MikroTik Certification Exam Sample Questions ​Page ​1

MTCRE
Static Routing

1. There are two routes in the routing table:

• 0 dst-addr=10.1.1.0/24 distance=10 gateway=10.10.10.10
• dst-addr=10.1.1.4/30 distance=20 gateway=10.20.20.20 Which gateway will
be used to send packet with destination IP address 10.1.1.6?
A. 10.20.20.20 B. both C. 10.10.10.10
D. None, because distance is >=10

2. Which static-route rule will have priority for destination 192.168.0.18?

A. dst-address=192.168.0.0/26 gateway=192.168.1.1 distance=3
B. dst-address=192.168.0.0/28 gateway=192.168.3.1 distance=1
C. dst-address=192.168.0.0/26 gateway=192.168.2.1 distance=2
D. dst-address=192.168.0.0/28 gateway=192.168.4.1 distance=5
E. dst-address=192.168.0.0/24 gateway=192.168.3.1 distance=1

3. MikroTik router needs to forward IP-packet targeted to 11.12.4.5. Router routing table has 3 routes,
• 1. dst-address=11.12.4.0/24, distance=10, gateway=1.1.1.1
• 2. dst-address=11.12.4.0/28, distance=20, gateway=1.1.1.2.
• 3. dst-address=0.0.0.0/0, distance=1,
gateway=1.1.1.254. Which of the gateways will router select?
A. 2 B. 3 C. Nowhere. D. Host will get "destination
host unreachable". E. 1

4. There are two routes in the routing table:

• 0 dst-addr=10.1.1.0/24 gateway=5.5.5.5
• 1 dst-addr=10.1.1.4/30 gateway=5.6.6.6 Which gateway will
be used to get to the IP address 10.1.1.6?
A. both - half of the traffic will be routed through one gateway, half through the other B.
5.6.6.6 C. 5.5.5.5 D. the required route is not in the routing table

5. Consider the following output from the command "/ip address print":
Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK
BROADCAST INTERFACE 0 10.10.10.1/32 10.10.10.2 0.0.0.0 pppoe-1 1
10.10.10.1/32 10.10.10.3 0.0.0.0 pppoe-2 This configuration is invalid because of
the duplicate IP's. (TRUE/FALSE)

6. Select the correct statements about routing marks:

A. each packet can have more than one routing mark B. can be assigned by IP firewall mangle chains input and
output C. a packet with a routing mark is ignored by main routing table if there is at least one route for the routing
 mark D. check-gateway option is not compatible with routing-mark

7. /ip route can have DS flags simultaneously. (TRUE/FALSE)

8. If route type is 'blackhole', then packets to the destination network are going to be A.
dropped on this router and ICMP message will be sent back to the source B. sent back
to the source

​ or Internal Classroom Use Only!

PROPERTY OF NetkromAcademy 2014 – F
MikroTik Certification Exam Sample Questions ​Page ​2

C. sent back to the previous router D.

dropped on this router

9. Define a routing loop (choose the most precise description)

A. situation where the TTL of the packet expires B. Situation where the packet does not reach it\'s
destination C. situation where the packet is routed through the same sequence of routers until the
TTL expires D. situation where the packet is routed through the same router twice

10. Which routing table is used to apply recursive routing at MikroTik RouterOS
A. It is possible in all the routing tables installed in a router B.
It is not possible C. It is only possible on the x86 platform D. It
is only possible in the main routing table

11. The default value of 'target-scope' for a static route is:

A. 255 B.
10 C. 30 D.
1

12. When using the "check gateway" function in creating a route, the following protocols can be utilized to ensure the gateway
address is reachable (choose all correct answers):
A. UDP B.
MNDP C. ARP
D. ICMP

13. To assign specific traffic to a route – traffic must be identified by a routing mark. Each packet can only have one routing
mark.
(TRUE/FALSE)

14. Which route will be used to reach host 192.168.1.55?

/ip route add disabled=no distance=1 dst-address=192.168.1.0/24
gateway=1.1.1.1 add disabled=no distance=1
dst-address=192.168.1.0/25 gateway=2.2.2.2 add disabled=no
distance=1 dst-address=192.168.0.0/16 gateway=3.3.3.3
A. Route via gateway 3.3.3.3 B.
Route via gateway 2.2.2.2 C.
Route via gateway 1.1.1.1
15. Router has two gateways to reach a certain network both with check gateway activated. Choose the option you can use to
control
active and backup gateway. A.
Routing mark B. Interface C.
Scope D. Distance

16. ECMP provides:

A. per src address load balancing to multiple gateways B. per
src/dst address pair load balancing to multiple gateways C. per
connection load balancing to multiple gateways D. per packet
load balancing to multiple gateways

17. When adding a static route, you must always ensure that you add both the gateway and the interface.
(TRUE/FALSE)

18. If we change TTL to 2 in mangle chain prerouting

A. packet will not be forwarded B. packet will always
reach its destination C. packet will be forwarded only to
next L3 device D. packet will be forwarded to the next 2
L3 devices

PROPERTY OF NetkromAcademy 2014 – ​For Internal Classroom Use Only!

MikroTik Certification Exam Sample Questions ​Page ​3

19. If 'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable, then
A. the ECMP route becomes inactive B. ECMP is going to send packets to all
gateways even if one is unreachable C. the unreachable gateway is not going
be used in Round Robin algorithm

20. It is possible to change the Time To Live in Firewall Mangle.

(TRUE/FALSE)

21. When sending out an ARP request, an IP host is expecting what kind of address for an
answer?
A. VLAN ID B.
802.11g C. IP
address D. MAC
Address

22. Consider the following diagram. We want to communicate from a device on LAN1 to a device on LAN2. Assuming that
all
necessary configurations are already included on R2, which of the following configurations in R1 would enable this
communication?
 A. /ip route add dst-address=0.0.0.0/0 gateway=Ether1 B. /ip route add
dst-address=192.168.1.0/24 gateway=192.168.99.2 C. /ip route add
dst-address=192.168.0.0/24 gateway=192.168.0.1 D. /ip route add dst-address=192.168.1.0/24
src-address=192.168.0.0/24 gateway=192.168.99.2 E. /ip route add dst-address=0.0.0.0/0
gateway=192.168.99.2

23. Mangle Routing (routing-mark) is possible, by using chains:

A. input and output B. forward
and postrouting C. prerouting
and output D. forward and
output E. prerouting and
forward

24. There are four routes in the routing table. Host 10.10.10.10 becomes
unreachable.
• 1 dst-addr=0.0.0.0/0 gateway=11.11.11.11
• 2 dst-addr=20.20.20.0/24 gateway=10.10.10.10 check-gateway=ping
• 3 dst-addr=30.30.30.0/24 gateway=10.10.10.10
• 4 dst-addr=30.30.30.0/25 gateway=13.13.13.13 check-gateway=ping

Which gateway is used to get to the IP address 30.30.30.145?

A. 10.10.10.10 B. 13.13.13.13 C. 11.11.11.11 D. None. Packets to that host will be

dropped until host 10.10.10.10 becomes active again.

25. /ip route configuration on router,

• /ip route add gateway=192.168.0.1
• /ip route add dst-address=192.168.1.0/24 gateway=192.168.0.2
• /ip route add dst-address=192.168.2.0/24 gateway=192.168.0.3
• /ip route add dst-address=192.168.3.0/26 gateway=192.168.0.4 Router
needs to send packets to 192.168.3.240. Which gateway will be used?
A. 192.168.0.1 B.
192.168.0.2 C.
192.168.0.4 D.
192.168.0.3

26. A MikroTik Router has the following configuration

• /ip address add address=1.1.1.2/30
interface=ether1 add address=2.2.2.2/30
interface=ether2 add address=192.168.10.1/24
interface=ether3
• /ip firewall mangle add action=mark-connection chain=prerouting ​PROPERTY OF
NetkromAcademy 2014 – ​For Internal Classroom Use Only!
MikroTik Certification Exam Sample Questions ​Page ​4
 dst-port=80 new-connection-mark=web_c passthrough=yes protocol=tcp
add action=mark-routing chain=prerouting connection-mark=web_c
new-routing-mark=web passthrough=no
• /ip firewall nat add action=masquerade
chain=srcnat out-interface=ether3
• /ip route add gateway=1.1.1.1 add gateway=2.2.2.2 routing-mark=web What can be said about the Web Access (port 80) by
a customer connected at ether3 interface with IP 192.168.10.2/24, gateway 192.168.10.1?
A. The customer will access the Web using the gateway 2.2.2.2 B. The Customer will
access the Web by ECMP, by using both gateways 1.1.1.1 and 2.2.2.2 C. The Customer is
unable to access the Web. D. The customer will access the Web using the gateway
1.1.1.1

27. When creating a route, it is possible to specify the gateway to a network even if the gateway is not directly connected by using
recursive next-hop resolving from an existing route.
(TRUE/FALSE)

28. Routing table has several routes with the same gateway. If 'check-gateway' is enabled for one of the routes, and the
gateway
becomes unreachable, then
A. only this one route would become inactive B. all routes with the same gateway would become inactive C.
the 'check-gateway' feature would not work at all, since the same gateway is used for more than one route

29. routing table has following entries:

• 0 dst-address=10.0.0.0/24 gateway=10.1.5.126
• 1 dst-address=10.1.5.0/24 gateway=10.1.1.1
• 2 dst-address=10.1.0.0/24 gateway=25.1.1.1
• 3 dst-address=10.1.5.0/25 gateway=10.1.1.2 Which gateway will be used
for a packet with destination address 10.1.5.126?
A. 10.1.1.2 B.
25.1.1.1 C.
10.1.5.126 D.
10.1.1.1

OSPF

1. Only OSPF routes distributed as "external" can be filtered with routing filters (TRUE/FALSE)

2. OSPF starts working on the router as soon as

A. at least one area is specified in the ospf area menu B. at least
one IP network is assigned in the ospf network menu C. at least
one interface is defined in the ospf interface menu D. the routing
package is enabled on the router

3. A MikroTik system administrator implemented OSPF Routing protocol in the network. But realized that he has a static route on the
routers. What can be done to make the static route work as a failover whenever the dynamic routing protocol
 fails?
A. He should use "netwatch" to trigger static routes whenever OSPF fails B. He should
manually disable the static routes and enable them whenever OSPF fails C. He should
increase the administrative distance of the static route D. Delete all static routes
because there is no way for it to work with OSPF

4. An OSPF area consists of 15 routers connected in 6 different broadcast networks. How many Designated routers there will be in
the

area? ​A. 6 B.
​
1 C. 0 D. 15

5. Which is the correct way to set a comment in a OSPF dynamic route: ​PROPERTY
OF NetkromAcademy 2014 – ​For Internal Classroom Use Only!
​ age ​5
MikroTik Certification Exam Sample Questions P

A. It can be configured by setting up Routing filters B. A

comment cannot be configured in a dynamic route C. It can
be configured manually in the Routing Table

6. What is the minimum configuration a network administrator needs to do on a MikroTik router to enable OSPF?
A. Nothing; OSPF instance can run with no configuration B. Both
interface and network must be added to OSPF configuration C. Add an
interface to OSPF interface configuration

7. In OSPF settings, the NBMA Neighbor setting can be used to improve the stability of OSPF across wireless links.
(TRUE/FALSE)

8. It is possible to have OSPF and BGP configured on the same router? (YES/NO)

9. In this ospf network (see diagram), we want to re-distribute routes from R5 to the R3 router. Where do I have to create a virtual
link? ​A. There is no need for a virtual-link B.
​ Between R1 and R4 C. Between R5 and R3 D. Between R4 and R2

10. Which of the following conditions have to be fulfilled for two routers on one ethernet segment to become ospf neighbors?
A. Network-type must be the same B. Hello
and dead timers must be the same C. MTU
must be the same D. Cost must be the same

11. You have a router with the following IP addresses:

• ether1: 10.40.1.1/24
• ether2: 10.250.1.1/30
• ether3: 10.251.1.1/30
• wlan1: 10.50.1.1/30
• wlan2: 10.50.2.1/30 You have a customer directly connected to ether2, and another customer directly connected
to ether3. Your wireless radios are used for wireless connectivity to two different towers, and ether1 goes to another wireless
access point for other subscribers. You need all of the subnets distributed across your OSPF Network. You need to configure
OSPF to talk on this router, what would be the best configuration.
 A. Set OSPF Networks to 10.40.1.0/24, 10.250.1.0/30, 10.251.1.0/24, 10.50.1.0/30, and
10.50.2.0/30 B. set distribute-default=always-type-1 C. Set OSPF networks to 0.0.0.0/0 D. Set
OSPF Networks to 10.40.1.0/24, 10.250.1.0/30, 10.251.1.0/30, 10.50.1.0/30, and 10.50.2.0/30
E. Set OPSF networks to 10.0.0.0/8 only F. Set OSPF networks, to 10.50.1.0/30, 10.50.2.0/30
G. Set Distribute-Connected=yes H. Set Ethernet 2 and 3 to passive mode

​ or Internal Classroom Use Only!

PROPERTY OF NetkromAcademy 2014 – F
​ age ​6
MikroTik Certification Exam Sample Questions P

I. set distribute-state=yes J. Set Ethernet 1, 2,

and 3 to passive mode

12. New area OSPF \"area1\" has been created. What could be used as a valid area
id?
A. 1.2.3.4 B.
0.0.0.1 C.
0.0.0.0

13. True or False: BGP can be used for internal routing, using an internal AS number.
(TRUE/FALSE)

14. Which type of ip route is the highest priority for routing decision ?
A. OSPF Route B. BGP
Route C. Static Route D.
Connected Route

15. In OSPF interface configuration what effect will a “passive=yes” option have on a specific interface
?
A. It will prevent routes learned through the interface from being listed in the routing table. B.
It will action a mirroring of all routing upgrades to that interface C. It will prevent all OSPF
traffic through that interface D. It will prevent all traffic through that interface

VLAN

1. VLAN is an implementation of the 802.1Q VLAN protocol by the MikroTik RouterOS. It allows you to have multiple Virtual LANs on
a single ethernet or wireless interface, giving the ability to segregate LANs efficiently. How many different vlans are possible on
a single ethernet port?
A. 4096 B. Only
one C. 63 D.
4095

2. A network administrator has 2 vlans

/interface vlan add name=vlan1 vlan-id=101
interface=ether1 add name=vlan2 vlan-id=102
interface=vlan1 Any packet sent over "vlan2" interface ...
A. will have one vlan tag added to ethernet header - "101" B. will have one vlan tag
added to ethernet header - "102" C. Wrong configuration because it is not possible
 to have a vlan over another vlan D. will have two vlan tags added to ethernet header
- "101" and "102" E. will not go through at all because vlan1 will drop it

3. It is possible to create a configuration where VLAN and PPTP interfaces are bridged together.
(TRUE/FALSE)

4. How many VLAN headers do IEEE 802.1Q permit?

A. A. 1 B. more than
2 C. unlimited D. 2

Tunneling

1. Router A and B are both running as PPPoE servers on different broadcast domains of your network. Is it possible to set Router A
to
use "/ppp secret" accounts from Router B to authenticate PPPoE customers?
(YES/NO)

2. To route two private networks together over a public routed network (there are multiple hops between the gateway routers of the
private networks), you can use the following tunnel types (mark all that are correct):
A. PPTP B.
PPPOE

​ or Internal Classroom Use Only!

PROPERTY OF NetkromAcademy 2014 – F
​ age ​7
MikroTik Certification Exam Sample Questions P

C. L2TP D.
IPIP E. EOIP

3. Which ones of these are Point-to-Point addresses?

A. address=10.0.0.1/24 network=10.0.0.0 B.
address=1.1.1.1/32 network=10.0.0.0 C.
address=10.0.0.1/32 network=10.0.0.0 D.
address=10.0.0.1/32 network=10.0.0.254

4. The correct order for PPPOE discovery stage is

A. Request, Offer, Initialization and Session confirmation B.
Request, Initialization, Session confirmation and Offer C.
Initialization, Session confirmation, Request and Offer D.
Initialization, Offer, Request and Session confirmation

5. When you set up a L2TP server in MikroTik RouterOS, is it mandatory to configure an IPSec policy?
(YES/NO)

6. When adding a user to your local ppp secrets/ppp profiles database, it is possible to
A. Allow/deny use of more than one login by this user B. Allow login by
pppoe and pptp, but deny login by l2tp C. Deny services (like telnet) only
for this user or for one group of users D. Set max values for total
 transferred bytes (up- and download) E. Allow only pppoe login

7. A MikoTik PPPoE Server can be used only within a broadcast domain, that is, users can not run PPPoE protocol with a server
if
there is a router between the customer and that PPPoE server.
(TRUE/FALSE)

8. To securely bridge together 2 remote networks you can use

A. PPTP BCP B. EoIP
over PPTP C. PPPoE
over EoIP D. PPTP
over EoIP

9. Settings in /ppp secret user database override corresponding /ppp profile settings. (TRUE/FALSE)

​ or Internal Classroom Use Only!

PROPERTY OF NetkromAcademy 2014 – F