nerdexam
CompTIA

XK0-004 · Question #230

A junior systems administrator is diagnosing an issue with latency. The administrator issues the Given this scenario and the output, which of the following should be reported to the network team for…

The correct answer is C. Host 2 is experiencing high packet loss, indicating the link is overloaded. F. Host 3 is set to filter ICMP echo packets. Traceroute output distinguishes real link-level packet loss from ICMP filtering at a device, which are separate issues requiring different network team actions.

Troubleshooting and Diagnostics

Question

A junior systems administrator is diagnosing an issue with latency. The administrator issues the Given this scenario and the output, which of the following should be reported to the network team for investigation? (Choose two.)

Exhibit

XK0-004 question #230 exhibit

Options

  • AHost 1 is set to filter ICMP reply packets.
  • BHost 1 is set to filter ICMP echo packets.
  • CHost 2 is experiencing high packet loss, indicating the link is overloaded.
  • DHost 2 is experiencing low bandwidth, indicating the ISP is blocking traffic.
  • EHost 3 is set to filter ICMP reply packets.
  • FHost 3 is set to filter ICMP echo packets.

How the community answered

(60 responses)
  • A
    3% (2)
  • B
    22% (13)
  • C
    58% (35)
  • D
    7% (4)
  • E
    10% (6)

Why each option

Traceroute output distinguishes real link-level packet loss from ICMP filtering at a device, which are separate issues requiring different network team actions.

AHost 1 is set to filter ICMP reply packets.

The traceroute output shows Host 1 responding normally with round-trip times, which rules out any ICMP reply packet filtering at that hop.

BHost 1 is set to filter ICMP echo packets.

If Host 1 were filtering ICMP echo packets it would not appear in the traceroute output at all, which contradicts the output showing a valid response from that hop.

CHost 2 is experiencing high packet loss, indicating the link is overloaded.Correct

Consistent packet loss at Host 2 that persists into subsequent hops indicates genuine link congestion or overload rather than simple ICMP filtering - this is a real throughput problem on the path that warrants network team investigation.

DHost 2 is experiencing low bandwidth, indicating the ISP is blocking traffic.

ISP-level bandwidth limiting would manifest as degraded throughput uniformly across multiple hops rather than as isolated packet loss concentrated at a single host.

EHost 3 is set to filter ICMP reply packets.

ICMP reply filtering means a device receives echo requests but silently drops its own replies - however, the output pattern for Host 3 indicates it is not receiving the echo requests at all, pointing to echo filtering rather than reply filtering.

FHost 3 is set to filter ICMP echo packets.Correct

When Host 3 shows only asterisks in traceroute output but traffic continues beyond it, the device is dropping incoming ICMP echo request packets before it can respond - this is echo (request) filtering, not reply filtering, and must be reported separately from the packet loss issue.

Concept tested: Traceroute output interpretation and ICMP filtering detection

Source: https://linux.die.net/man/8/traceroute

Topics

#ICMP filtering#packet loss#traceroute#network latency

Community Discussion

No community discussion yet for this question.

Full XK0-004 Practice