FEBRUARI 2018 1.Which type of encryption could be used to establish a connection with a simple passkey using a 802.1x Authentication server ? A. WPA PSK/WPA2 PSK B. WPA EAP/WPA2 EAP Reference:
https://security.stackexchange.com/questions/68351/what-are-the-difference-between-wpa2-psk-and-wpa2-eap-psk
2. Which of the protocols below is used by Netinstall ? A. DHCP B. rarp C. bootp D. arp Reference:
https://wiki.mikrotik.com/wiki/Manual:Netinstall
3. Select statements that are true regarding the following command: /ip route add dst-address=172.16.4.0/24 dst-address=172.16.4.0/24 gateway=192.168.4.2 (multi choice) A. The default administrative distance of 100 is used B. The subnet mask for the destination network is 255.255.255.0 C. The command is used to establish a static r oute D. The command is used to configure the default route Reference:
https://wiki.mikrotik.com/wiki/Manual:Route_Selection_Algorithm_in_RouterOS Pilihan A tidakbenar, administrative distacenceutk static route adalah 1, sedangkan 100 tidakada, ygada 110 yaitu OSPF Pilihan D tidakmendefinisikansebuah tidakmendefinisikansebuahkonfigurasi konfigurasi
4. When frequency mode is set to ‘ regulatory domain’ in wireless interface configuration: (multi choice) A. It ignores power restrictions, rest rictions, but obeys frequency limitations for the value of country selected B. It ignores all restrictions C. Allows any transmit power to be se t with any frequency D. It restricts operation to only the permitted channels and transmit powers according to the value of country. Reference:
http://nurhidayatid.blogspot.co.id/2014/11/lab-18-regulasi-frekuensi.html
5. What is necessary for PPPoE client configuration ? A. ip firewall nat masquerade rule B. Interface (on which PPPoE client is going to work) C. Static IP address on PPPoE client interface Reference:
https://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE#PPPoE_Client
6. The ‘connect-list’ of wireless Interfaces is used (multi choice)
A. for configuring SSID on the interface B. for specifying APs to connect to C. for preventing communications between the clients References:
Testing from RouterBoard Pilihan C tidakmasukkategori, pilihan C adalahsettingan “Default Forward”ygmestidiuncentangpada mode AP Bridge Untukmencegahkomunikasiantar client 7. Mark all correct statements about command’export file={name of the script file}’: (multi choice)
A. Export files can not be edited B. Log entries from /log print can be exported C. Full configuration of the router (without RouterOS user passwords) can be exported D. Only part of the configuration (for example /ip firewall) can be exported References:
Testing from RouterBoard
8. Mark all the features that can be used for limiting client registration to your access point: (multi choice) A. access-list B. wpa C. WDS D. registration-table References:
Testing from RouterBoard
9. You wish to secure your RouterOS system. You do not want RouterOS to be discorvable using MNDP or CDP. Y ou also want to deny management via the MAC addresses on all interfaces. Select the correct action to accomplish this. (multi choice) A. Remove/Disable all interfaces under mac-server te lnet B. Remove/Disable all discovery interfaces C. Place a proper forward firewall rule to block mac discovery D. Place a proper input firewall rule t o block mac discovery E. Remove/Disable all interfaces under mac-Server winbox F. Add a deny All input firewall rule References:
http://www.mikrotik.co.id/artikel_lihat.php?id=263 https://forum.mikrotik.com/viewtopic.php?t=51565
10. What is the meaning of the status letter “R” o n a PPPoE client interface in RouterOS Interfaces menu ? A. Remote B. Running C. Reconeccting D. Radius Reference:
https://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE#Example
11. Mark correct answer for action=dstnat in chain=dst-nat (soalnyabintanghalaman 4) A. Add destination address to address-list B. NAT source address C. Change destination address and port D. Change source address and port Reference:
Testing from RouterBoard Pada firewall NAT dengan chain=dstnatdanmemilih action=dst-natbertujuanuntukmerubahtujuan address dan port, Umumnyadigunakanuntuk Port Forwarding. Dapat pula digunakanuntuk Transparent DNS meredirectsemua traffic DNS menjadi DNS Sehatdijelaskanpadabuku MTCNA ID-Networkers
12. Your Company has been assigned a 172.16.25.0/25 network from your ISP. What are the possible options to devide the network into subnets ? (Soalnyabintanghal 5 multi choice) A. two times /26 B. one /23 and one /27 C. four times /27 D. two time /24 Menggunakan program computer desktop ipcalc.net First 172.16.25.1 Last 172.16.25.126 Broadcast 172.16.25 127 Total Host 126 A. Benarkarena /26 = total hostadalah 62, 126/62=2 sisanyaadalah broadcast &networknya B. Salah karena /23 total host adalah 510 C. Benarkarena /27 total host adalah 30, 126/30=4 sisanyaadalah broadcast &networknya D. Salah karena /24 total hostnyaadalah 254
13. Mark all correct answers about wireless:(soalnyabintanghal 5 multi choice) A. Forwarding between client can be enable by using access-list B. /ip firewall filter allows to deny authentication to t he AP C. Wireless access-list on the access point (AP) can be used to allow or deny client connection to your AP D. The only way to prevent wireless client connections is to disable wireless interfaces Reference:350693096-SOAL-MTCNA-TERBARU.pdf
Penjelasan :wirelesss access-list dapatmenentukanmana yang bolehterhubungkeap, c aranyadengan mendisable default authentication Selainnyasalahkarenatidaksesuai
14. It is required to make a web server residing on a private subnet in a LAN visible on the public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met (select all that apply): (soalnyabintanghal 7 multi choice) A. A route between the NAT router and the web server must exist B. LAN address of the web server should be routable on the internet C. In IP firewall NAT there should be a dst-nat between the public address of the router and the private IP of the web server D. Public IP address of the web server must be installed on the NAT Router E. Connection tracking must be enable on the NAT router Reference:
http://ariramadhan97.blogspot.co.id/2017/10/pembahasan-soal-na.html
15. Evaluate the following information: Access Point configuration: --wlan1 is in ‘AP -Bridge’ mode --Bridge1 has wlan1 and ether1 as port CPE configuration: --wlan1 is in ‘Station-Bridge mode --Bridge1 has wlan1 and ether1 as por ts Select protocols that will pass form ether1 on the CPE to ether1 on the Access Point. A. Fireware B. DHCP C. BGP D. USB E. IPv4 F.PPPoE G. IPv6 H. ARP Refererence:
G. IPv6 choicenyaambigukrgtdk di perlihatkanipaddressnya
16. Which of the following is used in standard 802.11 wireless networks ? A. CSMA/CD B. CDMA C. FDD D. CSMA/CA Reference:
https://en.wikipedia.org/wiki/Carrier-sense_multiple_access_with_collision_avoidance yanglainnyabukanstandar 802.11
17. What does the firewall action “Redirect” do ? Select all true statements.
A. Redirects a packet to a specified port on the router B. Redirects a packet to a specified IP C. Redirects a packet to the router D. Redirects a packet to a specified port on a host in the network Reference:Ari RamadhanPembahasanSoal NA Jawaban : B, D Penjelasan : router akanmengarahkanjalurpaketkeip, port, dan host di network yang telahditentukan
18. Assumsing a functional wireless interface is present and working, is it possible to create a wireless access point with a RouterOS level 5 licence ? A. No, only with level 4 license B. No, only with level 3 lecense C. No, only with level 6 lecense D. Yes
19. What kind of packet is marked by connection-state=established matcher? A. Packet does not correspond to any known connection B. Packet belongs to an existing connection, for example a reply packet or a packet which belongs to already replied connection C. Packet begins a new TCP connection D. Packet is related to, but not part of an existing connection Reference: https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
20. Which firewall chain you should use to filter SSH access to the router itself ? A. Output B. Forward C. Prerouting D. Input
21. A wireless interface ‘wlan1’ is added to a bridge interface ‘br-lan’. To enable dhcp-server for wireless ‘wlan1’, on which interface should dhcp-server be configured ? A. The dhcp-server cannot be enabled neither on ‘wlan1’, non on ‘br -lan’ B. On both ‘br -lan’ and ‘wlan1’ C. On ‘br-lan’ D. On ‘wlan1’
22. Is action=masquerade allowed in chain=dstnat ? A. Yes, but it works only for incoming connections B. no C. yes D. yes, but only if dst-addr is specified Reference:https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT Masquerade Firewall NAT action=masquerade is unique subversion of action=srcnat, it was designed for specific use in situations when public IP can randomly change Ketika di coba di routeros chain dstnattidakdapatmenjalankan action masquerade. Opsi D jugasalah, ketikadicobamembuatdst-ddrnyajgttptdkdapatdicreate.
23. Firewall configuration is the following: 1) /ip firewall filter add chain=input protocol=icmp action=jump jump-target=ICMP 2) /ip firewall filter add chain=input protocol=icmp action=log log-prefix=ICMP-DENY 3) /ip firewall filter add chain=input protocol=icmp action=drop 4) /ip firewall filter add chain=ICMP protocol=icmp action-jump log=yes log-prefix=JUMP-ICMP-DENY Client sends “ping” to router, What will the router do ? A. Router will log it with prefix; JUMP-ICMP-DENY B. Router will drop the packet at ICMP (jump)chain drop rule (4th rule) C. Router will drop the packet at the input drop rule (3rd rule) D. Router will log it with prefix: ICMP-DENY
24. A client that has successfully connected to a wireless network is considered to be which of the following ? Choose all that apply: (multichoice) A. Unassociated B. Authenticated C. Unauthenticated D. Associated 25. RouterOS log messages are stored on disk by default FALSE Reference:bisa di ceklangsung System>Logging by default di letakkanpada Memory 26. To set up masquerading of the network 192.168.0.0/24, configured on the interface et her1, you should add rule A. /ip firewall nat add chain=srcnatsrc-address=192.168.1.0/24 action=masquerade B. /ip firewall nat add chain=srcnat in-interface=ether1 src-address=192.168.1.0/24 action=masquerade C. /ip firewall nat add chain=srcnat out-interface=ether1 src-address=192.168.1.0/24 action=masquerade D. /ip firewall nat add chain=dstnat out-interface=ether1 src-address=192.168.1.0/24 action=masquerade Reference:Cekajasendiri :p
27. In winbox when clicking the ‘Backup’ button in the Files window, the following happens (select all that apply): (multichoice) A. Optionally backup name and password can be specified B. Backup files is saved to the computer desktop C. Backup file is created. Name c ontains the router identity, the date and time of its creation D. Backup file will contain username and password
