MTCNA Foundation Deck Practice Exam

These questions are part of the practice quiz. Start practicing

• Which element contains encryption keys and security settings for a wireless network?
• Which service on the router keeps time synchronized with external time sources?
• What is the term for a virtual Layer 2 switch that connects multiple ports into the same broadcast domain?
• Which tool is used to mark packets or connections for routing, QoS, or filtering?
• Which command sets the default static route to reach the internet via gateway 203.0.113.1?
• Which command sequence adds an allowed subnet to an address-list and permits that subnet through the input chain?
• Which interface offers a browser-based configuration experience for RouterOS?
• What is the purpose of creating PPP secrets when configuring L2TP/IPsec VPN on MikroTik?
• To verify the device's license level (e.g., CHR or RouterBOARD), which section would you inspect?
• How do you configure a static route to reach 10.0.0.0/24 via 192.168.1.254?
• Which command shows active firewall connections and their states?
• What is the name of the device used for logs and discovery?
• Which command sets the primary NTP server to pool.ntp.org?
• Which command forwards TCP port 22 from WAN to internal host 192.168.1.5:22 using DST NAT?
• How do you view CPU load, memory usage, and uptime in RouterOS?
• Which MikroTik CLI command displays the license status and supported features?
• Which command configures a default route with gateway 192.168.1.254?
• Which term is used to mark traffic for routing, QoS, or filtering decisions?
• Which mode configures a wireless interface to connect to an AP as a client?
• In a basic PPPoE server setup, which interface is typically specified for the PPPoE server to listen on?
• Which interface is primarily used for command-line access and scripting within RouterOS?
• What describes a manually assigned address used for routers and servers?
• Which combination of actions enables VLAN filtering on a MikroTik bridge and creates VLAN 10?
• Which command shows the current NAT rules in the router's configuration?
• Which command adds a single interface port to an existing bridge named bridge1?
• Which section indicates the RouterOS license level for CHR or RouterBOARD devices?
• Which command configures the SSH service to listen on port 2222 and enables SSH in RouterOS?
• Which term describes the interface functionality that enables a wireless device to participate in the same Layer 2 network as other devices?
• Which command performs a ping test to 8.8.8.8?
• Which command prints the current firewall rules with counters?
• Where should RouterOS backups be stored to maximize safety during upgrades?
• What is a VLAN interface and how do you assign VLAN ID 10 to the bridge1 interface?
• Which system filters traffic entering, passing through, or leaving the router?
• Which command shows live interface traffic statistics for a specific interface (e.g., ether3)?
• Which mode makes a wireless interface part of a Layer 2 network?
• What is the effect of adjusting the 'distance' parameter on a static route?
• To analyze live traffic on a per-interface basis, which tool should you use?
• How do you configure a MikroTik wireless interface to operate as an access point with WPA2-PSK security?
• Which term describes the old RouterOS feature replaced by bridges to manage switch groupings?
• Which command shows the list of current firewall rules and their counters?
• To verify the route to a distant host and see each hop in the path, which tool would you run?
• Which command lists the firewall rules with their counters?
• Which mode would you configure to have a wireless interface operate as a client connecting to an AP?
• Which command prints the current time on the router?
• Which command sets the time zone to UTC in RouterOS?
• Which component controls WinBox MAC connection availability on interfaces?
• Which MikroTik command provides CPU and memory usage information?
• Which feature controls services such as WinBox, SSH, API, WebFig, and FTP?
• Which statement best describes configuring an IPsec SA proposal in MikroTik?
• Which command creates a read-only user named 'monitor' with password 'secure'?
• Which option correctly shows how to create a bridge named bridge1 and attach two interfaces?
• Which term describes wlan1 or related interfaces used for access points or stations?
• What is the difference between srcnat and dstnat in MikroTik NAT configuration?
• Which feature tracks active connections and is required for NAT, firewall, and FastTrack?
• Which command displays the current firewall filter rules in their evaluation order?
• Which option best describes a simple, one-page setup tool for initial configuration?
• Which pair of firewall rules restrict SSH access to the source subnet 192.168.0.0/16?
• Which MikroTik feature uses a Layer 2 discovery protocol to find nearby devices?
• What is the route a device uses as a last resort to reach external networks?
• Which command would you use to display IPv4 addresses configured on the device?
• What steps ensure DNS queries from clients are answered by the MikroTik DNS server, including device DNS settings?
• Which command enables VLAN filtering on a MikroTik bridge?
• Which command creates a VLAN interface named vlan10 with VLAN ID 10 on interface bridge1?
• Which tool provides a real-time traffic analyzer per interface?
• Which term describes the mechanism that assigns IP addresses to interfaces on a network?
• Which command exports the current RouterOS configuration to a file named backup?
• Which mechanism is required to enable NAT, firewall, and FastTrack by monitoring ongoing connections?
• Which section is described as controlling services such as WinBox, SSH, API, WebFig, and FTP?
• Which firewall rule would drop SSH traffic on the input chain?
• Which feature accelerates throughput by efficiently handling established connections?
• What is the purpose of the Neighbors Discovery feature?
• What term covers assigning IPv4/IPv6 addresses to interfaces for routing and communication?
• WinBox has a variant that connects using the MAC address and operates at Layer 2. What is it called?
• How do you enable VLAN filtering on a bridge and assign a tagged VLAN to a port?
• Which component provides the hierarchical QoS structure for bandwidth control?
• Which command performs a traceroute to a hostname or IP in MikroTik?
• What is the purpose of the /system scheduler in RouterOS?
• Which command configures NAT masquerading for outbound traffic on interface named wan?
• Which backup is an encrypted binary copy of the full configuration, restored only on the same device model?
• If you need to restore configurations to identical hardware only, which option should you choose?
• Which interface is designed for quick, basic setup and not intended for professional deployments?
• How do you view system logs to troubleshoot issues on MikroTik?
• How do you implement an allow-list based firewall rule set using an address-list?
• Which CLI command lists all network interfaces and their current status?
• What name is broadcast by wireless access points to identify the network?
• Which mechanism modifies IP information to enable private-to-public access?
• In a simple queue, what does the target parameter specify?
• Where can you view the list of wireless clients connected in AP mode?
• What is the recommended method to preserve configuration when upgrading RouterOS?
• How do you configure NTP on a MikroTik router to sync time with pool.ntp.org?
• Which Layer 2 protocol maps IP addresses to MAC addresses?
• Which command configures the wireless interface to operate as an access point with a specific SSID and security profile named 'sec'?
• Which operation restores the router to defaults and can skip defaults using no-defaults=yes?
• In MikroTik terminology, which term refers to physical or virtual ports such as ether1 or wlan1, VLANs, bridges, tunnels, or LTE?
• Which command verifies DNS resolution from MikroTik to a hostname using the CLI?
• What is the CLI command to perform a factory reset on the router?
• Which sequence correctly configures the input firewall to accept established/related connections and drop all other traffic?
• Which component synchronizes the router clock with NTP time servers?
• Where would you view the license level in the Winbox/WebFig interface?
• What is PCQ in MikroTik, and when should you use it?
• Which section provides authentication control for local RouterOS accounts?
• Which option would you use to export the current configuration as a portable text file?
• Which command checks for RouterOS package updates and upgrades to a newer version?
• Which MikroTik tool provides GUI configuration using MAC or IP connectivity?
• Which NAT variant is used for Internet sharing when the ISP IP is assigned dynamically?
• What is the command to configure a MikroTik wireless interface to connect as a client (station) to an AP named 'OfficeAP'?
• What is the purpose of the /system scheduler in RouterOS?
• Which commands set up a basic L2TP/IPsec server and create a PPP secret for a user?
• Which category includes commands used to test and diagnose network reachability and performance?
• What is the purpose of a bridge in RouterOS, and which commands create a bridge including two interfaces?
• Which commands restrict Winbox and SSH management access to a specific source network (for example 192.168.0.0/24)?
• Which NAT rule enables internet access for a LAN behind MikroTik using the device's WAN interface?
• Which tool captures packets for analysis similar to Wireshark?
• What term denotes the channel used by wireless radios for communication?
• How do you configure a basic IPsec SA proposal with AES-256 and SHA-256 in MikroTik?
• Which commands would you use to test reachability to a host and determine the path taken?
• Which command sets DNS servers to 8.8.8.8 and 1.1.1.1 and enables DNS recursive lookup for clients?
• What is the difference between a bridge and a switch in MikroTik devices?
• Which command creates a NAT rule to allow internal clients to reach the Internet using MASQUERADE?
• What is the correct command to configure a PPPoE client to obtain a session over an Ethernet interface?
• Which option describes how to schedule a daily backup export using RouterOS scheduler?
• Which route is used when no other specific route matches and typically points to the ISP gateway?
• Which command sets a DST NAT rule to forward TCP port 80 from WAN to internal host 192.168.10.10:80?
• How do you upgrade RouterOS packages to a newer version, using the CLI?
• Which command attaches a VLAN interface to a bridge by creating a bridge port?
• How do you create a VLAN interface VLAN10 on top of interface ether2 and attach it to a bridge?
• What is CAPsMAN and when would you use it in a MikroTik network?
• Which statement best describes the use of a VLAN ID tag?
• Which MikroTik command assigns IPv4 address 192.168.10.1/24 to interface ether2?
• Which item shows learned MAC-to-IP mappings on interfaces?
• How do you configure a logging action that writes firewall logs to a file named "firewall.log"?
• Which command implements a basic firewall rule to drop invalid connection state packets?
• What is the name of the command-line interface built into RouterOS for issuing commands?
• What does a wireless security profile in MikroTik encapsulate?
• Which command forwards external port 22 to internal 192.168.1.10:22 using destination NAT?
• Which term refers to the router's time settings that should be synchronized with NTP?
• Which of the following configurations correctly sets up a DHCP server for 192.168.20.0/24 with pool 192.168.20.50-192.168.20.150 and gateway 192.168.20.1?
• Which command configures a DHCP client on the WAN interface to obtain an IP address via DHCP?
• If you need to forward frames within a local network without routing, which MikroTik concept is used?
• Which command displays all configured IPv4 addresses on the device?
• Which section contains system messages generated by RouterOS and is useful for troubleshooting?
• Which section shows hardware statistics such as voltage, temperature, and fan speeds?
• In the DHCP example for 192.168.20.0/24, what is the gateway address for clients?
• If you want to review backups, exports, and uploaded files, which section do you browse?
• Which metric is used to determine route preference, where lower values are preferred?
• How do you create a simple queue to limit a host at 192.168.10.50 to 1 Mbps down and 512 kbps up?
• Which export provides a text configuration for restoring settings on any RouterOS device?
• To route traffic destined for 10.0.0.0/24 through 192.168.1.254, which command would you run?
• Which command implements a basic firewall rule to drop traffic from a specific source address 203.0.113.0/24?
• Which command adds a rule to drop all input traffic?
• Which sequence enables SSH access only from a specific network and blocks others?
• How would you implement a rate-limit rule for SSH to protect against brute-force attempts?
• What are Winbox and WebFig, and which is commonly used for initial setup?
• Which command would you use to view traffic on a specific interface in real time?
• How would you allow SSH management via a non-default port and restrict access to a given IP range?
• Which section would you refer to for authentication control of local RouterOS accounts?
• Which statement about VLAN IDs on bridges is true?
• Which set of MikroTik commands configures a DHCP server for subnet 192.168.88.0/24 on interface bridge-LAN with a pool 192.168.88.100-192.168.88.200?
• Which command adds a PPP secret with a given username and password?
• What is the purpose of exporting configuration with a file name such as firewall-rules?
• What is the first essential step when configuring a brand-new MikroTik RouterOS device for remote management?
• Which command would you use to display the current routing table on a MikroTik device?
• Which command creates an address-list named 'office' for 192.168.88.0/24?
• Which sequence configures a MikroTik wireless interface to operate as an access point with WPA2-PSK security?
• In the DHCP server configuration, what does the authoritative parameter specify?
• Which concept contains the WPA/WPA2 keys and encryption settings for a wireless network?
• Which function provides bandwidth management to control upload/download speeds?
• Which CLI command assigns the IP address 192.168.88.1/24 to interface ether2?
• In a PPPoE client configuration, what is the effect of add-default-route=yes?
• In the PPP secret example, which profile is assigned by default?
• Which command should you use to view the MikroTik log when investigating a recent reboot?
• What is a recommended approach to restrict remote administration access on the WAN interface?
• Which sequence ensures the router's time is synchronized with an external NTP server and verifies the current time?
• What is the process of forwarding packets between different IP networks?
• In DHCP network settings, what does the gateway parameter specify?
• Which statement describes the export vs backup feature?
• To ensure DNS queries from clients are answered by the MikroTik DNS server, which action is correct?
• What is a simple approach to saving firewall rules for documentation or transfer?
• To view hardware statistics including voltage and temperature, which section should you check?
• What is the primary function of bridging in MikroTik RouterOS?
• What is the effect of creating a bridge between two interfaces in MikroTik RouterOS?
• How do you export the current RouterOS configuration to a file named backup?
• Which statement describes configuring a PPTP VPN server and a client on MikroTik (noting security concerns)?
• How do you check the current time synchronization status with NTP?
• Which sequence configures SSH to listen on port 2222 and restrict access to 192.168.0.0/24 while dropping others?
• Which term refers to the RouterOS tools such as ping, traceroute, torch, profile, and bandwidth-test?
• How do you bind the Winbox management service to a single IP address range?
• Which component handles policy-based bandwidth allocation to control data transfer rates?
• Which command performs a traceroute to 8.8.8.8?
• Which feature tests throughput between two MikroTik devices?
• Which command reveals the current RouterOS license level on a MikroTik device?
• In Winbox Safe Mode, what happens if you exit Safe Mode without confirming changes?
• Which sequence implements a basic SSH allow from management workstation only and drop others on the input chain?
• Which configuration drops all inbound traffic to the router that does not match established connections?
• Which steps verify that a NAT rule translates internal addresses to the internet?
• Which hardware feature enables fast Layer 2 forwarding inside RouterBOARD devices?
• Which MikroTik command deletes a firewall filter rule by its list number?
• Which browser-based interface enables configuration of RouterOS without installing a dedicated client?
• Which term describes a port that can be part of tasks like VLANs and Bridges?
• Which section shows the storage area containing backups, exports, and uploaded files?
• Which command enables an L2TP/IPsec VPN server for remote clients on MikroTik?
• Which command creates a static DNS entry for hostname gateway pointing to 192.168.88.1?
• Which option implements basic rate limiting per user, subnet, or interface?
• After saving changes, what is a recommended verification step to ensure remote management remains accessible?
• Which MikroTik operating system runs on RouterBOARD and CHR devices and includes routing, switching, firewall, wireless, and system tools?
• Which commands configure a basic PPPoE server with a user?
• Which command creates a simple queue to limit 192.168.88.50/32 to 1 Mbps download and 512 kbps upload?
• Which old RouterOS feature is deprecated and associated with switch grouping?
• Which pair of commands accomplish both exporting the current configuration and creating a binary backup?
• Which command enables the MikroTik device to obtain an IP address automatically via DHCP on interface ether1?
• Which command adds a NAT rule using MASQUERADE for traffic leaving through WAN?
• Which command creates a daily backup task using the Scheduler at 02:00?
• Which command lists all configured IP addresses on the device?
• Which acceleration feature for RouterOS handles established connections to increase throughput?
• How do you enable the built-in Web Proxy server and set a cache size of 128 MB?
• Which utility sends ICMP Echo requests to test connectivity?
• What is the difference between source NAT (masquerade) and destination NAT in MikroTik?
• Which term refers to a table listing MAC addresses learned on interfaces with their corresponding IPs?
• What is the best practice after making a significant config change on MikroTik?
• Which NAT technique translates internal private addresses to public addresses for Internet access?
• Which MikroTik interface would you most likely use to perform initial device provisioning with a guided setup?
• Which command configures the router to provide DNS to clients and forward unresolved queries to the internet?
• What term describes the next-hop IP used for routing traffic outside the local network?
• Which command prints the current system clock to verify the time?
• What happens when VLAN filtering is enabled on a bridge?
• To monitor ongoing traffic on a specific interface, which command shows real-time statistics for that interface?
• What is the effect of enabling DNS recursive lookup for clients on MikroTik RouterOS?
• Which tool shows the path packets travel to a destination?
• Which device automatically receives IP configuration from an upstream DHCP server?
• How do you configure DNS on MikroTik to use Google DNS (8.8.8.8) and allow clients on the LAN to use the router as DNS?
• Which command creates a read-only user for monitoring named 'monitor' with password 'secure'?
• Which section lists software modules installed on RouterOS, such as system, wireless, and routing?
• How do you enable the NTP client and set time zone to UTC?
• In a DHCP server configuration, what is the role of the address-pool parameter?
• Which component would you use to implement a prioritized tree of queues for bandwidth management?
• Which tool is typically used to manage MikroTik devices over the network using a dedicated GUI client?
• What is the difference between a RouterOS backup file and an export script, and when should you use each?
• Which service provides dynamic IP addresses to clients on a LAN?