200-901 · Question #138
Users cannot access a webserver and after the traffic is captured, the capture too* shows an ICMP packet that reports "communication administratively prohibited" What Is the cause of this webserver…
The correct answer is A. An access list along the path is blocking the traffic. The correct answer is A. The ICMP 'Destination Unreachable - Communication Administratively Prohibited' message (Type 3, Code 13) is explicitly generated when an Access Control List (ACL) on a router or firewall denies a packet. The word 'administratively' is the key…
Question
Users cannot access a webserver and after the traffic is captured, the capture too* shows an ICMP packet that reports "communication administratively prohibited" What Is the cause of this webserver access Issue?
Options
- AAn access list along the path is blocking the traffic
- BThe traffic is not allowed to be translated with NAT and dropped.
- CUsers must authenticate on the webserver to access It
- DA router along the path is overloaded and thus dropping traffic
How the community answered
(62 responses)- A95% (59)
- C3% (2)
- D2% (1)
Explanation
The correct answer is A. The ICMP 'Destination Unreachable - Communication Administratively Prohibited' message (Type 3, Code 13) is explicitly generated when an Access Control List (ACL) on a router or firewall denies a packet. The word 'administratively' is the key indicator-it means a network policy or rule (i.e., an ACL) is intentionally blocking the traffic, not a routing or reachability failure. Answer B (NAT) is incorrect; NAT failures produce different errors or silent drops. Answer C is incorrect; web authentication is an application-layer mechanism and does not generate ICMP messages. Answer D is incorrect; an overloaded router would drop packets without sending ICMP 'administratively prohibited'.
Topics
Community Discussion
No community discussion yet for this question.