MikroTik MTCNA Exam Prep Guide: Prep guide for the MTCNA Exam
2025 New Preparation Guide of MikroTik MTCNA Exam
MikroTik MTCNA certification exam is an entry-level certification exam that is ideal for network administrators, IT professionals, and individuals who are interested in pursuing a career in computer networking. MikroTik Certified Network Associate Exam certification exam provides candidates with the knowledge and skills required to configure and manage MikroTik routers and wireless devices. Additionally, the certification exam covers various networking concepts such as network addressing, routing, and switching, making it a comprehensive certification program. Upon passing the certification exam, candidates will receive the MikroTik MTCNA certification, which is a valuable credential that can help them advance their career in the field of computer networking.
NEW QUESTION # 86
Which firewall chain would be used to block a client's MSN traffic on a router?
- A. static
- B. output
- C. forward
- D. input
Answer: C
Explanation:
To block a client's application traffic (like MSN Messenger) that is passing through the router (from LAN to WAN or vice versa), the forward chain must be used. This chain processes packets that are routed through the router.
Evaluation:
* A. static ##Not a valid firewall chain.
* B.#forward # Correct - used to filter traffic that passes through the router.
* C.#output # Filters traffic originating from the router itself.
* D.#input # Filters traffic destined for the router itself.
MTCNA Firewall Section - Chain Descriptions:
"forward - Used for filtering transit traffic (client to internet or internet to client)." Rene Meneses Guide - Firewall Chains:
"To block client application traffic, use the forward chain. Input/output are for local router access." Terry Combs Notes - Chain Matching:
"forward = traffic passing through router, like client web or chat traffic."
NEW QUESTION # 87
Which of the following services use TCP?
DHCP
SMTP
HTTP
TFTP
FTP
- A. 1 and 2
- B. 2, 3 and 5
- C. 1, 3 and 4
- D. 1, 2 and 4
Answer: B
NEW QUESTION # 88
What letters appear next to a route, which is automatically created by RouterOS when user adds a valid address to an active interface?
- A. D
- B. I
- C. S
- D. A
- E. C
Answer: A,D,E
NEW QUESTION # 89
You would like to allow multiple logins with one user name on a HotSpot server. How should this be configured?
- A. Set "Shared Users" option at /ip HotSpot
- B. It's not possible
- C. Set "Shared Users" option at /ip HotSpot user profile
- D. Set "only-one=no" at /ip HotSpot
Answer: C
Explanation:
MikroTik HotSpot user management allows defining how many simultaneous sessions a single username can support. This is done via the "Shared Users" option in the user profile configuration, not in the general HotSpot or interface settings.
MTCNA Course Material - HotSpot Section:
"Shared Users in user-profile allows multiple concurrent logins using the same username/password combination. Default is 1. If set to 3, then three sessions can be active simultaneously." Rene Meneses MTCNA Study Guide - HotSpot Configuration:
"The shared-users parameter in /ip hotspot user profile allows multiple concurrent sessions for the same user.
This is commonly used in shared environments like hotels or cafes."
Terry Combs MTCNA Notes - HotSpot Profiles:
"Shared-users is set per profile, not per user. If you want three devices to log in with the same account, set shared-users=3 in the profile assigned to that user." Option A is correct.
Option B is false - it is definitely possible.
Option C is incorrect - /ip hotspot does not contain this parameter.
Option D is invalid - "only-one" is not a known parameter in HotSpot configuration.
NEW QUESTION # 90
What command is used to create a backup configuration?
- A. copy running-config startup-config
- B. config mem
- C. copy running backup
- D. wr mem
Answer: A
NEW QUESTION # 91
Which class of IP address provides a maximum of only 254 host addresses per network ID?
- A. Class D
- B. Class A
- C. Class C
- D. Class B
Answer: C
NEW QUESTION # 92
Which of the following is the valid host range for the subnet on which the IP address 192.168.168.188
255.255.255.192 resides?
- A. 192.168.168.128-192
- B. 192.168.168.128-190
- C. 192.168.168.129-190
- D. 192.168.168.129-191
Answer: D
Explanation:
IP address: 192.168.168.188
Subnet mask: 255.255.255.192 # /26 # Block size = 64
Subnets:
* 192.168.168.0/26 # 192.168.168.0 - 63
* 192.168.168.64/26 # 192.168.168.64 - 127
* 192.168.168.128/26 # 192.168.168.128 - 191 # Contains 192.168.168.188
* 192.168.168.192/26 # 192.168.168.192 - 255
Valid host range = 192.168.168.129 - 190
(Broadcast = 191, Network address = 128)
MTCNA Course Material - Subnetting Practice:
"To find valid hosts, exclude the subnet and broadcast address. In /26, each block is 64 addresses." Rene Meneses MTCNA Study Guide - IP Addressing:
"For /26 subnetting, calculate block size as 2^(32-26) = 64. Subnet starts at multiples of 64."
NEW QUESTION # 93
Mark all packages required for PPPoE server on MikroTik RouterOS
- A. radius
- B. synchronous
- C. system
- D. ppp
- E. user-manager
Answer: D
NEW QUESTION # 94
What is the address range of a Class B network address in binary?
- A. 10xxxxxx
- B. 110xxxxx
- C. 01xxxxxx
- D. 0xxxxxxx
Answer: B
NEW QUESTION # 95
Which of the following protocols / port s are used for SNMP. (Simple Network Managemnt Protocol)
- A. UDP 161
- B. UDP 162
- C. TCP 161
- D. TCP 123
- E. TCP 162
- F. TCP 25
Answer: A,B
NEW QUESTION # 96
What is the meaning of letter "R" on an active session in the menu PPP Active Connections?
- A. Remote
- B. Running
- C. Radius
Answer: B
Explanation:
In the PPP > Active Connections window in RouterOS, the letter "R" in the "Flags" column indicates the session is Running. This means the session is active and fully negotiated.
* A.#Radius - Not what "R" stands for in this context
* B.#Running - The connection is established and currently operating
* C.#Remote - Not relevant in this context
Extract from MTCNA Course Material - PPP Interface Flags:
"R indicates a Running state. The session is successfully established and data can be transmitted." Extract from MikroTik Wiki - PPP Flags Reference:
"R = Running. The session is active."
NEW QUESTION # 97
There are two routes in the routing table:
0 dst-addr=10.1.1.0/24 gateway=5.5.5.5
1 dst-addr=10.1.1.4/30 gateway=5.6.6.6
Which gateway will be used to get to the IP address 10.1.1.6?
- A. 5.6.6.6
- B. 5.5.5.5
- C. the required route is not in the routing table
- D. both - half of the traffic will be routed through one gateway, half through the other
Answer: A
Explanation:
Routing decisions are made based on the longest prefix match (most specific route).
* 10.1.1.6 falls within:# 10.1.1.0/24 # range: 10.1.1.0 - 10.1.1.255 (prefix length: 24)# 10.1.1.4/30 # range: 10.1.1.4 - 10.1.1.7 (prefix length: 30) Because /30 is more specific than /24, it will be selected for routing the packet.
MTCNA Routing Module - Prefix Length Decision:
"Router chooses the route with the longest subnet mask (most specific match)." Rene Meneses Study Guide - Longest Match Principle:
"10.1.1.6 falls within 10.1.1.4/30 # use gateway 5.6.6.6."
Terry Combs Notes - Routing Table Resolution:
"Always check if multiple routes match. Use the one with the longest prefix."
NEW QUESTION # 98
How long is an IPv6 address?
- A. 128 bits
- B. 128 bytes
- C. 32 bits
- D. 64 bits
Answer: A
NEW QUESTION # 99
Which of the following protocols / ports are used for SNMP (Simple Network Management Protocol)?
- A. UDP 161
- B. UDP 162
- C. TCP 161
- D. TCP 123
- E. TCP 162
- F. TCP 25
Answer: A,B
Explanation:
SNMP uses the following ports:
* UDP 161: Used for SNMP agent queries (GET, SET, etc.)
* UDP 162: Used by SNMP managers to receive trap notifications
MTCNA Course Material - SNMP and Monitoring:
"SNMP uses UDP 161 for polling devices and UDP 162 for traps."
MikroTik Wiki - SNMP:
"SNMP communication uses UDP ports 161 (queries) and 162 (traps). TCP is not used for SNMP by default." Option breakdown:
* A: TCP 162 # incorrect (SNMP traps use UDP)
* B:#UDP 162
* C:#UDP 161
* D: TCP 25 = SMTP
* E: TCP 123 = NTP (incorrect protocol and transport)
* F: TCP 161 = incorrect transport
NEW QUESTION # 100
What is the default protocol/port of (secure) winbox?
- A. UDP/5678
- B. TCP/8291
- C. TCP/8080
- D. TCP/22
Answer: B
Explanation:
Winbox is the graphical configuration utility for MikroTik routers. By default, Winbox connects to RouterOS over TCP port 8291.
* A.#UDP/5678 - Used for Winbox neighbor discovery, not for connecting.
* B.#TCP/22 - SSH service.
* C.#TCP/8291 - Default and official port for Winbox connections.
* D.#TCP/8080 - Often used for HTTP proxy; unrelated to Winbox.
Extract from MTCNA Course Material - RouterOS Access Methods:
"Winbox uses TCP port 8291 to establish connections to RouterOS."
Extract from Rene Meneses MTCNA Study Guide - Access Tools:
"Winbox connects via TCP 8291. Neighbor discovery uses UDP 5678."
Extract from MikroTik Wiki - Winbox Port Info:
"TCP/8291 is the default port for Winbox. Ensure it is not blocked by firewall."
NEW QUESTION # 101
A client that has successfully connected to a wireless network is considered to be which of the following?
Choose all that apply :
- A. Unassociated
- B. Authenticated
- C. Associated
- D. Unauthenticated
Answer: B
NEW QUESTION # 102
Select minimal set of software packages in RouterOS required to configure a wireless AP:
- A. dhcp
- B. routing
- C. system
- D. advanced-tools
- E. Wireless
Answer: E
Explanation:
To configure a wireless access point (AP) in RouterOS, the only required software package is wireless. All other functionalities like DHCP or routing are optional depending on the network setup. The system package is always present and not removable, so it's not listed as a required dependency in package selection.
MTCNA Course Material - Wireless Configuration Basics:
"Wireless functionality is provided by the wireless package. Without it, no wireless interfaces are present or configurable." Rene Meneses MTCNA Guide - Wireless Module:
"Only the wireless package is required to configure an AP. DHCP is used optionally for IP address assignment." MikroTik Wiki - Packages:
"The wireless package is responsible for enabling WLAN interfaces and features such as AP mode, client mode, and security." Other packages:
* advanced-tools: includes tools like bandwidth-test and traffic generator
* dhcp: only needed if the router is issuing IPs
* routing: required for static/dynamic routing but not AP setup
Only Option A is required.
NEW QUESTION # 103
If your router is facilitating a CSU/DSU, which of the following commands do you need to use to provide the router with a 64000bps serial link?
- A. RouterA(config-if)#bandwidth 64000
- B. RouterA(config-if)#clock rate 64
- C. RouterA(config)#bandwidth 64
- D. RouterA(config-if)#clock rate 64000
Answer: D
NEW QUESTION # 104
In which situations Netinstall can not be used to install RouterOS on a RouterBOARD?
- A. The router is connected only to a secondary Ethernet port
- B. The password of the router is not known
- C. The router is connected only to a wireless network
- D. The router does not have an operating system
Answer: C
Explanation:
Netinstall is a MikroTik utility used to reinstall or upgrade RouterOS. It requires a direct Ethernet connection to the router's first Ethernet port and works via PXE (boot over Ethernet). It cannot function over wireless.
Let's review the options:
* A. The router is connected only to a secondary Ethernet port ##Netinstall works if booted over that port
* B. The router does not have an operating system ##This is the purpose of Netinstall
* C. The router is connected only to a wireless network ##Correct: Netinstall requires a wired Ethernet connection
* D. The password of the router is not known ##Netinstall bypasses current OS; password irrelevant MTCNA Course Manual - RouterBOARD Recovery and Netinstall:
"Netinstall must be done over a wired Ethernet connection. Wireless booting is not supported." Rene Meneses Guide - System Recovery:
"Netinstall needs Layer 2 communication via Ethernet. It cannot operate over Wi-Fi." Terry Combs Notes - Netinstall Limitations:
"Netinstall does not support Wi-Fi. Must connect via Ethernet to first interface, preferably."
NEW QUESTION # 105
For user in local PPP Secrets/PPP Profiles database, it is possible to:
- A. Allow/deny use of more than one login by this user
- B. Allow login by PPPoE and PPTP, but deny login by L2TP
- C. Allow only PPPoE login
- D. Deny services (like telnet) only for this user or for one group of users
- E. Set max values for transferred data (Rx/Tx)
Answer: A,B,C
Explanation:
The local PPP database in MikroTik allows control over authentication and access for PPP-based services such as PPTP, L2TP, PPPoE, and SSTP. Several configuration options can be specified per user or profile.
* A.#Correct - You can use the "only-one" setting in PPP profiles to allow/deny multiple logins for the same user.
* B.#Correct - Under the "service" parameter in /ppp secret, you can restrict allowed protocols (e.g., enable PPPoE, PPTP, and disable L2TP).
* C.#Incorrect - Data transfer limits (Rx/Tx) are not enforced directly in PPP profiles or secrets. This is usually handled via queues or hotspot limitations.
* D.#Correct - By setting the "service" to only "pppoe", all other PPP types will be denied.
* E.#Incorrect - Access to services like telnet is managed via firewall rules or user groups, not in PPP profiles.
Extract from Official MTCNA Course Material - PPP Profiles:
"PPP Profiles control session parameters. You can limit simultaneous logins, restrict service types (e.g., PPPoE), and set IP pools." Extract from Rene Meneses MTCNA Study Guide - PPP Configuration:
"Use the 'only-one' flag to control concurrent logins. The 'service' field allows or restricts protocol types per user." Extract from Terry Combs MTCNA Notes - PPP Features:
"To allow a user access only via PPPoE or PPTP, adjust the service types in /ppp secret."
NEW QUESTION # 106
......
How to Prepare For MikroTik Certified Network Associate (MTCNA) Exam
Preparation Guide for MikroTik Certified Network Associate (MTCNA) Exam
Introduction
The Certified Network Associate MTCNA exam test is administered by MikroTik. MikroTik is a Latvian maker of network equipment. Wired and wireless network routers, network switches, access points, as well as operating systems and auxiliary software are developed and sold by the business. The company was founded in 1996 with a focus on equipment sales in emerging markets. As of August 2019, more than 280 employees were listed on the business website. In 2015, Mikrotik was the 20th largest company in Latvia.
Training sessions for MikroTik are arranged and given at different locations around the world by MikroTik Training Centers. Network engineers, integrators, and managers who want to learn about the routing and management of wired and wireless networks using MikroTik Router-OS will be present.
If students study these exam dumps and then test their knowledge on MTCNA practice exams, they can ensure passing the exam with good grades and can overcome all difficulties. This guide provides a detailed overview of the MikroTik Certified Network Associate (MTCNA) certification including all sorts of prerequisites for the exam, the exam format, topics covered, exam difficulty, and preparation of MTCNA exam dumps.
Latest Questions MTCNA Guide to Prepare Free Practice Tests: https://torrentvce.certkingdompdf.com/MTCNA-latest-certkingdom-dumps.html