Free study guide

MikroTik MTCSE Study Guide

MikroTik Certified Security Engineer (MTCSE)

The MikroTik Certified Security Engineer (MTCSE) course covers securing RouterOS networks: the firewall, attacks at each OSI layer, cryptography, securing the router, and secure tunnels.

  • Exam code MTCSE
  • Engineer level
  • 6 course modules

This guide is free, with no sign-up. It explains every MikroTik MTCSE exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 6chapters
  • 25topics
  • 10diagrams and exhibits
  • 2 h 5 minfast track
Start with Introduction
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

Chapters

Open a chapter to see its topics and how long each takes.

1Introduction3 topics · 14 min fast trackAttacks, services and mechanisms, the most common threats and a security deployment checklist for RouterOS.
  1. 1Attacks, Security Mechanisms and Security Services4 min
  2. 2The Most Common Threats to a Router Network5 min
  3. 3RouterOS Security Deployment Checklist5 min
Read the chapter overview →
2Firewall7 topics · 35 min fast trackPacket flow, stateful rules, RAW table, default setup, attack detection, advanced filters and bridge filter.
  1. 1Packet Flow and Firewall Chains5 min
  2. 2Stateful Firewall and Connection Tracking5 min
  3. 3The RAW Table and SYN Flood Mitigation5 min
  4. 4Default Configuration and Management Access5 min
  5. 5Detecting an Attack on Critical Infrastructure Services5 min
  6. 6Advanced Filter Options and ICMP Filtering5 min
  7. 7Bridge Filter and Layer 2 Firewalling5 min
Read the chapter overview →
3OSI Layer Attacks5 topics · 26 min fast trackMNDP, DHCP, TCP SYN, UDP, ICMP smurf, brute force and port scan attacks, with the matching defences.
  1. 1MNDP and DHCP Attacks and Prevention5 min
  2. 2TCP SYN and UDP Attacks and Prevention5 min
  3. 3ICMP Smurf Attacks and Prevention5 min
  4. 4FTP, Telnet and SSH Brute Force Prevention5 min
  5. 5Port Scan Detection and Prevention6 min
Read the chapter overview →
4Cryptography4 topics · 20 min fast trackTerminology, encryption methods, symmetric and asymmetric algorithms, PKI and certificates in RouterOS.
  1. 1Cryptography Terminology and Encryption Methods5 min
  2. 2Symmetric and Asymmetric Algorithms5 min
  3. 3Public Key Infrastructure (PKI)5 min
  4. 4Certificates in RouterOS5 min
Read the chapter overview →
5Securing the Router3 topics · 14 min fast trackPort knocking, secure HTTPS, SSH and WinBox access, default service ports and tunneling through SSH.
  1. 1Port Knocking5 min
  2. 2Secure Connections and Default Service Ports4 min
  3. 3Tunneling Through SSH5 min
Read the chapter overview →
6Secure Tunnels3 topics · 16 min fast trackIPsec fundamentals, L2TP over IPsec for remote access, and SSTP with certificates on MikroTik RouterOS.
  1. 1Introduction to IPsec6 min
  2. 2L2TP with IPsec5 min
  3. 3SSTP with Certificates5 min
Read the chapter overview →

Ready for more practice?

The full MikroTik MTCSE question bank has 446 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by MikroTik. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.