-22 21:23:39 1. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M - - queue "C2" parent="M" limit-at=1M max-limit=4M - - queue "C3" parent="M" limit-at=3M max-limit=7M - queue "F" parent="GP" limit-at=5M max-limit=8M - - queue "D1" parent="F" limit-at=3M max-limit=4M - - queue "D2" parent="F" limit-at=2M max-limit=5M

priority=4 priority=1 priority=8 priority=5 priority=2

If queues "C2" and "C3" are not requiring any traffic, how is all the available bandwidth going to be distributed in worst case scenario when all other queues are trying to get all available traffic? A. queue "C1" will get 3M, "D2" 3M, "D1" 5M B. queue "C1" will get 5M, "D2" 2M, "D1" 3M C. queue "C1" will get 2M, "D2" 5M, "D1" 3M D. queue "C1" will get 4M, "D2" 3M, "D1" 3M E. queue "C1" will get 4M, "D2" 7M, "D1" 4M 2. It is required to make a web server residing on a private subnet in a LAN visible on the public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met (select all that apply): A. Public IP address of the web server must be installed on the NAT Router B. A route between the NAT Router and the web server must exist C. LAN address of the web server should be routable on the Internet D. In IP firewall NAT there should be a dst-nat between the public IP address of the router and the private IP of the web server E. Connection tracking must be enabled on the NAT router 3. Domain Name System (DNS) requests can use protocol/port: A. TCP 53 B. TCP 80 C. UDP 80 D. UDP 53 4. An IP packet has matched all the conditions of a firewall rule and the action reject and the option icmp-network-unreachable was initiated for that packet. What will happen with the contents of the packet? A. The packet will be rejected only if the destination network is unreachable B. The packet will be discarded regardless of its content C. The whole packet will be forwarded back to the sender regardless of its contents D. The packet header will receive a flag of 'icmp-network-unreacheble' 5. You have a queue structure: queue "GP" max-limit=10M - queue "M" parent="GP" limit-at=4M max-limit=6M - - queue "C1" parent="M" limit-at=1M max-limit=7M - - queue "C2" parent="M" limit-at=1M max-limit=4M - - queue "C3" parent="M" limit-at=2M max-limit=7M - queue "F" parent="GP" limit-at=5M max-limit=8M - - queue "D1" parent="F" limit-at=3M max-limit=4M - - queue "D2" parent="F" limit-at=2M max-limit=5M

priority=4 priority=1 priority=8 priority=5 priority=2

Which queue will get more than limit-at in worst case scenario? A. C1 B. C2

C. D1 D. C3 E. D2 6. To use your RouterOS System as a DNS cache for a local network, you have to: A. Allow forwarding of DNS traffic B. Configure DNS-servers at RouterOS DNS settings C. Enable DHCP package D. Enable \"Allow Remote Requests\" at DNS settings 7. Which of the following is true for mangle facility in RouterOS? A. The mangle mark can be transmitted across the network, and used by other routers B. Marks packet can be used by other router facilities like routing and bandwidth management C. Mangle facility is used to mark IP packets with special marks for future processing D. Mangle facility can be used to modify some fields in the IP header and TTL fields 8. Simple Queue number 0 defines 2M for upload and download for target IP 10.10.0.33. Simple Queue number 1 defines 4M for upload and download for target IP 10.10.0.33. The maximum bandwidth that the client 10.10.0.33 is be able to obtain is: A. 6M upload/download B. 2M upload/download C. 4M upload/download D. 0M upload/download 9. Routable traffic is received by a RouterOS router, with its destination found in an active working routing table entry to another router elsewhere. The packet will be processed as follows: A. Forward - Prerouting - Postrouting B. Prerouting - Input - Interface C. Postrouting -Forward - Prerouting D. Prerouting - Forward - Postrouting 10. Is it possible to have 2 working DHCP servers on the same interface? A. No it is not possible B. Yes, as long as 1 has a relay specified C. Yes, as long as 1 is set to Always Broadcast D. Yes, as long as only 1 is Authoritative 11. You set your client's simple queue: 0 name="Your Client" target-addresses=1.1.1.1/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small total-max-limit=10M The client starts downloading from a website that gives him a download speed of 7 Meg, then starts uploading a file to a hosted server. This server can transfer at 5 Meg bandwidth. Which upload speed is allowed for the client? A. 3 Meg B. 5 Meg C. 4 Meg D. 2 Meg 12. If ARP=reply-only is configured on an interface, this interface will A. accept all MAC-addresses listed in '/ip arp' as static entries B. accept IP and MAC address combinations listed in '/ip arp' list C. accept all IP addresses listed in '/ip arp' as static entries D. add new MAC addresses in '/ip arp' list

E. add new IP addresses in '/ip arp' list 13. How can Mangle rules be applied to dynamically created PPTP client interfaces (select all that apply): A. It is not possible to do this B. By directly using the dynamic PPTP interface as a Mangle 'In interface' C. By enabling the 'PPTP Use Firewall' setting in the associated PPP Profile D. By using the Address List feature in the associated PPP Profile 14. RouterOS router can act as a radius client and authenticate through a radius server different services. Which of the following can authenticate using this method? A. PPTP users B. SNMP agents C. RouterOS users D. PPPoE users E. Wireless clients 15. What does the firewall action "Redirect" do? Select all true statements. A. Redirects a packet to a specified port on a host in the network B. Redirects a packet to a specified port on the router C. Redirects a packet to a specified IP D. Redirects a packet to the router 16. You want to offer a static route to your DHCP clients (besides the defaultroute). What is the best way to do that? A. Set DHCP options 3 B. There is no way to send a static-route to DHCP clients C. Set DHCP options 121 D. Set a static IP into /ip route and it will automatically be sent to clients 17. If we have the following queue structure: queue "A" max-limit=10M - queue "B" parent="A" limit-at=4M max-limit=6M priority=2 - queue "C" parent="A" limit-at=4M max-limit=6M priority=1 - - queue "C1" parent="C" limit-at=2M max-limit=4M priority=4 - - queue "C2" parent="C" limit-at=2M max-limit=3M priority=8 If all queues are utilizing the maximum. what will be the traffic distribution? A. B-4M, C1-4M, C2- 2M B. B-6M, C1-3M, C2- 1M C. B-4M, C1-3M, C2- 3M D. B-6M, C1-2M, C2- 2M E. B-5M, C1-3M, C2- 2M 18. Sort queue types by processor work-load, first is less consumptive. A. PCQ, PFIFO, RED B. PFIFO, PCQ, RED C. PFIFO, RED, PCQ D. PCQ, RED, PFIFO 19. You can use NETMAP function at NAT to translate the subnet 172.16.0.0/25 to: A. 186.1.18.128/25 B. 187.0.16.0/26 C. 200.211.34.0/24 D. 187.0.16.0/25 E. 188.14.111.0/23 20. To mangle all traffic going to the router itself on chain=prerouting, we can use parameter: A. dst-address-type=unicast B. dst-address=localhost C. dst-address=127.0.0.1 D. dst-address-type=local 21. MikroTik RouterOS commands can be run once a day by: A. /system watchdog B. /system cron

C. /system scheduler 22. Choose the correct PCQ argument values to allow 256kbps maximum download and upload for each client: A. kind=pcq pcq-rate=256000 pcq-classifier=dst-address B. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address C. kind=pcq pcq-rate=256000 pcq-classifier=src-address D. kind=pcq pcq-rate=5000000 pcq-classifier=src-address E. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address 23. What kind of packet is marked by connection-state=established matcher? A. Packet does not correspond to any known connection B. Packet is related to, but not part of an existing connection C. Packet belongs to an existing connection, for example a reply packet or a packet which belongs to already replied connection D. Packet begins a new TCP connection 24. Consider the following scenario: There are two subnets configured on a RouterOS device. One subnet for regular employees and one for guests. The internal subnet for employees is 192.168.0.0/24, gateway IP 192.168.0.254. IP's to the clients devices are assigned manually. The guest subnet is 192.168.10.0/24, gateway IP 192.168.10.254. Both subnets are NAT’ed using a single SRC-NAT Masquerade rule on the ‘Internet’ interface. Problem: The ISP will be changing the DNS servers because of an attack. The new ones are 195.213.7.1 and 195.213.7.6. Which of the following CLI commands in Terminal will route all users’ DNS requests to use these new DNS servers without requiring any change to the configurations on their computers (select any that are required): A. /ip dhcp-server network set [find gateway=192.168.10.254] dnsserver=192.168.10.254 B. /ip firewall nat add chain=srcnat protocol=udp port=53 action=redirect toports=53 C. /ip firewall nat add chain=dstnat protocol=tcp dst-port=53 action=redirect toports=53 D. /ip dns set servers=195.213.7.1,195.213.7.6 E. /ip dns set allow-remote-requests=yes servers=195.213.7.1,195.213.7.6 F. /ip firewall nat add chain=dstnat protocol=udp dst-port=53 action=redirect toports=53 G. /ip firewall nat add chain=srcnat protocol=tcp port=53 action=redirect toports=53 25. Possible actions of ip firewall filter are: A. tarp B. log C. add-to-list D. accept E. tarpit F. bounce