MTCNA set 1

What is marked by connection-state=established matcher?. Packet belongs to an existing connection, for example a reply packet or a packet which belongs to already replied connection. Packet is related to, but not part of an existing connection. Packet does not correspond to any known connection. Packet begins a new TCP connection.

What is necessary for PPPoE client configuration?. ip firewall nat masquerade rule. Static IP address on PPPoE client interface. Interface (on which PPPoE client is going to work).

Which configuration menu should you use to change router's Winbox default port?. /ip firewall service-ports. /ip firewall filter. /system resource. /ip service.

Consider the following diagram. Assuming that all the necessary configuration has already been done on R2 (proxy-arp is disabled), to communicate from a device on LAN1 to a device on LAN2, which of the following configurations on R1 would enable this?. /ip route add dst-address=0.0.0.0/0 gateway=192.168.99.2. /ip route add dst-address=192.168.0.0/24 gateway=192.168.0.1. /ip route add dst-address=0.0.0.0/0 gateway=Ether1. /ip route add dst-address=192.168.1.0/24 src-address=192.168.0.0/24 gateway=192.168.99.2. /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2.

You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address. kind=pcq pcq-rate=5000000 pcq-classifier=src-address. kind=pcq pcq-rate=256000 pcq-classifier=src-address. kind=pcq pcq-rate=256000 pcq-classifier=dst-address.

When viewing the routes in Winbox, some routes will show "DAC" in the first column. These flags mean: Dynamic, Active, Console. Dynamic, Active, Connected. Direct, Available, Connected. Dynamic, Available, Created.

Router has Wireless and Ethernet client interfaces, all client interfaces are bridged. To create a DHCP service for all clients you must configure DHCP server on. only on bridge interface. every bridge port. DHCP service is not possible in this setup. Ethernet and wireless interfaces.

Which facility should be used, to ensure that clients with radio signal strength poorer than -90 dBm can't connect to interface wlan1 on Mikrotik Access Point?. Access List. Connection List. Registered List. Hotspot User Profile.

Why is it useful to set a Radio Name on the radio interface?. To identify a station in a list of connected clients. To identify a station in the Access List:. To identify a station in Neighbor discovery.

Select how many different priority values are available for queues in mikrotik routerOS?. 8. 16. 1. 0.

Which port does PPTP use by default?. UDP 1723. TCP 1723. UDP 1721. TCP 1721.

What is the meaning of the status letter "R" on a PPPoE client interface in RouterOS Interfaces menu?. Remote. Radius. Running. Reconnecting.

What is the minimal required wireless configuration needed to be set (after interface configuration is reset). frequency. band. DFS mode. Radio name. scab-list. SSID. mode.

Which of the following is true for connection tracking. Connection tracking must be enabled to be able to use all firewall features. Disable connection tracking for mangle to work. Connection tracking must be enabled for NAT'ed network. Enabling connection tracking reduces CPU usage in RouterOS.

Action=redirect allows you to make. Forward DNS to another device IP address. Transparent DNS Cache. Transparent HTTP Proxy. Enable Local Service.

What does the firewall action "Redirect" do? Select all true statements. Redirects a packet to a specified port on the router. Redirects a packet to the router. Redirects a packet to a specified port on a host in the network. Redirects a packet to a specified IP.

/ip firewall nat add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to- address=192.168.1.2 to-ports=81 The command shown above: Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192.168.1.2. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.168.1.2. Adds IP address 192.168.1.2 to the interface ether1.

How long is level 1 (free) license valid?. 1 month. Infinite time. 24 hours. 1 year.

Our company has been assigned a 172.16.25.0/25 network from your ISP. What are the possible options to divide the network into subnets?. two times /24. one /23 and one /27. two times /26. four times /27.

What can be monitored by Torch tool?. Dst. Address. VLAN ID. Src. Address. Dst. Port. Protocol. None of the mentioned.

What does this simple queue do (check the image)?. Queue limits host 192.168.1.10 upload data rate to one megabit per second. Queue guarantees upload data rate of one megabit per second for host 192.168.1.10. Queue guarantees download data rate of one megabit per second for host 192.168.1.10. Queue limits host 192.168.1.10 download data rate to one megabit per second.

Which of the following Routes statuses are possible?. A = Active. S = Static. D = Drop. C = Connected.

Netinstall can be used to. Reinstall software without losing licence. Install package for different hardware architecture. Install different software version (upgrade or downgrade). Keep configuration, but reset a lost admin password.

What is the default protocol/port of (secure) winbox?. UDP/5678. TCP/8291. TCP/22. TCP/8080.

Which of the following would prevent unknown clients from connecting to your AP? Choose the BEST answer. Configure the radius server under '/radius'. Uncheck 'Default Authenticate' in the wireless card configuration, and add each known client's MAC address to your connect-list configuration. Uncheck 'Default Authenticate' in the wireless card configuration, and add each known client's MAC address to your access- list configuration ensuring that you enable 'authenticate' in the entry. Check the 'Do not permit unknown client' box in the wireless configuration. Add each known client's MAC address to your access-list configuration is the only step needed.