XK0-004 · Question #230
A junior systems administrator is diagnosing an issue with latency. The administrator issues the Given this scenario and the output, which of the following should be reported to the network team for…
The correct answer is C. Host 2 is experiencing high packet loss, indicating the link is overloaded. F. Host 3 is set to filter ICMP echo packets. Traceroute output distinguishes real link-level packet loss from ICMP filtering at a device, which are separate issues requiring different network team actions.
Question
A junior systems administrator is diagnosing an issue with latency. The administrator issues the Given this scenario and the output, which of the following should be reported to the network team for investigation? (Choose two.)
Exhibit
Options
- AHost 1 is set to filter ICMP reply packets.
- BHost 1 is set to filter ICMP echo packets.
- CHost 2 is experiencing high packet loss, indicating the link is overloaded.
- DHost 2 is experiencing low bandwidth, indicating the ISP is blocking traffic.
- EHost 3 is set to filter ICMP reply packets.
- FHost 3 is set to filter ICMP echo packets.
How the community answered
(60 responses)- A3% (2)
- B22% (13)
- C58% (35)
- D7% (4)
- E10% (6)
Why each option
Traceroute output distinguishes real link-level packet loss from ICMP filtering at a device, which are separate issues requiring different network team actions.
The traceroute output shows Host 1 responding normally with round-trip times, which rules out any ICMP reply packet filtering at that hop.
If Host 1 were filtering ICMP echo packets it would not appear in the traceroute output at all, which contradicts the output showing a valid response from that hop.
Consistent packet loss at Host 2 that persists into subsequent hops indicates genuine link congestion or overload rather than simple ICMP filtering - this is a real throughput problem on the path that warrants network team investigation.
ISP-level bandwidth limiting would manifest as degraded throughput uniformly across multiple hops rather than as isolated packet loss concentrated at a single host.
ICMP reply filtering means a device receives echo requests but silently drops its own replies - however, the output pattern for Host 3 indicates it is not receiving the echo requests at all, pointing to echo filtering rather than reply filtering.
When Host 3 shows only asterisks in traceroute output but traffic continues beyond it, the device is dropping incoming ICMP echo request packets before it can respond - this is echo (request) filtering, not reply filtering, and must be reported separately from the packet loss issue.
Concept tested: Traceroute output interpretation and ICMP filtering detection
Source: https://linux.die.net/man/8/traceroute
Topics
Community Discussion
No community discussion yet for this question.
