MikroTik MTCUME (mtcume) Certification Exam: User Management Engineer

Certification Overview

• Exam name: MTCUME
• Vendor: MikroTik
• Exam code: mtcume
• Duration: 60 minutes
• Total questions: 25
• Passing score: 60%

About This Certification

The MikroTik Certified User Management Engineer (MTCUME) certification validates the ability to manage RouterOS-based networks at scale with an emphasis on centralized user management and secure remote access. It covers configuration patterns used to deploy and operate user authentication, authorization, accounting, and policy enforcement across corporate environments. The PPP domain includes PPP Profile and PPP Secret configuration, including service and profile selection, local and remote addresses, incoming and outgoing filters, address lists, TCP MSS adjustment (Change TCP-MSS), encryption options, session timeout, rate-limit configuration, and the only-one setting. It also covers routes configuration, Limit Bytes In/Limit Bytes Out, and IP Pool management such as setting address ranges and next pool behavior. The PPTP and L2TP domain covers theory and comparison, plus client and server implementations. Client topics include client setup, profile configuration, dial on demand, and adding a default route and static routes. Server topics include enabling the server, setting up profiles, adding clients to PPP secret, and assigning static interfaces for clients for both PPTP Server and L2TP Server. The PPPoE domain addresses PPPoE server and client theory, usage environments, and comparison to other PPP protocols. It includes PPPoE client setup (interface selection, service name, and profile configuration) and PPPoE server setup (enabling the server, setting profiles, adding clients to PPP secret, and adding static interfaces for clients), as well as hardening by removing any IP address from the PPPoE server interface. It also covers encryption choices (profiles with and without encryption), configuring a PPPoE client without encryption, and Interface ECMP with ECMP routes for PPP interfaces. The Bridging domain focuses on Layer 2 extension scenarios using tunnels and PPP bridging features. It includes L2TP with EoIP (setting L2TP and EoIP tunnels, creating a bridge, adding required interfaces to bridge ports, and verifying Ethernet connectivity between remote nodes), L2TP with VPLS (setting L2TP and VPLS tunnels and bridging), and L2TP with BCP (using BCP to bridge a PPP interface and adding it to a bridge). It also covers Multilink Protocol configuration, including enabling multilink with correct MRRU settings, disabling mangle rules used for MSS adjustment, and optional MLPPP scenarios such as configuring a client with multiple interfaces and setting a PPPoE server with MLPPP support. The IPsec domain covers VPN fundamentals and how IPsec compares with other VPN protocols. It includes IPsec peer configuration with different authentication methods, exchange modes, encryption and hash algorithms, NAT-Traversal, lifetime and lifebytes, and DPD protocol behavior. Policy topics include IPsec protocol and action selection, tunnel configuration, generating dynamic policy, proposal settings (encryption and authentication algorithms, lifetime, and PFS), and operational verification using Installed-SA and Flush SA, including building IPsec between two routers when NAT is present with peer, policy, and NAT rules. The HotSpot domain covers HotSpot concepts and usage environments, initial setup with default settings, and multiple login methods such as HTTP CHAP/PAP, MAC, Cookie, HTTPS, Trial, and RADIUS. It includes user management (adding users, mapping MAC-address to a user or username, limiting uptime and bytes, resetting limits, and monitoring via Host Table and Active Table), plus SNMP for users. Profile configuration includes keepalive timeout, shared users, rate-limit, address-list, incoming/outgoing filter, and incoming/outgoing packet mark, along with bypass HotSpot, walled garden and walled garden IP, IP binding, and customization options such as advertisement and customized pages. The RADIUS domain covers configuring RouterOS as a RADIUS client (adding a RADIUS client, selecting services, and using RADIUS for a specific service) and integrating with a RADIUS server using User Manager. It includes installing the latest user-manager package, adding routers, adding users, setting profiles, and enabling RADIUS incoming. Exam details: the provided exam format indicates 60 minutes duration, 25 questions, and a 60% passing score.

Who Should Take This Exam?

Network Engineer, Network Technician, Systems Administrator, Network Administrator, ISP Support Engineer, NOC Technician, Security Administrator, VPN Engineer

Prerequisites

Valid MTCNA certification or equivalent foundational RouterOS and networking knowledge.

Topics Covered

• Topics to be announced

Question Types

• Multiple Choice (Single Answer)
• Multiple Choice (Multiple Answers)
• True / False

MTCUME Practice Questions

Our question bank contains 456+ practice questions for this certification. Sample questions from each exam chapter. Expand a question to see the answer choices. With a subscription, you get unlimited practice exams with randomized questions from our full question bank.

Frequently Asked Questions

How many questions are on the exam?

The MTCUME exam contains 25 questions.

What is the passing score?

You need 60% to pass.

How long is the exam?

You have 60 minutes to complete the exam.