Tracert for Identifying a Load-Balanced Internet Link
Short answer
D Use tracert to reveal the routed path and identify which of the two load-balanced internet links is carrying the web application traffic.
Question
Key Takeaways
This question tests whether you can distinguish path-discovery from connection-listing tools in a multi-WAN load-balanced scenario, with the main trap being netstat's tempting view of active sockets.
Tracert is the tool that reveals the routed path and identifies which of two load-balanced internet links is carrying the web application traffic. This N10-009 page explains why netstat, ping, and nslookup do not provide that egress-link visibility.
Common mistake: Choosing netstat (A) because it lists active TCP connections is the common error; those local and remote addresses and ports do not show which load-balanced WAN link the router used, whereas tracert exposes the hop-by-hop path.
Expert Analysis
The deciding principle: path visibility, not socket visibility. Network+ tool-selection questions hinge on what evidence each utility is designed to produce. tracert (traceroute) sends probes with incrementing TTL values and records the Layer 3 routers that respond, so it exposes the forwarding path and the upstream gateway or ISP path. With two load-balanced internet links, the first distinct hop after the office router, or a later ISP-specific hop, shows which WAN link that flow is taking. That is exactly the fact the technician needs for the web application.
Mapping the scenario to option D. The office is not asking whether the web app is reachable, which is what ping answers, or what IP address its name resolves to, which is what nslookup answers. It needs the egress link. Option D, tracert, provides hop-by-hop path evidence from the client toward the web application, and differing gateway or ISP hops identify the selected link. It also gives per-hop latency, which is useful during a performance investigation.
Why netstat is the trap. Several comments favor option A because netstat shows active TCP connections, local and remote addresses, ports, and protocol state. That is accurate as far as it goes, but on a typical workstation behind NAT or a load-balancing router, those socket details do not reveal which of the two WAN links the router chose. Netstat on the router or firewall might show more, but the question does not specify that vantage point. The clean exam principle remains: for the route or egress link, use tracert; for local connection and port state, use netstat. The correct option is D.
Official Reference
- https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/tracert
- https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat
These links open the official vendor documentation in a new tab.
Exam Strategy
For tool-selection questions, identify the exact visibility the scenario needs before comparing commands. If it asks which path, gateway, or WAN link traffic uses, start with tracert or traceroute; if it asks about local listening ports, active sessions, or protocol state, consider netstat. Ping answers reachability and latency, while nslookup answers name resolution. That keyword-to-evidence mapping prevents choosing a familiar command that shows related but insufficient data.
Frequently Asked Questions
Why can't netstat show which load-balanced internet link the web app uses?
How does tracert identify the link in a dual-WAN office?
Are ping or nslookup useful for choosing between the two links?
Community Votes
64% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 12 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 12
-
chupapi_001 👍 8 Answered DTracert shows the exact route that packets take from source to destination, including all intermediate routers and network links
-
Trouble_Magnet 👍 3 Answered AThe correct answer is A. netstat. netstat: (Network Statistics) shows active network connections, including the source and destination IP addresses, ports, and protocols involved. This information can reveal which IP address (and thus, which internet link) is being used for the web application's traffic. tracert is incorrect, and the other two are as well. tracert: This command traces the route that packets take from the source computer to a destination host. It can identify network path issues, but it also doesn't specifically show which internet link is being used for a particular application.
-
Hundo_954 👍 3 Answered AA. Netstat - (short for "network statistics") displays detailed information about the active network connections and the routing tables. By using this tool, the technician can see which connections are active, their corresponding IP addresses, and the network interface being used.
-
timoco 👍 2 Answered AA. netstat Explanation: netstat: Shows active connections, including the local and remote IP addresses and which interface (and thus which internet link) the connection is using. This makes it the right tool to determine which link the web application traffic is taking. nslookup: Resolves domain names to IP addresses. It won’t show which internet link is being used. ping: Tests connectivity and latency to a host, but doesn’t indicate which link is handling the traffic. tracert: Shows the path packets take to a destination, but in a dual-link load-balanced setup, it won’t reliably tell you which specific link is being used by an active application session.
-
Jesus_KillsBadNature 👍 2 Answered DTraceroute shows the path packets take from the client to the destination, including each hop along the way. In an environment with multiple internet links/load balancing, this allows the technician to see which ISP path or gateway the web application traffic is actually using.
Show 7 more comments
-
NewpMej 👍 2 Answered AThe technician is trying to determine which link is being used for the web application according to the question. Netstat provides a detailed view of active network connections and can show which internet link is being used by the web application.
-
Anon1212 👍 2 Answered DBecause the question implicates a specific website, I'd choose D over A.
-
Dese_2point71 👍 1 Answered DD. tracert According to ChatGPT: "The tracert command is a network diagnostic tool that traces the path packets take from a source device to a destination, identifying intermediate routers along the route. The technician can use tracert to examine the routing path to the web application and potentially determine which internet link is carrying the traffic by identifying the intermediate network hops. Unlike netstat (network connection statistics), nslookup (DNS resolution), and ping (network connectivity testing), tracert provides information about the route traffic follows through a network, making it the best option for identifying the internet link being used."
-
6f7e8ce 👍 1This is just incorrect. Tracert shows you the hops traffic takes. It shows the IP address of each hop, so it would indicate which ISP link it is taking. Netstat will only show connections on the host. It will not indicate what ISP link it is using.
-
DrLez 👍 1 Answered Dtraceroute is a network diagnostic command-line tool used to trace the path that packets take to reach a destination host
-
HeatSquad77 👍 1 Answered DD. tracert (also traceroute) A command-line utility used to follow the path a packet takes between two hosts.
-
smpak 👍 1 Answered DTracert (Traceroute) – shows the actual path packets take through the network (hops).
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All N10-009 Questions
Access 100 questions with complete answers and detailed explanations.
View Full N10-009 Practice Test →