Cisco CCNA 200-301 NAT Practice Test

Topic 25 focuses on NAT for the Cisco Certified Network Associate (CCNA) certification and the 200-301 exam, using Cisco networking and Cisco IOS concepts where relevant. For broader exam preparation, review the Cisco CCNA 200-301 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

Which IP address is assigned to an inside host as it appears on the inside network?

1. Overload
2. Outside local address
3. Inside local address
4. Dynamic NAT

Correct Answer: C

 

Correct Answer

Answer C is correct because the selected answer describes the IP address assigned to an inside host as it appears on the inside network.

Incorrect Answers

Answer A is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer B is incorrect because the “Outside local address” option describes a different concept: the address of an outside host as it appears to the inside network.

Answer D is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

 

Question 2

What is the address representing an inside host to the outside network after translation?

1. Static NAT
2. Inside global address
3. NAT source translation
4. NAT pool

Correct Answer: B

 

Correct Answer

Answer B is correct because the selected answer describes the address representing an inside host to the outside network after translation.

Incorrect Answers

Answer A is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer C is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer D is incorrect because the “NAT pool” option describes a different concept: a configured range of inside global addresses available for dynamic translation.

 

Question 3

What is the address of an outside host as it appears to the inside network?

1. Dynamic NAT
2. Inside global address
3. NAT source translation
4. Outside local address

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the address of an outside host as it appears to the inside network.

Incorrect Answers

Answer A is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer B is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

Answer C is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

 

Question 4

What is the actual globally routable address of an outside host?

1. Outside global address
2. Static NAT
3. NAT source translation
4. Inside global address

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the actual globally routable address of an outside host.

Incorrect Answers

Answer B is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer C is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer D is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

 

Question 5

What is a permanent one-to-one translation between an inside local address and an inside global address?

1. Static NAT
2. Inside local address
3. Outside local address
4. Inside global address

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a permanent one-to-one translation between an inside local address and an inside global address.

Incorrect Answers

Answer B is incorrect because the “Inside local address” option describes a different concept: the IP address assigned to an inside host as it appears on the inside network.

Answer C is incorrect because the “Outside local address” option describes a different concept: the address of an outside host as it appears to the inside network.

Answer D is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

 

Question 6

Which translation method temporarily maps inside local addresses to available addresses from a configured global pool?

1. Dynamic NAT
2. NAT inside interface
3. Static NAT
4. Dynamic NAT selection ACL

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Incorrect Answers

Answer B is incorrect because the “NAT inside interface” option describes a different concept: an interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

Answer C is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer D is incorrect because the “Dynamic NAT selection ACL” option describes a different concept: Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

 

Question 7

Which term describes port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports?

1. Dynamic NAT
2. PAT
3. NAT pool
4. Static NAT

Correct Answer: B

 

Correct Answer

Answer B is correct because Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.

Incorrect Answers

Answer A is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer C is incorrect because the “NAT pool” option describes a different concept: a configured range of inside global addresses available for dynamic translation.

Answer D is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

 

Question 8

What is a configured range of inside global addresses available for dynamic translation?

1. NAT pool
2. Dynamic NAT
3. Inside global address
4. ip nat inside source static

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a configured range of inside global addresses available for dynamic translation.

Incorrect Answers

Answer B is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer C is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

Answer D is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

 

Question 9

Which Cisco NAT option enables port translation so multiple inside flows can share an inside global address?

1. Dynamic NAT pool exhaustion
2. PAT
3. ip nat inside source static
4. Overload

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Incorrect Answers

Answer A is incorrect because the “Dynamic NAT pool exhaustion” option describes a different concept: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

Answer B is incorrect because the “PAT” option describes a different concept: Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.

Answer C is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

 

Question 10

Which table records active address and port mappings created by NAT?

1. Inside global address
2. show ip nat translations
3. Static NAT
4. NAT translation table

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the table that records active address and port mappings created by NAT.

Incorrect Answers

Answer A is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

Answer B is incorrect because the “show ip nat translations” option describes a different concept: the Cisco IOS show ip nat translations command displays active NAT address and port mappings.

Answer C is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

 

Question 11

An IOS NAT configuration must identify the interface on the side where inside-local addresses originate. Which interface designation is appropriate?

1. ip nat inside source static
2. NAT inside interface
3. Inside local address
4. Dynamic NAT

Correct Answer: B

 

Correct Answer

Answer B is correct because the selected answer describes an interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

Incorrect Answers

Answer A is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Answer C is incorrect because the “Inside local address” option describes a different concept: the IP address assigned to an inside host as it appears on the inside network.

Answer D is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

 

Question 12

An IOS router must mark the NAT interface facing the outside network. Which interface designation should be applied?

1. NAT source translation
2. Static NAT
3. NAT inside interface
4. NAT outside interface

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes an interface marked with ip nat outside identifies the NAT side facing outside networks.

Incorrect Answers

Answer A is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer B is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer C is incorrect because the “NAT inside interface” option describes a different concept: an interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

 

Question 13

Which IOS command creates a fixed one-to-one mapping from an inside-local address to an inside-global address?

1. ip nat inside source static
2. NAT source translation
3. Static NAT
4. Dynamic NAT selection ACL

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Incorrect Answers

Answer B is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer C is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer D is incorrect because the “Dynamic NAT selection ACL” option describes a different concept: Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

 

Question 14

Which term describes dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation?

1. ip nat inside source static
2. Inside local address
3. Dynamic NAT selection ACL
4. Dynamic NAT

Correct Answer: C

 

Correct Answer

Answer C is correct because Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Incorrect Answers

Answer A is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Answer B is incorrect because the “Inside local address” option describes a different concept: the IP address assigned to an inside host as it appears on the inside network.

Answer D is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

 

Question 15

Multiple inside connections must share one inside-global address using distinct transport-port mappings. Which NAT keyword enables this behavior?

1. Static NAT
2. Overload
3. Dynamic NAT pool exhaustion
4. PAT overload keyword

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.

Incorrect Answers

Answer A is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer B is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer C is incorrect because the “Dynamic NAT pool exhaustion” option describes a different concept: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

 

Question 16

An administrator needs to inspect active NAT address and port mappings on an IOS router. Which verification command should be used?

1. show ip nat translations
2. show ip nat statistics
3. PAT overload keyword
4. PAT port uniqueness

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the Cisco IOS show ip nat translations command displays active NAT address and port mappings.

Incorrect Answers

Answer B is incorrect because the “show ip nat statistics” option describes a different concept: the Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

Answer C is incorrect because the “PAT overload keyword” option describes a different concept: the overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.

Answer D is incorrect because the “PAT port uniqueness” option describes a different concept: PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.

 

Question 17

Which IOS command provides a summary of NAT configuration and translation activity?

1. show ip nat statistics
2. NAT source translation
3. Static NAT
4. Overload

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

Incorrect Answers

Answer B is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer C is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer D is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

 

Question 18

Several inside hosts share one public IPv4 address through PAT. Which property lets the device distinguish their simultaneous transport sessions?

1. PAT overload keyword
2. NAT translation table
3. PAT port uniqueness
4. PAT

Correct Answer: C

 

Correct Answer

Answer C is correct because PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.

Incorrect Answers

Answer A is incorrect because the “PAT overload keyword” option describes a different concept: the overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.

Answer B is incorrect because the “NAT translation table” option describes a different concept: the table that records active address and port mappings created by NAT.

Answer D is incorrect because the “PAT” option describes a different concept: Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.

 

Question 19

Which term describes when a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available?

1. PAT
2. Dynamic NAT
3. Overload
4. Dynamic NAT pool exhaustion

Correct Answer: D

 

Correct Answer

Answer D is correct because When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

Incorrect Answers

Answer A is incorrect because the “PAT” option describes a different concept: Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.

Answer B is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer C is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

 

Question 20

Which term describes inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule?

1. ip nat inside source static
2. NAT source translation
3. Dynamic NAT selection ACL
4. Inside global address

Correct Answer: B

 

Correct Answer

Answer B is correct because Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Incorrect Answers

Answer A is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Answer C is incorrect because the “Dynamic NAT selection ACL” option describes a different concept: Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Answer D is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

 

Question 21

For Inside local address, which statement is accurate?

1. The IP address assigned to an inside host as it appears on the inside network.
2. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.
3. An interface marked with ip nat inside identifies the NAT side where inside local addresses originate.
4. The address of an outside host as it appears to the inside network.

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the IP address assigned to an inside host as it appears on the inside network.

Incorrect Answers

Answer B is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer C is incorrect because the “NAT inside interface” option describes a different concept: an interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

Answer D is incorrect because the “Outside local address” option describes a different concept: the address of an outside host as it appears to the inside network.

 

Question 22

For Inside global address, which statement is accurate?

1. The address representing an inside host to the outside network after translation.
2. Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.
3. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.
4. The actual globally routable address of an outside host.

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the address representing an inside host to the outside network after translation.

Incorrect Answers

Answer B is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer C is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer D is incorrect because the “Outside global address” option describes a different concept: the actual globally routable address of an outside host.

 

Question 23

For Outside local address, which statement is accurate?

1. A permanent one-to-one translation between an inside local address and an inside global address.
2. A translation method that temporarily maps inside local addresses to available addresses from a configured global pool.
3. The address of an outside host as it appears to the inside network.
4. An interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

Correct Answer: C

 

Correct Answer

Answer C is correct because it accurately defines Outside local address. The matching definition is: The address of an outside host as it appears to the inside network.

Incorrect Answers

Answer A is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer B is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer D is incorrect because the “NAT inside interface” option describes a different concept: an interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

 

Question 24

For Outside global address, which statement is accurate?

1. Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.
2. The actual globally routable address of an outside host.
3. When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.
4. The IP address assigned to an inside host as it appears on the inside network.

Correct Answer: B

 

Correct Answer

Answer B is correct because the choice accurately describes Outside global address: The actual globally routable address of an outside host.

Incorrect Answers

Answer A is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer C is incorrect because the “Dynamic NAT pool exhaustion” option describes a different concept: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

Answer D is incorrect because the “Inside local address” option describes a different concept: the IP address assigned to an inside host as it appears on the inside network.

 

Question 25

For Static NAT, which statement is accurate?

1. A translation method that temporarily maps inside local addresses to available addresses from a configured global pool.
2. A permanent one-to-one translation between an inside local address and an inside global address.
3. The IP address assigned to an inside host as it appears on the inside network.
4. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Correct Answer: B

 

Correct Answer

Answer B is correct because the selected answer describes a permanent one-to-one translation between an inside local address and an inside global address.

Incorrect Answers

Answer A is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer C is incorrect because the “Inside local address” option describes a different concept: the IP address assigned to an inside host as it appears on the inside network.

Answer D is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

 

Question 26

For Dynamic NAT, which statement is accurate?

1. A permanent one-to-one translation between an inside local address and an inside global address.
2. A configured range of inside global addresses available for dynamic translation.
3. When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.
4. A translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Incorrect Answers

Answer A is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer B is incorrect because the “NAT pool” option describes a different concept: a configured range of inside global addresses available for dynamic translation.

Answer C is incorrect because the “Dynamic NAT pool exhaustion” option describes a different concept: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

 

Question 27

For PAT, which statement is accurate?

1. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.
2. Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.
3. PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.
4. A permanent one-to-one translation between an inside local address and an inside global address.

Correct Answer: B

 

Correct Answer

Answer B is correct because it accurately defines PAT. The matching definition is: Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.

Incorrect Answers

Answer A is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer C is incorrect because the “PAT port uniqueness” option describes a different concept: PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.

Answer D is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

 

Question 28

For NAT pool, which statement is accurate?

1. The address representing an inside host to the outside network after translation.
2. A translation method that temporarily maps inside local addresses to available addresses from a configured global pool.
3. A configured range of inside global addresses available for dynamic translation.
4. When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

Correct Answer: C

 

Correct Answer

Answer C is correct because the choice accurately describes NAT pool: A configured range of inside global addresses available for dynamic translation.

Incorrect Answers

Answer A is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

Answer B is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Answer D is incorrect because the “Dynamic NAT pool exhaustion” option describes a different concept: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

 

Question 29

For Overload, which statement is accurate?

1. The address representing an inside host to the outside network after translation.
2. A configured range of inside global addresses available for dynamic translation.
3. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.
4. A permanent one-to-one translation between an inside local address and an inside global address.

Correct Answer: C

 

Correct Answer

Answer C is correct because the selected answer describes the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Incorrect Answers

Answer A is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

Answer B is incorrect because the “NAT pool” option describes a different concept: a configured range of inside global addresses available for dynamic translation.

Answer D is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

 

Question 30

For NAT translation table, which statement is accurate?

1. The table that records active address and port mappings created by NAT.
2. Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.
3. When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.
4. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes the table that records active address and port mappings created by NAT.

Incorrect Answers

Answer B is incorrect because the “PAT” option describes a different concept: Port Address Translation, which allows many inside hosts to share one or a few global addresses by translating transport-layer ports.

Answer C is incorrect because the “Dynamic NAT pool exhaustion” option describes a different concept: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

Answer D is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

 

Question 31

For NAT inside interface, which statement is accurate?

1. Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.
2. An interface marked with ip nat inside identifies the NAT side where inside local addresses originate.
3. The address of an outside host as it appears to the inside network.
4. A translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Correct Answer: B

 

Correct Answer

Answer B is correct because it accurately defines NAT inside interface. The matching definition is: An interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

Incorrect Answers

Answer A is incorrect because the “Dynamic NAT selection ACL” option describes a different concept: Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Answer C is incorrect because the “Outside local address” option describes a different concept: the address of an outside host as it appears to the inside network.

Answer D is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

 

Question 32

For NAT outside interface, which statement is accurate?

1. A configured range of inside global addresses available for dynamic translation.
2. The table that records active address and port mappings created by NAT.
3. An interface marked with ip nat outside identifies the NAT side facing outside networks.
4. A permanent one-to-one translation between an inside local address and an inside global address.

Correct Answer: C

 

Correct Answer

Answer C is correct because the choice accurately describes NAT outside interface: An interface marked with ip nat outside identifies the NAT side facing outside networks.

Incorrect Answers

Answer A is incorrect because the “NAT pool” option describes a different concept: a configured range of inside global addresses available for dynamic translation.

Answer B is incorrect because the “NAT translation table” option describes a different concept: the table that records active address and port mappings created by NAT.

Answer D is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

 

Question 33

For ip nat inside source static, which statement is accurate?

1. A permanent one-to-one translation between an inside local address and an inside global address.
2. Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.
3. The Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.
4. The Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Incorrect Answers

Answer A is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer B is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Answer C is incorrect because the “show ip nat statistics” option describes a different concept: the Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

 

Question 34

For Dynamic NAT selection ACL, which statement is accurate?

1. An interface marked with ip nat inside identifies the NAT side where inside local addresses originate.
2. A permanent one-to-one translation between an inside local address and an inside global address.
3. Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.
4. Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Correct Answer: D

 

Correct Answer

Answer D is correct because Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Incorrect Answers

Answer A is incorrect because the “NAT inside interface” option describes a different concept: an interface marked with ip nat inside identifies the NAT side where inside local addresses originate.

Answer B is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer C is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

 

Question 35

For PAT overload keyword, which statement is accurate?

1. The table that records active address and port mappings created by NAT.
2. The overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.
3. The address representing an inside host to the outside network after translation.
4. Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Correct Answer: B

 

Correct Answer

Answer B is correct because it accurately defines PAT overload keyword. The matching definition is: The overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.

Incorrect Answers

Answer A is incorrect because the “NAT translation table” option describes a different concept: the table that records active address and port mappings created by NAT.

Answer C is incorrect because the “Inside global address” option describes a different concept: the address representing an inside host to the outside network after translation.

Answer D is incorrect because the “NAT source translation” option describes a different concept: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

 

Question 36

For show ip nat translations, which statement is accurate?

1. PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.
2. The overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.
3. The Cisco IOS show ip nat translations command displays active NAT address and port mappings.
4. The Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

Correct Answer: C

 

Correct Answer

Answer C is correct because the choice accurately describes show ip nat translations: The Cisco IOS show ip nat translations command displays active NAT address and port mappings.

Incorrect Answers

Answer A is incorrect because the “PAT port uniqueness” option describes a different concept: PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.

Answer B is incorrect because the “PAT overload keyword” option describes a different concept: the overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.

Answer D is incorrect because the “show ip nat statistics” option describes a different concept: the Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

 

Question 37

For show ip nat statistics, which statement is accurate?

1. Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.
2. A configured range of inside global addresses available for dynamic translation.
3. The Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.
4. The Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the Cisco IOS show ip nat statistics command summarizes NAT configuration and translation activity.

Incorrect Answers

Answer A is incorrect because the “Dynamic NAT selection ACL” option describes a different concept: Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Answer B is incorrect because the “NAT pool” option describes a different concept: a configured range of inside global addresses available for dynamic translation.

Answer C is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

 

Question 38

For PAT port uniqueness, which statement is accurate?

1. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.
2. PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.
3. The IP address assigned to an inside host as it appears on the inside network.
4. The address of an outside host as it appears to the inside network.

Correct Answer: B

 

Correct Answer

Answer B is correct because PAT distinguishes concurrent translations by combining address information with transport-layer port numbers so many sessions can share a public address.

Incorrect Answers

Answer A is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer C is incorrect because the “Inside local address” option describes a different concept: the IP address assigned to an inside host as it appears on the inside network.

Answer D is incorrect because the “Outside local address” option describes a different concept: the address of an outside host as it appears to the inside network.

 

Question 39

For Dynamic NAT pool exhaustion, which statement is accurate?

1. The Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.
2. The overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.
3. When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.
4. A translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

Correct Answer: C

 

Correct Answer

Answer C is correct because it accurately defines Dynamic NAT pool exhaustion. The matching definition is: When a dynamic NAT pool has no available inside global addresses, new eligible flows cannot obtain a translation until an address becomes available.

Incorrect Answers

Answer A is incorrect because the “Overload” option describes a different concept: the Cisco NAT option that enables port translation so multiple inside flows can share an inside global address.

Answer B is incorrect because the “PAT overload keyword” option describes a different concept: the overload keyword enables Port Address Translation so multiple inside flows can share an inside global address by using different transport-layer port mappings.

Answer D is incorrect because the “Dynamic NAT” option describes a different concept: a translation method that temporarily maps inside local addresses to available addresses from a configured global pool.

 

Question 40

For NAT source translation, which statement is accurate?

1. A permanent one-to-one translation between an inside local address and an inside global address.
2. The Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.
3. Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.
4. Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.

Correct Answer: C

 

Correct Answer

Answer C is correct because the choice accurately describes NAT source translation: Inside source NAT changes the source address of traffic as it moves from the inside toward the outside according to the configured translation rule.

Incorrect Answers

Answer A is incorrect because the “Static NAT” option describes a different concept: a permanent one-to-one translation between an inside local address and an inside global address.

Answer B is incorrect because the “ip nat inside source static” option describes a different concept: the Cisco IOS ip nat inside source static command creates a fixed one-to-one inside-local to inside-global translation.

Answer D is incorrect because the “Dynamic NAT selection ACL” option describes a different concept: Dynamic NAT commonly uses an access list to identify which inside local source addresses are eligible for translation.