Question

Difficulty: MediumUtilizing Command-Line Network Troubleshooting Utilities

A network administrator is systematically troubleshooting an end user's workstation that cannot access an internal web application located at `https://app.corp.local`. Place the command-line utility operations in the logical sequential order recommended for isolation, starting from basic local network interface validation up to upper-layer protocol testing.

  1. 1Run `ipconfig /all` to verify local IP configuration, default gateway address, and assigned DNS servers.
  2. 2Run `ping 127.0.0.1` and then ping the local default gateway address to verify local stack integrity and LAN connectivity.
  3. 3Run `nslookup app.corp.local` to determine if the local system correctly resolves the domain name to an IP address.
  4. 4Run `tracert 10.20.30.50` (using the resolved server IP) to trace the path and pinpoint any intermediate router drops.
  5. 5Run `netstat -an` or attempt a socket connection test (such as `curl -v https://10.20.30.50`) to verify transport layer port accessibility on TCP 443.

Answer

The correct order follows a structured bottom-up / progressive isolation approach: 1. Verify local IP settings (`ipconfig /all`), 2. Test ICMP loopback and default gateway reachability (`ping`), 3. Validate DNS name resolution (`nslookup`), 4. Identify network path failure points (`tracert`), 5. Verify transport layer port and service responsiveness (`netstat`/socket test).
The logical troubleshooting workflow progresses systematically from host interface verification (`ipconfig /all`), to local gateway reachability (`ping`), to application layer resolution (`nslookup`), to path routing analysis (`tracert`), and finally to service port level inspection (`netstat`).

Step-by-Step Solution

1
Check local network interface status and assigned IP parameters using `ipconfig /all`.
Confirms the host has a valid IP address, subnet mask, gateway, and DNS server configuration.
Troubleshooting should start at Layer 1-3 local host verification before attempting remote target diagnosis.
2
Test ICMP ping to loopback (`127.0.0.1`) and default gateway.
Confirms the internal network stack functions and local segment connectivity is intact.
If the default gateway is unreachable, remote routing and DNS tests will fail.
3
Execute DNS lookup using `nslookup app.corp.local`.
Determines whether hostname resolution is functioning and yields the target destination IP.
Name resolution problems prevent applications from forming connections even if IP routing is fully operational.
4
Trace path hops to target server using `tracert`.
Identifies the exact intermediate router hop where latency spikes or packet loss occurs.
Path tracing isolates WAN or multi-router forwarding failures along the path to the server IP.
5
Verify target service port accessibility using transport/session tools (`netstat` / port socket check).
Distinguishes between network layer reachability and service-level firewall or application port blocks.
Upper-layer checks verify that TCP port 443 (HTTPS) is accepting connections once path reachability is confirmed.

Key Concept

Structured Command-Line Diagnostic Sequence for End-to-End Connectivity
Rate this question