MikroTik MTCTCE (mtctce) Certification Exam: Traffic Control Engineer

The MikroTik MTCTCE (Certified Traffic Control Engineer) validates RouterOS skills for controlling traffic flow and managing QoS using queues, firewall features, and related network services.

Certification Overview

  • Exam name: MTCTCE
  • Vendor: MikroTik
  • Exam code: mtctce
  • Duration: 60 minutes
  • Total questions: 25
  • Passing score: 60%

About This Certification

The MikroTik Certified Traffic Control Engineer (MTCTCE) certification validates associate-level ability to control traffic flow and manage quality of service on a network using MikroTik RouterOS features such as queues and firewall capabilities. It focuses on how packets are processed through RouterOS and how that processing can be used to implement traffic management policies. Coverage includes Packet Flow Diagram concepts, including why the diagram is used, how packets traverse routing and bridging paths, how traffic relates to the connection to the router, and how to apply the diagram to both simple and more complex scenarios. This section ties packet traversal to practical decision points used later by firewall and queuing features. The certification also covers RouterOS firewall components across Firewall Filter, NAT, and Mangle. Topics include connection tracking, filter rules and chains (default and custom), rule actions, and common rule conditions. NAT topics include chains (default and custom), actions, common conditions, and NAT helpers. Mangle topics include chains (default and custom), actions, common conditions, and more complex conditions typically found in advanced/extra settings, along with UPnP behavior in traffic control contexts. Quality of Service is a major area, including HTB (Hierarchical Token Bucket) fundamentals and implementation using queue tree, HTB structure, dual limitation, priority handling, burst behavior, and queue types. Queue types covered include FIFO, SFQ, RED, and PCQ, along with queue sizing considerations. The scope also includes simple queues and how simple queues interact with queue tree configurations. Additional RouterOS services included are DNS Client and DNS Cache configuration (basic setup and static DNS entries), DHCP Client/Relay/Server (DHCP communication analysis, client identification and configuration, server configuration including DHCP networks, built-in and custom DHCP options, IP pool usage, advanced DHCP features, and DHCP relay configuration), and Web Proxy (basic configuration, proxy rule lists including access list, direct access list, cache list, and regular expression matching). Official format details list a 60-minute exam with 25 questions and a 60% passing score. The associated vendor training outline references a 2-day duration for the MTCTCE course and includes laboratory work aligned to each module.

Who Should Take This Exam?

Network Engineer, Network Technician, Network Administrator, Systems Administrator, ISP Engineer, NOC Technician, Security Engineer, Network Consultant

Prerequisites

MTCNA certification or equivalent foundational MikroTik RouterOS and networking knowledge.

Topics Covered

  • Topics to be announced

Question Types

  • Multiple Choice (Single Answer)
  • Multiple Choice (Multiple Answers)
  • True / False

MTCTCE Practice Questions

Our question bank contains 457+ practice questions for this certification. Sample questions from each exam chapter. Expand a question to see the answer choices. With a subscription, you get unlimited practice exams with randomized questions from our full question bank.

Packet Flow Diagram

In the MikroTik RouterOS packet flow diagram, which firewall chain processes packets that are transiting through the router from one interface to another?
  • Input
  • Forward
  • Output
  • Prerouting
At which chain in the MikroTik packet flow does destination NAT (dstnat) processing occur?
  • Prerouting
  • Postrouting
  • Forward
  • Input
Which chain in the MikroTik packet flow processes packets generated locally by the router itself?
  • Forward
  • Prerouting
  • Input
  • Output

Firewall (Filter, NAT, Mangle)

Which MikroTik firewall filter action silently discards a packet without sending any response to the sender?
  • reject
  • drop
  • tarpit
  • passthrough
In MikroTik RouterOS, which connection tracking state indicates a packet that belongs to an already established connection?
  • new
  • related
  • established
  • invalid
What is the purpose of the action=jump in a MikroTik firewall filter rule?
  • It immediately accepts the packet
  • It moves processing to a user-defined custom chain
  • It drops the packet and logs the event
  • It skips the next rule in the chain

Quality of Service (QoS)

What is the default queue discipline used by MikroTik simple queues?
  • SFQ (Stochastic Fairness Queuing)
  • PFIFO (Packet First In First Out)
  • PCQ (Per Connection Queue)
  • RED (Random Early Detection)
In MikroTik RouterOS, what does HTB stand for in the context of QoS?
  • High Throughput Bridge
  • Hierarchical Token Bucket
  • Host Traffic Balancer
  • Hardware Traffic Buffer
Which MikroTik queue type distributes bandwidth equally among active flows by hashing connections?
  • PFIFO
  • RED
  • SFQ
  • BFIFO

DNS Client / Cache

Where is the DNS cache configured in MikroTik RouterOS?
  • IP > DNS
  • System > DNS
  • IP > Services > DNS
  • Tools > DNS Cache
What must be enabled on a MikroTik router for it to respond to DNS queries from LAN clients?
  • The allow-remote-requests setting in IP > DNS
  • The DNS server package from System > Packages
  • A firewall rule permitting DNS traffic
  • The dns-proxy setting in IP > Services
An administrator configures a static DNS entry on a MikroTik router with name=intranet.local and address=192.168.1.10. What happens when a LAN client queries for intranet.local?
  • The router responds with 192.168.1.10 from its static entry without forwarding the query to upstream servers
  • The router forwards the query to the configured upstream DNS server
  • The router returns an NXDOMAIN response because .local is not a valid TLD
  • The query is only answered if the client is on the same subnet as 192.168.1.10

DHCP Client / Relay / Server

In the DHCP process, what is the correct order of the four-step DORA handshake?
  • Discover, Offer, Request, Acknowledge
  • Discover, Request, Offer, Acknowledge
  • Request, Discover, Acknowledge, Offer
  • Discover, Acknowledge, Request, Offer
In a MikroTik DHCP server configuration, what does the address-pool parameter specify?
  • The range of IP addresses available for dynamic assignment to clients
  • The DNS server addresses provided to clients
  • The list of MAC addresses allowed to receive leases
  • The static IP assignments for specific devices
Which transport protocol and ports does DHCP communication use?
  • UDP port 67 (server) and UDP port 68 (client)
  • TCP port 67 (server) and TCP port 68 (client)
  • UDP port 53 (server) and UDP port 53 (client)
  • TCP port 546 (server) and TCP port 547 (client)

Web Proxy

What is the default port used by the MikroTik web proxy?
  • 8080
  • 3128
  • 80
  • 8888
An administrator enables the MikroTik web proxy and wants all HTTP traffic from the LAN to be redirected through it without client configuration. Which feature accomplishes this?
  • A dst-nat rule redirecting TCP port 80 traffic to the router's proxy port (transparent proxy)
  • Enabling auto-redirect in the web proxy settings
  • Configuring a WPAD/PAC file on the DHCP server
  • Setting the proxy as the default gateway for clients
What is the purpose of the MikroTik web proxy access list?
  • It controls which URLs, source addresses, or destination hosts are allowed or denied through the proxy
  • It lists the IP addresses permitted to administer the proxy
  • It defines the order in which upstream proxy servers are contacted
  • It configures authentication credentials for proxy users

Frequently Asked Questions

How many questions are on the exam?

The MTCTCE exam contains 25 questions.

What is the passing score?

You need 60% to pass.

How long is the exam?

You have 60 minutes to complete the exam.

Practice with realistic mock exams to prepare for your MikroTik certification.

This platform provides independent practice questions and mock exams. It is not affiliated with, endorsed by, or sponsored by any certification vendor. All trademarks, certification names, and exam codes are the property of their respective owners and are used for identification purposes only.