Soal Latihan - Olimpiade Jaringan MikroTik Smk 2017

The answer states that the difference between a user with write access and a user with full access on MikroTik is that the user with full access has complete rights within the system, while the user with write access is restricted from performing reboot and adding new users.

The given answer is "chain = input." This is because the term "chain" refers to a sequence of rules that are applied to network traffic. In this case, the chain being referred to is the "input" chain, which is responsible for filtering incoming traffic to the router.

Before performing a netinstall process on Mikrotik, the necessary configuration to be done is configuring Netbooting. This involves setting up the network boot server and configuring the necessary settings on the Mikrotik device to enable it to boot from the network. Netbooting allows the Mikrotik device to load the necessary files and software needed for the netinstall process from a network server instead of using local storage.

DSTNAT stands for Destination Network Address Translation. It is a function that is used to change the destination address in a data packet. It is commonly used to allow hosts in a local network to be accessed from outside the network (internet) by replacing the packet's destination IP address with a local IP address.

The correct answer is "Log". This menu on MikroTik is specifically designed to display information logs. It allows users to view and analyze system logs, service logs, and logging configurations. By accessing this menu, users can monitor and troubleshoot network issues by examining the log entries and identifying any errors or warnings that may have occurred.

The correct answer is "Add Src & Dst to Address List". In NAT configuration, this parameter allows the addition of source and destination addresses to the address list dynamically. This means that when a packet is being processed by NAT, the source and destination addresses will be added to the address list, providing information about the connection. This can be useful for monitoring and managing network traffic.

The correct answer is .rsc. The .rsc extension is used for backup files of MikroTik router configurations that can be easily read, modified, and changed using a text editor.

The term commonly used to determine the minimum guaranteed speed acceptable to the client when the connection is busy or traffic is high is "Commited information Rate" (CIR). CIR represents the minimum bandwidth or data rate that the service provider guarantees to deliver to the client under normal network conditions. It ensures that the client will always have a certain level of performance, even during peak usage times.

A VPN (Virtual Private Network) is a secure way to access a local area network using the internet or a public network. It creates a private "tunnel" between the user's device and the network, allowing for encrypted communication and secure data transfer. The term "tunnel" refers to this secure pathway that is established by the VPN to protect the data transmitted between the user and the network.

The correct answer is "System > Users > Active Users". This menu option allows the user to check the active users who are currently logged in to the Mikrotik router through winbox, ssh, and webfig. By accessing this menu, the user can view the list of active users and their respective login information.

The correct answer is "station". The scanner feature on a wireless device is used to detect active wireless networks in the surrounding area. In order to perform this function, the wireless device needs to be in station mode, which allows it to connect to and interact with other wireless networks as a client. This mode enables the device to scan for available networks and gather information about them.

The parameter in a firewall that allows for the creation or grouping of multiple IP addresses into a single list is known as an Address List. This feature simplifies the processing of these addresses and enables easier management and configuration of firewall rules.

DNS (Domain Name System) is a service that translates domain names into IP addresses and vice versa. It uses the User Datagram Protocol (UDP) as the transport protocol and port 53 as the communication medium. UDP is a connectionless protocol that provides faster communication but does not guarantee the delivery of data. DNS uses UDP to efficiently resolve domain names to IP addresses without the need for establishing a connection. Therefore, DNS is the correct answer as it uses UDP and port 53 for communication.

The correct answer is Hotspot Radius. Mikrotik can function as a server for Hotspot Radius, which allows for authentication, authorization, and accounting for users accessing the network. This feature is commonly used in public Wi-Fi networks, where users need to log in or provide credentials to access the internet. The Hotspot Radius server in Mikrotik helps manage and control user access, bandwidth usage, and other network policies for a secure and efficient network experience.

SRCNAT stands for Source Network Address Translation. It is a function that is used to change the source address of a data packet. In the given example, SRCNAT is used when accessing a website from a LAN network. SRCNAT is commonly used in network address translation (NAT) to translate private IP addresses to public IP addresses when communicating over the internet. This allows devices on a LAN network to access the internet using a single public IP address.

The correct answer is 192.168.88.1/24. This is because in the given default configuration, the IP address of the bridge interface is set to 192.168.88.1 with a subnet mask of /24. This means that the bridge interface will have an IP address of 192.168.88.1 and can communicate with devices within the same subnet range of 192.168.88.0/24.

The correct answer is "add dst to address list." This action is used to register the destination address of a website that has been accessed by a client in the address list dynamically.

The "Manual" option in the System menu of Winbox allows users to access the manual or documentation for configuring MikroTik devices using a web browser. This option provides step-by-step instructions and guidance on how to configure various settings and features of the MikroTik router. It is a useful resource for users who are new to MikroTik devices or need assistance in configuring specific functionalities.

The correct answer is export. The export command in MikroTik allows for backing up either partial or complete configurations. It is used in the new terminal to export the configuration settings, which can later be imported or restored if needed. This command is useful for creating backups of the configuration settings to ensure that they can be easily recovered in case of any issues or changes.

PPP Secret is a method of securing connections on Mikrotik routers. It can be used for tunneling with PPPoe, SSTP, L2TP, but not OVPN. OVPN stands for OpenVPN, which is a different protocol for secure connections.

The correct answer is dstnat. The fundamental difference between srcnat and dstnat in NAT chains is that dstnat is a feature that is used to change the access connection from a public network to a local network. This means that dstnat is responsible for modifying the destination IP address of incoming packets to redirect them to a specific host or server in the local network. On the other hand, srcnat is used to modify the source IP address of outgoing packets, allowing them to appear as if they originated from a different IP address.

The action "netmap" is used to create a static one-to-one mapping of IP addresses from one set to another. It is often used to distribute public IP addresses to hosts in a private network.

The Start Menu Browser does not display information about the identity routerboard.

When performing a reset of the MikroTik configuration, the routerboard will be rebooted. After the reboot process, the IP address assigned to ether1 will be dynamic.

RSTP (Rapid Spanning Tree Protocol) is the correct answer to handle packet storming and Bridge Loop issues in a bridge network. RSTP is an improvement over the standard Spanning Tree Protocol (STP) and provides faster convergence in case of network topology changes. It helps in preventing loops and ensures efficient forwarding of network traffic by dynamically adjusting the network topology. By using RSTP, the network can quickly detect and resolve packet storming and Bridge Loop problems, ensuring reliable and stable network communication.

When connecting a Mikrotik (station) to an access point (internet), the parameter that needs to be considered on the scanner menu is the signal strength. The signal strength indicates the quality and strength of the wireless signal between the Mikrotik and the access point. A strong signal ensures a stable and reliable connection, while a weak signal may result in a slow or unreliable connection. Therefore, monitoring and selecting a strong signal is crucial for a successful connection.

The correct answer is "Drag / Drog melalui browser". The given options describe different ways to upload data for backup/restore on a MikroTik device. Copy/Paste through Winbox, Drag/Drop through a browser, and Upload through FTP are valid methods. However, "Drag / Drog melalui browser" is not a valid method, as it is a misspelling of "Drag/Drop through a browser".

The option "jumping" does not belong to the list of action options in Firewall > Filter mikrotik. The other options, "passthrough," "return," and "tarpit," are valid actions that can be taken in the firewall filter. However, "jumping" is not a recognized action in this context.

The correct answer is "> ip service set www port=81". This command is used to configure the remote access and port on a MikroTik device. By using this command, the port for the www service is changed from 80 to 81.

During the IP configuration process for a Hotspot setup, one does not need to provide information about user profiles. User profiles are used to define specific settings for individual users, such as their authentication method, speed limits, and IP address pool. However, during the initial setup of the Hotspot, it is not necessary to configure user profiles as this can be done later on when adding users to the Hotspot system. Therefore, user profiles are not included in the options that need to be configured during the IP > Hotspot > Setup process.

The correct answer is UDP 123. NTP (Network Time Protocol) is a protocol used for synchronizing the time on network devices. It uses UDP (User Datagram Protocol) as the transport protocol and port number 123. UDP is a connectionless protocol that provides a lightweight and efficient way of transmitting data over a network. Port number 123 is specifically assigned for NTP communication, allowing devices to exchange time information and maintain accurate time synchronization.

The IP Address parameter is not displayed on the Scanner Mikrotik menu.

The correct answer is "same". This is because the action NAT mentioned in the question refers to Network Address Translation, which is used to translate private IP addresses to public IP addresses. In this scenario, the LAN has a different prefix (/24) compared to the public IP (/27). The "same" action in NAT means that the translated IP address will have the same prefix as the LAN IP address. Therefore, the LAN IP will be randomly changed to a public IP with a /24 prefix.

The correct answer is "ip firewall filter add chain=input protocol=icmp action=log". This option specifies that the firewall filter should be added to the input chain, and it should log any ICMP traffic. ICMP is the protocol used for ping requests, so this filter will log any pings sent to the router by users.

The given options are bypassed, reguler, blocked, and filtering. The question asks for the option that is not included in the type of Hotspot > IP Binding on MikroTik. The correct answer is "filtering" because it is not a type of IP Binding in the Hotspot configuration.

The most important parameter used to configure an EoIP (Ethernet over IP) is the Remote Address and Tunnel ID. The Remote Address specifies the IP address of the remote EoIP tunnel endpoint, allowing the establishment of a connection between two remote networks. The Tunnel ID is a unique identifier assigned to the EoIP tunnel, ensuring that the correct tunnel is used for data transmission. These parameters are crucial in setting up and maintaining a secure and reliable EoIP connection.

The correct answer is "Static". Static DNS feature allows the creation of a local DNS address on a MikroTik device. This means that the device can resolve domain names locally without having to query external DNS servers. It is useful for faster and more efficient DNS resolution within the local network.

SMTP (Simple Mail Transfer Protocol) is the correct answer. SMTP is a service that uses the TCP protocol and port 161 is not associated with SMTP, but rather with SNMP (Simple Network Management Protocol). NTP (Network Time Protocol) uses port 123 and POP3 (Post Office Protocol version 3) uses port 110. Therefore, the correct answer is SMTP.

The correct answer is "Registration". In the menu "Registration" on the wireless settings of a MikroTik device, we can access information about the number of clients that are connected to the device. This menu allows us to view and manage the registration of clients to the wireless network.

The correct answer is SNTP Client. Mikrotik Routerboard does not have a CMOS/battery feature, which often causes time settings to have errors. To ensure that the time configuration on the Mikrotik is saved automatically, the solution is to use an SNTP Client. This allows the router to synchronize its time with an SNTP server, ensuring accurate timekeeping.

The mode "AP-Bridging" is not included on the wlan1 interface.

The correct answer is "Connections". This option on the firewall allows for connection tracking on a MikroTik device. It enables the device to keep track of all established connections and their states, such as new, established, and related connections. This feature is essential for monitoring and managing network traffic and ensuring the security and efficiency of the network.

EoIP (Ethernet over IP) is a protocol in MikroTik RouterOS that is used to create a network tunnel between MikroTik routers over a TCP/IP connection. This allows for the encapsulation of Ethernet frames within IP packets, enabling the routers to communicate with each other as if they were directly connected on the same network. EoIP is commonly used for creating virtual LANs (VLANs) or extending networks over long distances.

The correct answer is "Expires After". This parameter in the DHCP Client is used to view the information about the expiration time of the IP address lease. It indicates the duration for which the IP address is valid and can be used by the client device. After the expiration time, the client device will need to renew the lease or request a new IP address from the DHCP server.

The correct answer is "ip firewall filter add chain=input action=drop
ip firewall filter add chain=input protocol=tcp port=80 action=accept". This answer is correct because it shows the correct configuration for the firewall on a MikroTik router. It sets the chain to "input", which means it will apply to incoming traffic, and it specifies that any traffic with the protocol TCP and port 80 should be accepted, while all other traffic should be dropped. This effectively blocks all incoming traffic except for TCP traffic on port 80, which is typically used for web applications.

The correct answer is DSTNAT. DSTNAT stands for Destination NAT, which is a feature in MikroTik that allows the automatic redirection of client browser access to a proxy. By using DSTNAT, the MikroTik router can modify the destination IP address of incoming packets, redirecting them to the proxy server. This ensures that all browser requests from clients are automatically directed to the proxy server for processing.

The correct answer is "ip firewall filter nat add chain=input protocol=tcp port=8291 action=drop." This command adds a rule to the NAT firewall filter in the input chain, specifying that any incoming TCP traffic on port 8291 should be dropped. This effectively blocks access to the winbox router from the public network (internet).

The correct answer is "Available From". This option allows us to specify the IP address or range of IP addresses that are allowed to access the service. By configuring the "Available From" option, we can restrict access to the Winbox service to only a specific IP address or a range of IP addresses, ensuring that only authorized users can access the service.

The correct answer is "ip firewall filter add chain=forward protocol=tcp action=accept src-address-list=!tukang_ping". This rule is adding a filter to the firewall's forward chain, specifying that any TCP traffic from a source address not in the "tukang_ping" address list should be accepted. This means that users who have not been added to the "tukang_ping" address list will be allowed to access the internet.