nerdexam
MikroTik

MTCNA · Question #55

Consider the following network diagram. In R1, you have the following configuration: /ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat…

The correct answer is C. /ip firewall filter add chain=input srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop. See the full explanation below for the reasoning.

Question

Consider the following network diagram. In R1, you have the following configuration:

/ip route add dst-address=192.168.1.0/24 gateway=192.168.99.2 /ip firewall nat add chain=srcnat out-interface=Ether1 action=masquerade On R2, if you wish to prevent all access to a server located at 192.168.1.10 from LAN1 devices, which of the following rules would be needed?

Options

  • A/ip firewall filter add chain=forward srcaddress=192.168.99.1 dst-address=192.168.1.10
  • B/ip firewall filter add chain=forward srcaddress=192.168.0.0/24 dst-address=192.168.1.10
  • C/ip firewall filter add chain=input srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop
  • D/ip firewall nat add chain=dstnat srcaddress=192.168.99.1 dst-address=192.168.1.10 action=drop

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    14% (5)
  • C
    77% (27)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MTCNA Practice