What can be concluded from the picture below?

The correct answer is A. The 4 router has ICMP time exceeded message disabled. A traceroute showing no response at a specific hop indicates that router is not returning ICMP Time Exceeded messages, which causes asterisks to appear for that hop in the output.

Reconnaissance, Scanning, and Enumeration

Question

Exhibit

Options

AThe 4 router has ICMP time exceeded message disabled
BThe user IP address is 65.35.35.101

How the community answered

(33 responses)

A
73% (24)
B
27% (9)

Why each option

A traceroute showing no response at a specific hop indicates that router is not returning ICMP Time Exceeded messages, which causes asterisks to appear for that hop in the output.

AThe 4 router has ICMP time exceeded message disabledCorrect

When a router's ACL or firewall policy is configured to block or not generate ICMP Time Exceeded messages, traceroute displays asterisks for that hop because no reply is received before the timeout. The picture shows this condition at hop 4, meaning that specific router is silently dropping packets with an expired TTL rather than sending the expected ICMP response back to the source.

BThe user IP address is 65.35.35.101

An IP address visible within a traceroute output represents a router interface along the path, not the originating user's address, and the value 65.35.35.101 cannot be conclusively identified as the user's IP from the traceroute alone.

Concept tested: ICMP Time Exceeded blocking and traceroute hop behavior

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/how-tracert-works

Topics

#ICMP time exceeded#traceroute#network topology#router behavior

Community Discussion

No community discussion yet for this question.

Full GCIH Practice