Free MTCNA Practice Test Questions and Answers (2026)

Last Update Check

View Mode
Q: 1
What does a VLAN do?
Options
8 comments in the community discussion
4
Option C is the one you want. VLANs break up broadcast domains, so each VLAN acts like its own little network on the same physical switch. That’s standard in MTCNA and what they focus on for L2 basics, pretty sure.
1
C/D? These VLAN questions get old fast. Pretty sure it's C since VLANs create separate broadcast domains, not just collision domains.
Q: 2
Mark the queue types that are available in RouterOS
Options
15 comments in the community discussion
Its D A, C, E, F are the ones actually available on RouterOS by default. DRR (B) and LIFO (D) aren't implemented as queue types in RouterOS last I checked. SFQ, PCQ, FIFO, and RED are all there in the queue tree or simple queue options. Maybe I'm missing some change in new versions but pretty sure about this set.
C/E/F or maybe A too. Not 100 percent but B and D just don't seem like RouterOS options to me.
Q: 3
What does this simple queue do (check the image)? MikroTik MTCNA question
Options
9 comments in the community discussion
1
Seen similar questions on practice exams, C
1
I’m not totally sure, but I’d pick B - the queue should be limiting the download speed for 192.168.1.10 to 1 Mbps. Simple queues apply limits based on direction and target, and it’s easy to confuse upload vs download here. If the image shows dst as the target, that usually means download. Anyone else think otherwise
Q: 4
You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do:
Options
8 comments in the community discussion
1
Its B for sure, exporting just the /ip firewall filter section is the cleanest. But are we allowed to use scripts or only the built-in export command here? If scripts aren’t allowed, it might limit some approaches.
B tbh, C tempts you but full backup isn’t granular for just firewall filter.
Q: 5
For static routing functionality, additionally to the RouterOS 'system' package, you will also need the following software package:
Options
8 comments in the community discussion
5
Option A makes sense. In recent RouterOS versions, basic static routing is built into the main system package, so you don't need to add the 'routing' one for just static routes. The additional routing package is more for dynamic protocols like OSPF or BGP. Pretty sure this changed in v7-correct me if I'm wrong.
1
Had something like this in a mock, it's definitely A.
Q: 6
What protocol is used for Ping and Trace route?
Options
14 comments in the community discussion
2
Pretty sure it's D and E. Ping uses ICMP and traceroute commonly uses UDP packets to probe the path, so those fit. I don't see how DHCP or TCP would be correct here.
1
Hard to say, D and E. Had a question just like this in a mock, both are right depending on OS since ping is always ICMP, but traceroute is UDP on some systems. Not 100 percent but that's what most mocks show.
Q: 7
If 'check-gateway' is enabled for an ECMP route and one of the gateways is unreachable, then:
Options
15 comments in the community discussion
6
Option B Official guide spells this out, best to double-check with RouterOS labs if you want to see it in action.
3
Option BEvery time MikroTik throws this 'ECMP + check-gateway' combo on exams, it's always about dropping the dead gateway from load balancing. Only live ones get used for round robin. I think that's pretty much official behavior, unless they change the RouterOS docs again.
Q: 8
What command is used to create a backup configuration?
Options
14 comments in the community discussion
B not D
B
Q: 9
What are the two main types of access control lists (ACLs)? Standard IEEE Extended Specialized
Options
10 comments in the community discussion
1
Maybe A since "standard" and "extended" are always in the official resources and labs for MTCNA. Haven't seen IEEE or specialized listed as ACL types there. Anyone spot something different in the practice test?
1
Probably A, that's what the official guide and practice test cover for MTCNA. Check both to confirm.
Q: 10
How many usable IP addresses are there in a 20-bit subnet?
Options
17 comments in the community discussion
4
E. not C. Saw a similar question in Mikrotik practice and 4094 is correct for usable addresses in /20.
3
Option E
Q: 11
Which default route will be active? /ip route add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.1 add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=2.2.2.2
Options
5 comments in the community discussion
5
Option A here, since distance 5 beats distance 10. B is a common trap if you miss that detail.
1
Yeah, lower distance is preferred for default route. A
Q: 12
Which type of encryption could be used to establish a connection with a simple passkey without using a 802.1X authentication server?
Options
6 comments in the community discussion
1
Its A, had something like this in a mock. PSK means Pre-Shared Key, so you can connect just using a passkey and don't need an external 802.1X server. EAP methods require an authentication server.
I've seen similar in official Mikrotik guides and practice exams, and A looks right since PSK means you just need a passkey, no auth server. B usually ties to enterprise setups.
Q: 13
For user in local PPP Secrets/PPP Profiles database, it is possible to
Options
7 comments in the community discussion
A/C/D. Profiles let you set single login, max traffic, or restrict to PPPoE. The others aren't configurable this way, I think.
Its A C D. PPP Secrets and Profiles both let you set single-session (A), max Rx/Tx bytes (C), or restrict to PPPoE only (D). E is more about firewall rules, and B's not as specific in Mikrotik. Saw a similar one in the official guide and practice test, but open to correction if I missed something.
Q: 14
You want to transfer existing '/ip firewall filter' configuration from one router to a new system. Choose the best possible way to do:
Options
8 comments in the community discussion
1
Its B for sure, exporting just the /ip firewall filter section is the cleanest. But are we allowed to use scripts or only the built-in export command here? If scripts aren’t allowed, it might limit some approaches.
B tbh, C tempts you but full backup isn’t granular for just firewall filter.
Q: 15
You have 10 users plugged into a hub running 10Mbps half-duplex. There is a server connected to the switch running 10Mbps half-duplex as well. How much bandwidth does each host have to the server?
Options
7 comments in the community discussion
C/D? I think it's not so clear because with a hub sharing half-duplex, collisions matter.
D Each host can use up to 10 Mbps with the server, just not all at the same time because of half-duplex and collision domain. Hub doesn't split the bandwidth unless multiple transmit together. Anyone disagree?
Q: 16
It is possible to create an encrypted PPPoE tunnel in RouterOS:
Options
5 comments in the community discussion
Yeah, it's definitely possible if you use IPsec on top, so True.
This one trips people up if you don’t read the docs closely. True
Q: 17
PPPoE server only works within one Ethernet broadcast domain that it is connected to. If there is a router between server and end-user host, it will not be able to create PPPoE tunnel to that PPPoE server.
Options
5 comments in the community discussion
1
That's false, PPPoE server can work across broadcast domains if you set up a relay.
1
Probably False, since PPPoE relay lets it work across routers. The question makes B sound tempting but A is right for Mikrotik.
Q: 18
You can not use OSPF and RIP routing protocols simultaneously on the RouterOS.
Options
4 comments in the community discussion
1
Probably False, RouterOS allows OSPF and RIP at the same time.
Isn't it possible to run both OSPF and RIP on RouterOS? I remember seeing both configured in Winbox before. B seems like a trap since it's common to run multiple protocols together for redistribution.
Q: 19
Collisions are possible in fullduplex Ethernet networks
Options
4 comments in the community discussion
False tbh, full duplex disables CSMA/CD so collisions aren't supposed to happen.
Why does the question say "full duplex"? If it asked about half duplex I'd pick True.
Q: 20
It is possible to create a configuration where VLAN and PPTP interfaces are bridged together.
Options
1 comment in the community discussion
Pretty sure this isn't possible, at least not directly. Had almost the same question show up on my actual exam and the answer was that you can't bridge a PPTP interface with a VLAN in RouterOS. Anyone else seen different behavior?
Question 1 of 20

Premium Access Includes

  • ✓Quiz Simulator
  • ✓Exam Mode
  • ✓Progress Tracking
  • ✓Question Saving
  • ✓Flash Cards
  • ✓Drag & Drops
  • ✓3 Months Access
  • ✓PDF Downloads
Get Premium Access

← Back to all Mikrotik exams & practice tests

Scroll to Top