Pass the MikroTik MTCNA - MikroTik Training MTCNA Questions and answers with ValidTests

Subnet masks are used in IP networking to define the boundary between the network portion and the host portion of an IP address. A valid subnet mask must consist of a contiguous block of 1s followed by a contiguous block of 0s in its binary representation.

Let’s analyze the given options:

A. 255.192.0.0– This isnot a standard or valid subnet maskbecause the 1s are not contiguous beyond the second octet. This is typically used in class A subnetting but is not commonly considered valid in CIDR or MTCNA context. While technically binary-valid, it’s not recommended or standard for practical subnetting.

B. 255.255.192.255–Invalid, because the last octet is255, which implies all bits are 1s, but in the third octet only partial bits are set (192is11000000). This breaks the required rule of contiguous 1s followed by contiguous 0s.

C. 192.0.0.0–Invalid, as it doesn’t represent a valid subnet mask.192in the first octet (11000000) followed by zeros is not a valid mask – it's actually a network address, not a subnet mask.

D. 255.255.224.0–Valid subnet mask. This represents/19in CIDR notation. In binary:11111111.11111111.11100000.00000000, which follows the correct rule of contiguous 1s followed by contiguous 0s.

Extract from MTCNA Study Guide by René Meneses:

Subnet masks must be a continuous string of 1s followed by a continuous string of 0s. Any deviation or split between the blocks renders the mask invalid.

Extract from MTCNA Official Course Manual:

Valid subnet masks include values such as 255.0.0.0 (/8), 255.255.0.0 (/16), 255.255.255.0 (/24), and also non-classful masks like 255.255.224.0 (/19) are allowed and used for more flexible subnetting.

Conclusion:Option D is the only one meeting the criteria for a valid subnet mask as taught in the MTCNA curriculum.

===========

In MikroTik queues (especially in simple queues), the "total" limit typically refers to the combined rate of upload and download traffic — i.e., the total bandwidth usage. This is useful when you want to control the full traffic flow for a client or subnet.

A.✘Incorrect – Not just download

B.✔Correct – Total = Download + Upload combined

C.✘Incorrect

D.✘Incorrect – Upload alone is not referred to as "total"

Extract from MTCNA Course Material – Simple Queues:

“The total max-limit or total rate represents both upload and download combined.”

Extract from René Meneses MTCNA Study Guide – Queue Types:

“Use total max-limit to limit overall bandwidth. Individual directions can also be configured.”

Extract from MikroTik Wiki – Simple Queue Options:

“total-max-limit defines the sum of incoming and outgoing traffic rates.”

PAT (Port Address Translation) is a subtype of NAT that maps multiple private IP addresses to a single public IP address using different port numbers. It is the most common form of NAT used in home and business networks to allow multiple internal hosts to access the internet using one public IP address.

MTCNA Course Material – NAT Concepts:

“PAT (also known as NAT overload) allows multiple devices to share a single public IP address. It uses different port numbers to distinguish sessions.”

Cisco IOS NAT Configuration Guide:

“PAT translates multiple local IP addresses to one public IP address by assigning different port numbers to each session.”

Other options:

A: Generic term — not specific enough

B: Static NAT maps one private IP to one public IP

C: Dynamic NAT maps private IPs to a pool of public IPs, not one-to-many

Final Answer: DQUESTION NO: 149 [IPv6 – Addressing Standards]

How long is an IPv6 address?

A. 32 bits

B. 128 bytes

C. 64 bits

D. 128 bits

Answer: D

IPv6 addresses are 128 bits in length, represented as eight groups of four hexadecimal digits separated by colons (e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334). This allows for a vastly larger address space compared to IPv4 (32 bits).

MTCNA Course Material – IPv6 Basics:

“An IPv6 address is 128 bits long, providing 3.4×10^38 possible addresses. It is written in hexadecimal format.”

René Meneses MTCNA Study Guide – IPv6 Addressing:

“IPv6 = 128 bits, not bytes. Address includes a 64-bit network prefix and 64-bit interface identifier.”

Other options:

A: 32 bits is IPv4

B: 128 bytes = 1024 bits — incorrect

C: 64 bits = only half of an IPv6 address

Final Answer: DQUESTION NO: 150 [IP Addressing – Subnetting]

How many usable IP addresses are there in a 23-bit (255.255.254.0) subnet?

A. 512

B. 510

C. 508

D. 254

Answer: B

A /23 subnet provides 2^9 = 512 total addresses.

Subtract 2 (network address + broadcast address)

512 – 2 = 510 usable IP addresses

MTCNA Course Material – Subnet Calculations:

“For any subnet, usable hosts = 2^(32 – subnet mask bits) – 2.”

René Meneses MTCNA Study Guide – IP Subnetting:

“/23 provides 512 total addresses; usable = 510 after subtracting network and broadcast.”

Option Breakdown:

A: Total addresses (512)

B:✔Usable addresses (510)

C: Incorrect (508 is for /23 minus 4 — not relevant here)

D: 254 is usable for /24

Netinstall is a MikroTik utility used to reinstall or repair RouterOS on RouterBOARD devices. It can be used to:

Reinstall RouterOS while preserving the existing license (✔B)

Install a different version of RouterOS – either older or newer (✔C)

Limitations:

A.✘Incorrect – Netinstall will erase the configuration; it cannot recover a lost admin password without wiping the device.

D.✘Incorrect – You can only install software meant for the specific hardware architecture of the RouterBOARD.

Extract from Official MTCNA Course Material – Netinstall Tool:

“Netinstall can be used to reinstall RouterOS and change its version. It does not erase the license key.”

Extract from René Meneses MTCNA Study Guide – Recovery Tools:

“Netinstall allows you to load any RouterOS version compatible with your device. It does not delete the license.”

Extract from MikroTik Wiki – Netinstall Overview:

“Netinstall reinstalls the OS, can change versions, and retains license. It cannot recover configuration or passwords.”

To determine if two hosts can communicate directly, their IP addresses must:

Belong to the same subnet

Have matching subnet boundaries (based on their masks)

Let’s evaluate each:

A. 192.168.17.15/29 → Subnet: 192.168.17.8 – 192.168.17.15

192.168.17.20/28 → Subnet: 192.168.17.16 – 192.168.17.31

→ Different subnets →❌

B. 10.5.5.1/24 → Subnet: 10.5.5.0 – 10.5.5.255

10.5.5.100/25 → Subnet: 10.5.5.0 – 10.5.5.127

→ Different masks → Host with /25 may treat others outside /25 as unreachable →❌

C. 10.10.0.17/22 → Range: 10.10.0.0 – 10.10.3.255

10.10.1.30/23 → Range: 10.10.0.0 – 10.10.1.255

→ Both addresses fall within same larger /22 range →✅

D. 192.168.0.5/26 → Subnet: 192.168.0.0 – 192.168.0.63

192.168.0.100 → Not enough info; assume default /24

→ /26 and /24 will not overlap fully → likely unreachable →❌

MTCNA Course Manual – IP Subnetting:

“Hosts can communicate directly if they are in the same IP range and have the same subnet mask. Different subnet boundaries require routing.”

René Meneses Guide – Mask Comparison:

“Be cautious of overlapping address ranges. Matching IPs in same range with differing subnet masks may fail to communicate.”

Terry Combs Notes – Direct Connectivity Rules:

“Same subnet mask and same address block = direct communication. If masks differ, communication needs a router.”

In MikroTik RouterOS, the default user “admin” is a special system account. While it can be renamed or assigned a new password, it cannot be disabled or removed from the /user menu. This account is always present and has full administrative rights unless manually restricted via group policy or firewall rules.

A.✔True – You cannot disable or delete the “admin” user account.

B.✘False – Disabling is not possible via normal means in /user.

Extract from Official MTCNA Course Material – User Management Section:

"The default user 'admin' cannot be deleted or disabled. You may rename it or assign a strong password."

Extract from René Meneses MTCNA Study Guide – Users and Access Control:

“The admin account is permanent. For security reasons, change its name or use a different account and firewall access.”

Extract from Terry Combs Notes – User Management:

“Admin is system-protected. You can change the username, but it cannot be disabled or removed.”

===========

The OSI (Open Systems Interconnection) model was developed by the ISO (International Standards Organization) to provide a universal standard for network communications. Its primary goal is to enable interoperability between different systems and vendors by establishing a common networking framework.

MTCNA Course Material – OSI Model Purpose:

“The OSI model helps standardize networking so that different systems and networks can communicate.”

René Meneses MTCNA Study Guide – OSI Principles:

“The model was designed to guide product developers and facilitate communication between heterogeneous network systems.”

Other options:

A: The OSI was not intended to be “larger” than DoD model

B: Helpful benefit, but not the main reason for creation

D: Incorrect and vendor-specific (not factual)

Final Answer: CQUESTION NO: 126 [Networking Fundamentals – VLAN Concepts]

What does a VLAN do?

A. Acts as the fastest port to all servers.

B. Provides multiple collision domains on one switch port.

C. Breaks up broadcast domains in a layer 2 switch internetwork.

D. Provides multiple broadcast domains within a single collision domain.

Answer: C

VLANs (Virtual Local Area Networks) segment a Layer 2 switch network into separate broadcast domains. Without VLANs, all devices on a switch share a single broadcast domain. VLANs allow traffic isolation by logically grouping ports, improving security and performance.

MTCNA Course Material – VLAN Fundamentals:

“VLANs allow you to logically segment a switch network. Each VLAN creates a separate broadcast domain.”

René Meneses MTCNA Study Guide – VLAN Behavior:

“Switches normally operate in a single broadcast domain. VLANs break this up without requiring physical segmentation.”

Breakdown:

A: Not related to VLAN function

B: Switch ports are already separate collision domains

D: Reverse of what VLANs actually do

Final Answer: CQUESTION NO: 127 [VLAN Management – VTP and Cisco Switching]

Which one of the following is true regarding VLANs?

A. Two VLANs are configured by default on all Cisco switches.

B. VLANs only work if you have a complete Cisco switched internetwork. No off-brand switches are allowed.

C. You should not have more than 10 switches in the same VTP domain.

D. VTP is used to send VLAN information to switches in a configured VTP domain.

Answer: D

VTP (VLAN Trunking Protocol) is a Cisco proprietary protocol used to manage and propagate VLAN information throughout a switch fabric. It helps maintain consistency across switches by distributing VLAN configurations from a VTP server to client switches in the same domain.

Cisco Switching Guide – VTP Concepts:

“VTP advertises VLAN definitions on a LAN to ensure consistency. It reduces misconfigurations by centralizing VLAN management.”

René Meneses MTCNA Study Guide – VLAN and VTP Notes:

“VTP sends VLAN updates across switches in the same VTP domain. Switches must be compatible and share the domain name.”

Breakdown:

A: Only VLAN 1 exists by default

B: VLANs are not Cisco-exclusive

C: There is no limit of 10 switches in a VTP domain

D:✔Correct

Final Answer: DQUESTION NO: 128 [RouterOS]

If your router is facilitating a CSU/DSU, which of the following commands do you need to use to provide the router with a 64000bps serial link?

A. RouterA(config)#bandwidth 64

B. RouterA(config-if)#bandwidth 64000

C. RouterA(config-if)#clock rate 64

D. RouterA(config-if)#clock rate 64000

Answer: D

In Cisco IOS, the clock rate command is used on the DCE (Data Communications Equipment) end of a serial link to provide timing to the connected DTE (Data Terminal Equipment) device. To configure a 64 kbps link, the correct syntax is:

RouterA(config-if)#clock rate 64000

Cisco IOS Configuration Guide – Serial Interfaces:

“When the router acts as DCE, use the command clock rate [bps] under the serial interface to set the speed. For 64kbps, use 64000.”

René Meneses MTCNA Guide – WAN Configuration (Cisco Compatibility):

“Use clock rate 64000 for CSU/DSU simulation. Bandwidth command is for routing metrics only.”

Option analysis:

A: bandwidth 64 → Sets routing metric, not actual interface speed

B: bandwidth 64000 → Same; metric only

C: clock rate 64 → Incorrect value

D:✔Correct and syntactically valid

Final Answer: D────────────────────────────────────────────────────────────

When static ARP is configured, the router explicitly binds an IP address to a specific MAC address. This means:

If the MAC address of the device changes (as it does when a new network card is installed), and the IP remains the same, the router will not allow the device to communicate, because the MAC address in the ARP table no longer matches the new hardware.

Options explained:

A.✔Correct. The old ARP entry must be updated to reflect the new MAC address if the IP is reused.

B.✘Incorrect. The communication will fail if the ARP table still holds the outdated MAC for that IP.

C.✔Correct. Alternatively, if the new NIC supports MAC address modification, setting the MAC address to match the old one would make the static ARP entry valid again.

D.✘Incorrect. There's no need to change the IP if the static ARP entry is updated.

Extract from Official MTCNA Course Material – ARP Section:

"Static ARP entries tie IPs to MAC addresses. If the MAC changes but the static ARP entry remains unchanged, the device cannot communicate with the router."

Extract from René Meneses MTCNA Study Guide – ARP:

"When using static ARP, any MAC change must be reflected in the router's ARP table; otherwise, packets will be dropped."

Extract from MikroTik Wiki – ARP Modes:

"Static entries require matching MAC addresses. If the client's MAC changes, the ARP table must be updated or communication will fail."

===========

The “Backup” function in WinBox (located under Files → Backup) creates a binary backup file (.backup) of the router’s full configuration, including sensitive data like usernames, passwords, IPsec keys, wireless keys, etc.

A.✔Correct – By default, the backup file name includes the router identity and timestamp.

B.✘Incorrect – The file is saved on the router’s internal storage (Files menu), not on the user’s computer. You must download it manually to store it locally.

C.✔Correct – Unlike an “Export” file, a .backup file includes all configuration, including encrypted credentials.

D.✔Correct – You can specify a name and optionally a password to encrypt the backup.

Extract from MTCNA Course Material – Backup & Restore:

“The backup file includes all settings and can be encrypted with a password. It is saved on the router under the Files menu.”

Extract from René Meneses Study Guide – Backup Options:

“A .backup file contains everything including usernames and secrets. You can assign a filename and encryption password.”

Extract from Terry Combs Notes – Backup and Export:

“Backup saves a full binary copy. Use the download button to copy it to your PC.”

===========

MikroTik RouterOS supports two types of configuration backups:

/export – creates a human-readable script (.rsc file) containing configuration commands. This file can be edited using any text editor and later imported into another device.

/system backup – creates a binary image including all settings, passwords, and sensitive data.

Option analysis:

A.✘Incorrect–Export does NOT include passwords or Winbox credentials for security reasons

B.✔Correct–Exported .rsc files are plain-text and editable

C.✘Incorrect–The export file is automatically named (e.g., export.rsc) unless redirected manually

Extract from MTCNA Course Material – Backup vs Export:

"Export is a plain-text script file that can be edited and reused. It does not contain encrypted passwords or user credentials."

Extract from René Meneses MTCNA Study Guide – Backup and Restore:

“Use export to create editable configurations. It excludes sensitive data like passwords.”

Extract from Terry Combs Notes – Configuration Export:

“Export is readable, editable, and ideal for replicating setups. Passwords and some private info are excluded.”

===========