100-150 Question 228
Select 3You are troubleshooting connectivity issues on a network. You attempt to ping a remote server using its IP address, but the ping requests time out. Next, you use the 'tracert' (or 'traceroute') command and notice that the trace stops after reaching your network's firewall. Which of the following could explain the issue?
- A
The firewall is configured to block ICMP traffic.
- B
The remote server is offline or unreachable.
- C
The DNS server is misconfigured and cannot resolve the server's hostname.
- D
The firewall is blocking all outbound traffic to the remote server's IP address.
- E
The traceroute command is not supported on your operating system.
Show answer and explanation
Correct answers: A, B, D
Explanation
The scenario indicates that both ping and tracert fail to reach the remote server, suggesting potential issues with the firewall or the server itself. Firewalls can block ICMP packets required for ping and traceroute, or they can restrict outbound traffic to certain destinations. Alternatively, the remote server might simply be offline. However, DNS misconfiguration and unsupported traceroute tools don't align with the specific details of the problem.
- A. Correct.
The firewall blocking ICMP traffic could prevent ping requests and traceroute from completing, as both rely on ICMP for replies.
- B. Correct.
If the remote server is offline or unreachable, it would not respond to ping requests, causing timeouts.
- C. Incorrect.
A misconfigured DNS server might prevent hostname resolution, but this would not affect pinging the server by its IP address, as shown in the scenario.
- D. Correct.
The firewall blocking all outbound traffic to the server's IP could also explain why both ping and traceroute fail to reach the server.
- E. Incorrect.
Traceroute being unsupported on the operating system is unlikely in this scenario, as the trace successfully starts but stops at the firewall.