MikroTik MTCEWE Practice Exam

• A. cAP series Correct answer
• B. hAP series
• C. SXT series
• D. LHG series

Option A is correct because the cAP (ceiling Access Point) series is MikroTik's dedicated ceiling-mounted indoor AP product line, designed for enterprise deployments with a low-profile enclosure. The hAP series are home/office routers, LHG units are long-range outdoor dishes, and SXT devices are outdoor CPE radios — none are ceiling-mount APs.

• A. ap-bridge Correct answer
• B. station
• C. station-pseudobridge
• D. bridge Correct answer

Options A and D are correct because ap-bridge mode creates an access point that accepts multiple incoming client connections, while bridge mode also accepts incoming connections but limits it to a single client. Station and station-pseudobridge modes operate as clients that connect to an access point — they initiate outgoing connections rather than accepting incoming ones.

• A. dBm Correct answer
• B. Amperes
• C. Volts
• D. Watts

Option A is correct because MikroTik RouterOS displays wireless signal strength in dBm (decibels relative to one milliwatt). This logarithmic scale is standard in wireless networking, where typical received signal values range from -30 dBm (very strong) to -90 dBm (very weak). Watts, volts, and amperes measure different electrical quantities.

• A. True Correct answer
• B. False

In decibel math, a 3 dB increase represents a doubling of power. When an antenna provides 3 dB of gain, it focuses the radiated energy such that the effective power in its favored direction is twice what it would be with an isotropic (0 dBi) reference antenna. This relationship is fundamental to link budget calculations.

• A. External Infrared Radiation Pattern
• B. Enhanced Interference Rejection Processing
• C. Extended Internal Radio Protocol
• D. Effective Isotropic Radiated Power Correct answer

Option D is correct because EIRP stands for Effective Isotropic Radiated Power. It represents the total power that would need to be radiated by a theoretical isotropic antenna (radiating equally in all directions) to produce the same signal strength in the direction of maximum antenna gain. EIRP is a key regulatory metric that determines compliance with local power limits.

• A. True
• B. False Correct answer

EIRP (Effective Isotropic Radiated Power) is determined by the transmit power, antenna gain, and all losses in the transmission path (cable loss, connector loss). The formula is EIRP = TX power - cable losses - connector losses + antenna gain. A system with low transmit power but high antenna gain can produce a higher EIRP than one with high transmit power and low antenna gain.

• A. No - the EIRP is 37dBm, which exceeds the limit
• B. Yes - the EIRP is 20dBm, well under the limit
• C. No - the EIRP is 33dBm, which exceeds the 30dBm limit Correct answer
• D. Yes - the EIRP is exactly 30dBm

To calculate the EIRP, you add the antenna gain (15dBi) to the transmit power and then subtract the cable loss (2dB). If the transmit power is assumed to be 20dBm, the EIRP would be 20dBm + 15dBi - 2dB = 33dBm, which exceeds the regulatory limit of 30dBm, making wlan1 non-compliant.

• A. Up to 50 kilometers
• B. Up to 5 kilometers
• C. Up to 200 meters Correct answer
• D. Up to 10 meters

Option C is correct because the standard MikroTik Wireless Wire (using compact integrated 60 GHz antennas) supports point-to-point links up to approximately 200 meters under ideal line-of-sight conditions. The extended-range Wireless Wire Dish variant with larger dish antennas can reach up to 1500 meters. The 60 GHz frequency's high atmospheric absorption limits range.

• A. True Correct answer
• B. False

A MikroTik single-radio repeater must operate on the same channel as the upstream AP because it uses one physical radio for both the station interface (connecting to the upstream AP) and the Virtual AP interface (serving local clients). Since a single radio can only tune to one frequency at a time, both functions must share the same channel — which is also why throughput is halved.

• A. 4
• B. 3 Correct answer
• C. 1
• D. 2

Option B is correct because the diagram's wlan1-labeled backbone links show three wireless relay hops down to R3 (AP0→R1, R1→R2, R2→R3) before PC3's traffic reaches the chain; PC3's own attachment to R3 is its local client connection, not an additional backbone hop. Options A, C, and D miscount that backbone chain, either over- or under-stating how many repeater-to-repeater hops the traffic actually crosses.

• A. WEP (RC4)
• B. AES-CCMP Correct answer
• C. 3DES
• D. DES

Option B is correct because WPA2 mandates AES-CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) as its encryption mechanism. AES-CCMP provides both data confidentiality and integrity. WEP used the weaker RC4 cipher, while WPA (version 1) used TKIP as a transitional improvement. DES and 3DES are not used in wireless security.

• A. None, since all three use mode=dynamic-keys
• B. sec-guest-psk, using WPA2-PSK with AES-CCM
• C. sec-corp-eap, using WPA2-EAP with EAP-TLS
• D. sec-legacy, using WPA-PSK with TKIP Correct answer

The option 'sec-legacy, using WPA-PSK with TKIP' provides the weakest protection against modern attacks because TKIP is considered outdated and less secure compared to AES, which is used in WPA2-PSK and WPA2-EAP. Modern attacks can exploit vulnerabilities in TKIP, making this profile the least secure option.

• A. /interface wireless registration-table print Correct answer
• B. /interface wireless scan
• C. /ip arp print
• D. /ip dhcp-server lease print

Option A is correct because /interface wireless registration-table print displays all currently associated wireless clients with real-time information including MAC address, signal strength, TX/RX rates, CCQ, uptime, and traffic counters. DHCP leases show IP assignments (not all wireless clients use DHCP), ARP shows Layer 3 neighbors, and wireless scan shows nearby APs, not connected clients.

• A. Entry 3, on cap2-wlan1 with TX-CCQ 20% and -85dBm Correct answer
• B. Entry 1, on cap1-wlan1 with TX-CCQ 40% and -81dBm
• C. Entry 2, on cap2-wlan1 with TX-CCQ 88% and -60dBm
• D. Entry 0, on cap1-wlan1 with the longest uptime

Option A is correct because entry 3 shows the weakest combination of the four — a 20% TX-CCQ and a -85dBm signal on cap2-wlan1 — which matches a report of extremely slow WiFi far better than any other entry shown. Options B, C, and D each show a stronger signal, a higher TX-CCQ, or an unrelated metric (uptime) that doesn't explain severely degraded performance.

• A. Active site survey Correct answer
• B. Predictive site survey
• C. Regulatory compliance audit
• D. Spectrum allocation survey

Option A is correct because an active site survey involves temporarily placing APs at candidate locations, powering them on, and then walking the coverage area with a survey client to measure actual received signal strength, SNR, and throughput at various locations. This provides real-world measurements that account for the specific building materials, furniture, and RF environment.

• A. A coverage heat map showing signal strength across the floor plan Correct answer
• B. A list of client device serial numbers
• C. The ISP's bandwidth test results
• D. A recommended AP placement map with channel and power assignments Correct answer

Options A and D are correct because a professional wireless site survey should produce a coverage heat map showing signal strength measurements overlaid on the floor plan (identifying dead spots and areas of adequate coverage), and a recommended AP placement map with specific channel and power assignments for each AP to minimize interference and maximize coverage. A list of client device serial numbers is an asset inventory task, not a survey deliverable, and ISP bandwidth test results measure WAN capacity, not wireless coverage.

• A. Controlled Access Point Correct answer
• B. Client Access Profile
• C. Channel Assignment Program
• D. Central Authentication Protocol

Option A is correct because in MikroTik's CAPsMAN architecture, CAP stands for Controlled Access Point. A CAP is a MikroTik device that gives control of its wireless interface(s) to a CAPsMAN controller. The controller pushes configuration (SSID, security, channel, data path) to the CAP, which operates according to those centrally managed settings.

• A. Multicast DNS (mDNS/Bonjour)
• B. Layer 2 broadcast discovery on the same network segment Correct answer
• C. DNS SRV record lookup
• D. Layer 3 unicast to configured CAPsMAN IP addresses Correct answer

Options B and D are correct because a MikroTik CAP can discover the CAPsMAN controller via Layer 2 broadcast discovery (sending broadcast frames on the local network segment, which works when the CAP and controller are on the same VLAN), and via Layer 3 unicast discovery where the CAP sends UDP packets directly to one or more configured CAPsMAN IP addresses (which works across routed networks). MikroTik CAPs do not support DNS SRV record lookup or mDNS/Bonjour for controller discovery.

• A. 802.11a Correct answer
• B. 802.11g
• C. 802.11b
• D. 802.11n

Option A is correct because IEEE 802.11a, ratified in 1999, was the first standard to use the 5 GHz frequency band using OFDM modulation for data rates up to 54 Mbps. The original 802.11 and 802.11b operated only on 2.4 GHz, 802.11g added OFDM to 2.4 GHz, and 802.11n was the first to support both bands simultaneously.

• A. 40 MHz channel bonding Correct answer
• B. OFDM modulation
• C. MIMO with multiple spatial streams Correct answer
• D. WPA2 encryption support

Options C and A are correct because 802.11n introduced MIMO (Multiple Input Multiple Output) technology with multiple spatial streams, allowing simultaneous transmission of independent data streams across multiple antennas for multiplied throughput, and 40 MHz channel bonding, which doubles the channel width compared to the 20 MHz channels used by 802.11a/g. OFDM modulation was already introduced by 802.11a (in 1999) and used by 802.11g, and WPA2 encryption was defined by the 802.11i amendment independently of 802.11n.