nerdexam
Cisco

200-901 · Question #138

Users cannot access a webserver and after the traffic is captured, the capture too* shows an ICMP packet that reports "communication administratively prohibited" What Is the cause of this webserver…

The correct answer is A. An access list along the path is blocking the traffic. The correct answer is A. The ICMP 'Destination Unreachable - Communication Administratively Prohibited' message (Type 3, Code 13) is explicitly generated when an Access Control List (ACL) on a router or firewall denies a packet. The word 'administratively' is the key…

Network Fundamentals

Question

Users cannot access a webserver and after the traffic is captured, the capture too* shows an ICMP packet that reports "communication administratively prohibited" What Is the cause of this webserver access Issue?

Options

  • AAn access list along the path is blocking the traffic
  • BThe traffic is not allowed to be translated with NAT and dropped.
  • CUsers must authenticate on the webserver to access It
  • DA router along the path is overloaded and thus dropping traffic

How the community answered

(62 responses)
  • A
    95% (59)
  • C
    3% (2)
  • D
    2% (1)

Explanation

The correct answer is A. The ICMP 'Destination Unreachable - Communication Administratively Prohibited' message (Type 3, Code 13) is explicitly generated when an Access Control List (ACL) on a router or firewall denies a packet. The word 'administratively' is the key indicator-it means a network policy or rule (i.e., an ACL) is intentionally blocking the traffic, not a routing or reachability failure. Answer B (NAT) is incorrect; NAT failures produce different errors or silent drops. Answer C is incorrect; web authentication is an application-layer mechanism and does not generate ICMP messages. Answer D is incorrect; an overloaded router would drop packets without sending ICMP 'administratively prohibited'.

Topics

#ICMP#Access Control Lists#Network Troubleshooting

Community Discussion

No community discussion yet for this question.

Full 200-901 Practice