contoh soal 3

1. Is action=masquerade allowed in chain=dstnat?

A. yes, but only if dst-addr is specified

B. yes

C. yes, but it works only for incoming connections

D. no

Jawaban : D

Penjelasan : karena masquerade dipasang pada srcnat

2. What is the default protocol/port of (secure) winbox?

A. UDP/5678

B. TCP/22

C. TCP/8291

D. TCP/8080

Jawaban : c

Penjelasan : karena port default dari winbox adalah tcp 8291

3. Which is the default port of IP-Winbox?

A. UDP 8291

B. TCP 80

C. TCP 8291

D. TCP 8192

Jawab : c

Penjelasan : karena port default dari winbox adalah tcp 8291

4. During a scan, in order to see all the available wireless frequencies that are supported by the card, the following option must be selected in the wireless card's "Frequency Mode":

A. manual txpower

B. superchannel

C. regulatory domain

Jawab : c

Penjelasan : karena memberi limit terhadap channel yang tersedia dan maximum transit sesuai dengan Negara masing2

5. Which are necessary sections in /queue simple to set bandwidth limitation?

A. target-address, dst-address

B. target-address, max-limit

C. target-address, dst-address, max-limit

D. max-limit

Jawab :b

Penjelasan : karena untuk simple queue hanya membutuhkan target dan juga max limit nya

6. RouterOS log messages are stored on disk by default

 False

Penjelasan : karena log message nya disimpan di memory bukan di disk

7. In order to use dynamic keys in your wireless security profile for an AP, you MUST set up the dhcp server to provide the dynamic keys.

False

Penjelasan karena dhcp tidak mengirimkan dynamic key

8. When viewing the routes in Winbox, some routes will show "DAC" in the first column. These flags mean:

A. Dynamic, Active, Connected

B. Dynamic, Active, Console

C. Dynamic, Available, Created

D. Direct, Available, Connected

Jawab :a

Penjelasan : bisa dilihat di bawah ini

Flags: X - disabled, A - active, D - dynamic,

C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,

B - blackhole, U - unreachable, P - prohibit

9. Which wireless mode allows you to connect to any standard AP (not only MikroTik) and to be able to bridge this wireless interface to an Ethernet?

A. station-pseudobridge

B. station

C. station-wds

D. bridge

Jawab : b

Penjelasan : karena untuk jawaban B dan D khusus mikrotik untuk melakukan wds

10. For static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:

A. no extra package required

B. advanced-tools

C. dhcp

D. routing

Jawab A

Penjelasan : Penjelasan :jika hanya static routing tidak memerlukan paket tambahan/extra package

11. In RouterOS queue configurations the word "total" usually represents

A. download

B. upload + download

C. upload

D. download – upload

Jawab  b

Penjelasan : karena total itu merupakan upload + download

12. PPPoE server only works within one Ethernet broadcast domain that it is connected to. If there is a router between server and end-user host, it will not be able to create PPPoE tunnel to that PPPoE server.

False

Penjelasan : Penjelasan : karena PPPOE bisa berjalan meskipun beda IP network

13. PPP Secrets are used for

A. PPtP clients

B. IPSec clients

C. PPP clients

D. Router users

E. L2TP clients

F. PPPoE clients

Jawab : A,E,F

Penjelasan : ppp secret berfungsi untuk membuat user an password untuk proses tunneling

14. When using routing option 'check-gateway=ping' after how many timeouts is gateway considered unreachable:

A. 4

B. 3

C. 1

D. 2

15. Consider the following diagram. We want to communicate from a device on LAN1 to a device on LAN2. Assuming that all necessary configurations are already included on R2, which of the following configurations in R1 would enable this communication?

A. /ip route add dst-address=192.168.1.0/24 src-address=192.168.0.0/24 gateway=192.168.99.2

B. /ip route add dst-address=0.0.0.0/0 gateway=192.168.99.2

C. /ip route add dst-address=192.168.0.0/24 gateway=192.168.0.1

D. /ip route add dst-address=0.0.0.0/0 gateway=Ether1

E. /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2

Jawab :

Penjelasan: semuanya benar karena ,

D. bisa memakai interface,

E. konfigurasi static routing yang lengkap

B. bisa memakai Default route

16. What is possible with Netinstall?

A. MikroTik RouterOS reinstall

B. MikroTik RouterOS password reset with saving router's configuration

C. MikroTik RouterOS configuration reset

Jawaban : semua benar

Penjelasan : netiinstall dapat melakukan ketiganya

17. If you wish to block user access to MSN messenger, which chain should the firewall rule be placed in?

A. input

B. process

C. forward

D. output

Jawaban : C

Penjelasan : karena chain yang digunakan untuk data / paket dari luar router menuju luar lainnya menggunakan Chain=Forward

18. If ARP=reply-only is configured on an interface, this interface will

A. accept all MAC-addresses listed in '/ip arp' as static entries

B. accept IP and MAC address combinations listed in '/ip arp' list

C. add new MAC addresses in '/ip arp' list

D. add new IP addresses in '/ip arp' list

E. accept all IP addresses listed in '/ip arp' as static entries

Jawaban : A

Penjelasan : ARP=reply-only hanya membalas bagi yang IP dan MAC Addressnya sudah tercantum

19. In WinBox when clicking the 'Backup' button in the Files window, the following happens (select all that apply):

A. Backup file is created. Name contains the router identity, the date and time of its creation

B. Backup file is saved to the computer desktop

C. Backup file will contain usernames and passwords of the router

D. Optionally backup name and password can be specified

Jawaban : A

Penjelasan : Backup File berguna untuk membackup seluruh Konfigurasi termasuk Router Ientity, tanggal dan waktu

20. What is marked by connection-state=established matcher?

A. Packet begins a new TCP connection

B. Packet does not correspond to any known connection

C. Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection

D. Packet is related to, but not part of an existing connection

Jawaban c

Penjelasan : karena estabilished merupakan hasil dari koneksi yang pernah ada

Sedangkan

21. /ip firewall nat

add chain=dstnat in-interface=ether1 protocol=tcp dst-port=3389 action=dst-nat to-address=192.168.1.2 to-ports=81

The command shown above:

A. Forwards any TCP traffic incoming through ether1 port 81 to the port 3389 of the internal host 192.168.1.2

B. Adds IP address 192.168.1.2 to the interface ether1

C. Forwards any TCP traffic incoming through ether1 port 3389 to the port 81 of the internal host 192.168.1.2

D. Forwards all TCP traffic from 192.168.1.2 to port 81 of the interface ether1

Jawaban : C

Penjelasan : firewall nat akan membelokan traffic ari ether satu engan dst-port 3389 ke port 81.Jawaban A salah karena port yang dibelokkan salah, Jawaban A menjelaskan bahwa port 81 akan dibelokkan ke port 3389.

22. What is necessary for PPPoE client configuration?

A. Interface (on which PPPoE client is going to work)

B. ip firewall nat masquerade rule

C. Static IP address on PPPoE client interface

Jawaban : a

Penjelasan : karena yang dibutuhkan untuk pppoe client interface akan dipakai

23. Mark all the features that can be used for limiting client registrations to your access point:

A. access-list

B. wpa

C. WDS

D. registration-table

Jawaban : A

Penjelasan : untuk melimit client yang connect kita bisa menggunakan Access-List.

24. You want to use PCQ and allow 256k maximum download and upload for each client. Choose correct argument values for the required queue.

A. kind=pcq pcq-rate=256000 pcq-classifier=dst-address

B. kind=pcq pcq-rate=1256000 pcq-classifier=dst-address

C. kind=pcq pcq-rate=5000000 pcq-classifier=src-address

D. kind=pcq pcq-rate=256000 pcq-classifier=src-address

E. kind=pcq pcq-rate=5000000 pcq-classifier=dst-address

Jawab : A dan D

Penjelasan :dalam PCQ untuk melimit Upload classifier yang diisi adalah Src-Address dan untuk Download classfier yang diisi aalah dst-address

25. There can be more than one PPPoE server in a single broadcast domain:

  True

Jawab : true

Penjelasa: karena dalam satu broadcast domain bisa menjalankan lebih dari satu point to point dalam satu network