Using Traceroute to Identify Network Traffic Restrictions

N10-009 By islever Editorial Last updated

Short answer

B Traceroute identifies the specific network hop where packet traffic is being restricted or dropped by displaying the path to the destination.

Question

A network administrator manages multiple computers and notices that three computers are no longer communicating with the network. Which of the following commands best identifies whether other devices are restricting packet traffic?
  1. ipconfig
  2. traceroute Correct Answer
  3. nmap
  4. ping

Key Takeaways

The main trap is choosing ping, which only confirms reachability but fails to pinpoint the location of traffic restrictions within the network path.

This page explains why traceroute is the correct tool for identifying network devices that restrict packet traffic, compared to ping or ipconfig.

Common mistake: Choosing ping (D) because it is commonly used for connectivity checks; however, it cannot reveal intermediate hops or identify where a restriction occurs along the route.

Expert Analysis

The question asks for the command that best identifies if other devices are restricting packet traffic. The key phrase is "whether other devices are restricting," which implies a need to see the path and identify where restrictions (firewalls, ACLs) occur.

  • ping (Option D) only tells you if the destination is reachable or not. It does not show intermediate hops or where the restriction happens.
  • ipconfig (Option A) shows local network configuration, not network path or external restrictions.
  • nmap (Option C) is used for port scanning and service discovery, not primarily for tracing the path of packets through the network to find restrictive devices.
  • traceroute (Option B) maps the path packets take to a destination. If a device is restricting traffic (e.g., via an ACL or firewall), traceroute will show timeouts (often as ) at the specific hop where the restriction occurs. This directly answers the scenario of identifying which* device is restricting traffic.

The comment supports Option B, noting that traceroute shows precisely which hop is dropping or filtering packets. This aligns with the goal of isolating the source of traffic restriction.

Exam Strategy

When a question asks to identify 'where' a problem occurs in the network path (e.g., latency, drop, restriction), choose path-tracing tools like traceroute or tracert. Use simple reachability tests like ping only when the question asks if a host is 'up' or 'reachable' without needing path details.

Frequently Asked Questions

What is the difference between ping and traceroute?

Ping checks if a destination is reachable and measures round-trip time. Traceroute maps the entire path packets take, showing each hop and identifying where packets are dropped or delayed.

Can nmap be used to find restricted devices?

Nmap is primarily for port scanning and service discovery. While it can detect open/closed ports, it does not trace the network path to show which intermediate routers are restricting traffic.

More N10-009 FAQ →

Discussion 1 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 1

  1. ERB14 👍 1 Answered B
    B. traceroute: Traces the path packets take across a network and shows precisely which hop or intermediate device is dropping, filtering, or restricting packets (often shown as timeouts/asterisks).

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Practice All N10-009 Questions

Access 100 questions with complete answers and detailed explanations.

View Full N10-009 Practice Test →

← Back to N10-009 Study Guide