nerdexam
CompTIA

SY0-301 · Question #393

After a network outage, a PC technician is unable to ping various network devices. The network administrator verifies that those devices are working properly and can be accessed securely. Which of the

The correct answer is A. ICMP is being blocked. The ping utility relies on ICMP Echo Request and Echo Reply messages, which are commonly blocked by firewalls or security policies while other access methods remain functional. This explains why devices can be reached securely but not pinged.

Security operations

Question

After a network outage, a PC technician is unable to ping various network devices. The network administrator verifies that those devices are working properly and can be accessed securely. Which of the following is the MOST likely reason the PC technician is unable to ping those devices?

Options

  • AICMP is being blocked
  • BSSH is not enabled
  • CDNS settings are wrong
  • DSNMP is not configured properly

How the community answered

(62 responses)
  • A
    79% (49)
  • B
    11% (7)
  • C
    3% (2)
  • D
    6% (4)

Why each option

The ping utility relies on ICMP Echo Request and Echo Reply messages, which are commonly blocked by firewalls or security policies while other access methods remain functional. This explains why devices can be reached securely but not pinged.

AICMP is being blockedCorrect

ICMP is the protocol used by the ping command, and firewalls or ACLs frequently block ICMP traffic as a security measure. Because the network administrator confirmed devices are accessible via secure methods (such as SSH), the infrastructure is functional, but ICMP packets are being dropped before they reach the destination or return to the technician.

BSSH is not enabled

SSH being enabled or disabled has no effect on ICMP-based ping responses; these are separate protocols.

CDNS settings are wrong

Incorrect DNS settings would prevent hostname resolution but would not cause ping failures if pinging by IP address, and the scenario implies devices were verified to be working.

DSNMP is not configured properly

SNMP is used for network device monitoring and management and has no relationship to the ICMP protocol used by ping.

Concept tested: ICMP traffic filtering and ping troubleshooting

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-icmp-rule

Topics

#ICMP#protocol filtering#network troubleshooting#ping

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice