Which combination of actions enables VLAN filtering on a MikroTik bridge and creates VLAN 10?

• A. Enable VLAN filtering on the bridge but do not create the VLAN
• B. Create VLAN 10 on interface ether1 and attach to bridge
• C. Enable VLAN filtering on the bridge and create VLAN 2 as /interface vlan add name=vlan2 vlan-id=2 interface=bridge1
• D. Enable vlan-filtering on the bridge and create VLAN 10 as /interface vlan add name=vlan10 vlan-id=10 interface=bridge1

Answer: (D)

VLAN filtering on a MikroTik bridge works by turning on the bridge’s VLAN filtering feature and then defining the VLANs you want to pass as separate VLAN interfaces attached to that bridge. Simply enabling filtering won’t create any VLANs by itself—you must also create the VLAN interfaces that represent each VLAN on the bridge.

The best choice does both: enable VLAN filtering on the bridge and create a VLAN interface for VLAN 10 attached to that bridge, using a command like /interface vlan add name=vlan10 vlan-id=10 interface=bridge1. This pairs the filtering capability with a real VLAN on the bridge, so VLAN 10 is recognized and can be managed or routed as needed.

The other options either enable filtering without creating the VLAN, create the VLAN on a physical interface rather than on the bridge, or create a VLAN with a different ID, so they don’t fulfill the requirement of enabling filtering and defining VLAN 10 on the bridge.