An administrator is unable to connect to servers in the DMZ. Which of the following commands should the administrator run to determine where the connection failure occurs?

The `traceroute` command (or `tracert` on Windows) shows the path an IP packet takes to reach a destination by displaying each router, or hop, it traverses. This allows an administrator to identify the exact point in the network where connectivity is lost, whether it's a firewall, an intermediate router, or the destination server itself.

`netstat` displays active network connections, routing tables, and network interface statistics on the local machine, which is useful for checking local connectivity but not for diagnosing path issues to a remote server.