Acronyms and Command-Line Tool Quick Table

Key Takeaways

  • Acronym items are usually scenario questions in disguise—map each acronym to where it appears in a troubleshooting workflow.
  • Command-line tools map to layers: local config, name resolution, path testing, port/socket testing, and packet inspection.
  • Use ipconfig/ifconfig/ip to verify local addressing before chasing remote services, then move outward.
  • Use ping and traceroute carefully—ICMP can be filtered even when the application works fine.
  • Use nslookup/dig for DNS, arp for local neighbor mapping, and netstat/ss for listening ports and active sessions.
Last updated: June 2026

Acronyms and Command-Line Tools

N10-009 acronym items (Objective 1.8 lists the official acronym set) are usually scenario questions in disguise. A prompt rarely asks "What does DHCP mean?" Instead it says a client has an APIPA address and asks which service or tool to check. Likewise, tool questions (Objective 5.x) hand you a symptom and ask which command isolates it. Learn each item by its job in the workflow.

Acronym Quick Table

AcronymMeaningFast association
ACLAccess Control ListPermit or deny traffic
ARPAddress Resolution ProtocolIPv4-to-MAC on the local segment
BGPBorder Gateway ProtocolInternet/external routing (path-vector)
CIDRClassless Inter-Domain RoutingPrefix notation such as /24
DHCPDynamic Host Configuration ProtocolAutomatic IP assignment
DNSDomain Name SystemNames to IP addresses
FHRPFirst Hop Redundancy ProtocolGateway redundancy concept
HSRP/VRRPHot Standby / Virtual Router RedundancyRedundant default gateway
IDS/IPSIntrusion Detection/Prevention SystemAlerts vs blocks
LDAPLightweight Directory Access ProtocolDirectory queries
MTUMaximum Transmission UnitLargest payload before fragmentation (1500 default)
NACNetwork Access ControlPosture/identity-based access
NATNetwork Address TranslationPrivate-to-public translation
NTPNetwork Time ProtocolTime synchronization
OSPFOpen Shortest Path FirstLink-state interior routing
PoEPower over EthernetPower + data on twisted pair
RADIUSRemote Authentication Dial-In User ServiceAAA for VPN/Wi-Fi/802.1X
SNMPSimple Network Management ProtocolMonitoring/management
STPSpanning Tree ProtocolLayer 2 loop prevention
VLANVirtual LANLayer 2 segmentation
VPNVirtual Private NetworkEncrypted tunnel over untrusted network
VRFVirtual Routing and ForwardingSeparate routing tables

Command-Line Tool Table

ToolPlatformUse
ipconfigWindowsView/renew IP config (/all, /release, /renew)
ifconfigLinux/macOS (legacy)View interface config
ipLinuxAddresses, routes, links (ip addr, ip route)
pingAllReachability/latency via ICMP
traceroute / tracertLinux·macOS / WindowsHop-by-hop path discovery
pathping / mtrWindows / LinuxCombined path + per-hop loss
nslookup / digAll / Linux·macOSDNS query testing
arp -aAllLocal IPv4-to-MAC cache
netstat / ssAll / LinuxConnections and listening ports
route / netshAll / WindowsView or change routing and config
nmapInstalledPort scan/service discovery (with authorization)
tcpdump / WiresharkLinux·macOS / GUIPacket capture and analysis
curlAllTest HTTP/HTTPS endpoints

Tool Selection Workflow

QuestionTool examples
Valid IP, mask, gateway, DNS?ipconfig /all, ip addr, ip route
Does the name resolve?nslookup, dig
Reachable at Layer 3 (ICMP allowed)?ping
Where does the path stop?traceroute, tracert, mtr
Is the service port open/listening?netstat, ss, nmap, curl
What is actually on the wire?tcpdump, Wireshark

Mini Scenarios

SymptomFirst useful tool
Windows client has no network accessipconfig /all
Linux server may have wrong default routeip route
Site fails only by namenslookup or dig
Suspected blocked HTTPS servicecurl, port test, firewall logs
Suspected duplicate IP on the LANarp -a, switch MAC table

Worked Scenario: "The Server Is Down" (But It Isn't)

A help-desk ticket says an internal web app is "down." Resist jumping to a tool—work outward by layer. First confirm local addressing with ipconfig /all or ip addr: a 169.254 address or a missing gateway redirects you to DHCP, not the server. Next test name resolution with nslookup app.corp.local; a wrong or empty record points at DNS, not the app. If the name resolves, try ping to the server IP, but remember ICMP may be filtered, so a failed ping is not proof of an outage. The decisive test is the actual service port: curl -v https://app.corp.local or a port check on 443.

If the TCP handshake completes but the page errors, the network is fine and the application or web service is the fault domain. This sequence—local config, DNS, reachability, port, application—prevents the most common Network+ trap of blaming the wrong layer.

ICMP, TTL, and MTU Gotchas

Three behaviors trip candidates. ICMP can be rate-limited or blocked by firewalls, so traceroute may show timeouts mid-path while traffic still flows end to end—do not read a starred hop as a dead router. The TTL (time to live) field decrements at each hop and prevents loops; a destination unreachable due to TTL expiry signals a routing loop, not a dead host.

MTU mismatches (default Ethernet 1500 bytes) cause large packets to fail while small ones like ping succeed; the clue is "small transfers work, large file copies or TLS handshakes hang." Knowing these means you interpret tool output correctly instead of misreading a filtered or fragmented path as a true failure.

Common Traps

  • Running traceroute before confirming the host even has a valid IP configuration.
  • Assuming a ping failure proves the application is down—ICMP may simply be filtered.
  • Using nmap or packet capture without authorization in a production environment.
  • Forgetting that DNS can return the wrong address even when the server responds.
  • Confusing ARP (local IPv4-to-MAC) with DNS (name-to-IP) resolution.
  • Treating a command name as universal when flags differ across operating systems.
Test Your Knowledge

A website fails only when accessed by name but works by IP address. Which tool most directly isolates the cause?

A
B
C
D
Test Your Knowledge

A Linux server may have the wrong default gateway. Which command family is most appropriate?

A
B
C
D
Test Your KnowledgeMulti-Select

Which tool-to-purpose matches are correct? Select three.

Select all that apply

arp for the local IPv4-to-MAC cache
traceroute/tracert for path discovery
tcpdump or Wireshark for packet capture
DNS for measuring cable length
PoE for resolving hostnames