220-1102 Question 810
Single answerThird-party toolsA technician is troubleshooting a Windows 11 workstation that intermittently loses internet access, but only when connected to the corporate Wi-Fi. The user reports that websites sometimes fail to load even though the wireless connection remains active. The technician suspects a name resolution problem rather than a physical network issue and wants to use a common third-party tool to verify whether DNS responses are being received and how long the lookups take. Which tool should the technician use?
- A
Wireshark
- B
Recuva
- C
Clonezilla
- D
Nmap
Show answer and explanation
Correct answer: A
Explanation
This question focuses on selecting the appropriate third-party tool for a realistic troubleshooting task. When a technician suspects DNS issues, a protocol analyzer such as Wireshark is the most appropriate choice because it can capture packets and show whether DNS requests and responses are occurring as expected. This is more effective than using storage tools like Recuva or Clonezilla, which are unrelated to network troubleshooting. Nmap is a legitimate third-party networking tool, but it is designed for host and port discovery rather than detailed packet-level analysis of intermittent DNS problems. In practice, technicians commonly use Wireshark to inspect DNS traffic, timing, retransmissions, and response codes. This aligns with standard troubleshooting best practices: identify the symptom, isolate the likely layer or service involved, and use the tool that directly validates the suspected failure point.
- A. Correct.
Correct. Wireshark is a third-party protocol analyzer that can capture and inspect live network traffic, including DNS queries and responses. In this scenario, it allows the technician to verify whether DNS requests are leaving the workstation, whether replies are returning, and whether there is excessive delay or retransmission. This directly supports troubleshooting intermittent name resolution issues on a live network connection.
- B. Incorrect.
Incorrect. Recuva is a third-party file recovery utility used to recover deleted files from disks and removable media. It does not analyze network traffic or help verify DNS behavior. Someone might choose it if they confuse general troubleshooting tools with network diagnostic tools.
- C. Incorrect.
Incorrect. Clonezilla is a disk imaging and cloning tool used for deployment, backup, and restoration tasks. It is useful for system migration and recovery, not for analyzing intermittent DNS failures on a wireless network. This option reflects a misconception that any advanced third-party utility is appropriate for troubleshooting connectivity issues.
- D. Incorrect.
Incorrect. Nmap is a third-party network scanning tool primarily used to discover hosts, open ports, and services. While it can be useful for broader network reconnaissance and service verification, it is not the best choice for capturing and examining DNS packet exchanges in real time. A technician trying to confirm actual query/response behavior would typically use a packet analyzer instead.