Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← NAT and DHCP practice sets

CCNP NAT and DHCP • Complete Question Bank

CCNP NAT and DHCP — All Questions With Answers

Complete CCNP NAT and DHCP question bank — all 0 questions with answers and detailed explanations.

58
Questions
Free
No signup
Certifications/CCNP/Practice Test/NAT and DHCP/All Questions
Question 1mediummultiple choice
Read the full DHCP explanation →

A network engineer is configuring a Cisco router to provide internet access to a small office using a single public IP address assigned by the ISP. The engineer wants to allow internal hosts to initiate connections to the internet, but also needs to make a web server on the internal network reachable from the internet. The engineer configures a standard access list for NAT and an ip nat inside source list command. However, external users cannot reach the internal web server. What is the most likely cause?

Question 2mediummultiple choice
Open the full VLAN trunking answer →

A network engineer is troubleshooting a DHCP issue on a Cisco router configured as a DHCP server for a VLAN. Clients in the VLAN are able to obtain IP addresses from the DHCP server, but they are not receiving the correct DNS server address. The engineer checks the DHCP pool configuration and sees the dns-server command is configured with the correct IP address. What is the most likely cause of the problem?

Question 3hardmultiple choice
Read the full DHCP explanation →

A network engineer is configuring NAT overload (PAT) on a Cisco router to allow multiple internal hosts to share a single public IP address. The engineer uses the command ip nat inside source list 1 interface GigabitEthernet0/0 overload. After testing, internal hosts can access the internet, but some applications fail intermittently. The engineer suspects a NAT issue. What is the most likely cause?

Question 4mediummultiple choice
Open the full VLAN trunking answer →

A network engineer is configuring a Cisco router as a DHCP relay agent to forward DHCP requests from a client VLAN to a centralized DHCP server located in a different subnet. The engineer configures the ip helper-address command on the VLAN interface. However, clients in the VLAN are not receiving IP addresses. The DHCP server is reachable from the router. What is the most likely cause?

Question 5hardmultiple choice
Read the full DHCP explanation →

A network engineer is troubleshooting a NAT issue where an internal host cannot establish an SSH session to a remote server on the internet. The engineer checks the NAT translations on the border router and sees that the translation for the host's source IP is present. However, the SSH session times out. The engineer also notices that the remote server's IP is not in the NAT translation table. What is the most likely cause?

Question 6easymultiple choice
Read the full DHCP explanation →

A network engineer is configuring a Cisco router to act as a DHCP server for a branch office. The engineer creates a DHCP pool for the 192.168.1.0/24 subnet and configures the default-router, dns-server, and domain-name options. However, clients are able to obtain IP addresses but cannot ping the default gateway. The engineer verifies that the router's interface IP is 192.168.1.1. What is the most likely cause?

Question 7easymultiple choice
Read the full DHCP explanation →

A network engineer is configuring NAT on a Cisco router to allow internal hosts to access the internet. The engineer uses the command ip nat inside source list 100 interface GigabitEthernet0/0 overload, where access list 100 permits only the 10.0.0.0/8 network. After testing, hosts in the 10.0.0.0/8 network can access the internet, but hosts in the 172.16.0.0/16 network cannot. The engineer verifies that the 172.16.0.0/16 hosts have connectivity to the router. What is the most likely cause?

Question 8mediummultiple choice
Read the full DHCP explanation →

A network engineer is troubleshooting a DHCP issue where a client is not receiving an IP address from a Cisco router configured as a DHCP server. The engineer checks the DHCP pool configuration and sees that the network command is configured with the correct subnet. The engineer also verifies that the ip dhcp excluded-address command is not blocking any addresses. However, the client's DHCP discover message is not reaching the router. What is the most likely cause?

Question 9hardmultiple choice
Read the full DHCP explanation →

A network engineer is configuring NAT on a Cisco router to allow internal hosts to access the internet. The engineer uses the command ip nat inside source static tcp 192.168.1.10 80 203.0.113.1 80. After testing, external users can access the internal web server using the public IP. However, internal hosts cannot access the web server using the public IP. What is the most likely cause?

Question 10mediummultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R1:

R1# show ip nat translations

Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 --- --- --- 192.0.2.11 10.0.0.11 --- ---

Based on this output, what can be concluded?

Question 11mediummultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R2:

R2# debug ip dhcp server events
*Mar  1 00:05:23.123: DHCPD: DHCPDISCOVER received from client 0063.6973.636f.2d30.3030.302e.3030.3030.2e30.3030.312d.4574.30 on interface GigabitEthernet0/1
*Mar  1 00:05:23.124: DHCPD: Sending DHCPOFFER to client 0063.6973.636f.2d30.3030.302e.3030.3030.2e30.3030.312d.4574.30 (10.0.0.2)
*Mar  1 00:05:23.125: DHCPD: DHCPREQUEST received from client 0063.6973.636f.2d30.3030.302e.3030.3030.2e30.3030.312d.4574.30
*Mar  1 00:05:23.126: DHCPD: Sending DHCPACK to client 0063.6973.636f.2d30.3030.302e.3030.3030.2e30.3030.312d.4574.30 (10.0.0.2)

Based on this debug output, what can be concluded?

Question 12hardmultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R3:

R3# show ip nat statistics

Total active translations: 5 (0 static, 5 dynamic; 5 extended) Outside interfaces: GigabitEthernet0/0 Inside interfaces: GigabitEthernet0/1 Hits: 1234 Misses: 5 CEF Translated packets: 1200, CEF Punted packets: 34 Expired translations: 10 Dynamic mappings: -- Inside Source

[Id] ip nat pool POOL1 203.0.113.1 203.0.113.10 netmask 255.255.255.240

refcount 5

Based on this output, what can be concluded?

Question 13mediummultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R4:

R4# show ip dhcp binding

Bindings from all pools not associated with VRF:

IP address       Client-ID/              Lease expiration        Type

Hardware address/ User name

10.0.0.10        0063.6973.636f.2d30.    Mar 01 2025 12:00 PM   Automatic
                 3030.302e.3030.3030.
                 2e30.3030.312d.4574.

30

10.0.0.11        0063.6973.636f.2d30.    Mar 01 2025 12:05 PM   Automatic
                 3030.302e.3030.3030.
                 2e30.3030.312d.4574.

31

Based on this output, what can be concluded?

Question 14hardmultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R5:

R5# show ip nat translations

Pro Inside global Inside local Outside local Outside global udp 192.0.2.20:1234 10.0.0.20:1234 203.0.113.1:53 203.0.113.1:53 tcp 192.0.2.20:5678 10.0.0.20:5678 198.51.100.1:80 198.51.100.1:80

Based on this output, what can be concluded?

Question 15mediummultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R6:

R6# show ip dhcp conflict
IP address       Detection method     Detection time         VRF
10.0.0.10        Ping                 Mar 01 2025 10:00 AM   default
10.0.0.15        Gratuitous ARP       Mar 01 2025 10:05 AM   default

Based on this output, what can be concluded?

Question 16mediummultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R7:

R7# show ip nat translations verbose

Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:05:00 timeout: never, flags: static --- 192.0.2.11 10.0.0.11 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:06:00 timeout: never, flags: static

Based on this output, what can be concluded?

Question 17hardmultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R8:

R8# show ip dhcp server statistics

Memory usage: 12345 Address pools: 2 Database agents: 0 Automatic bindings: 10 Manual bindings: 2 Expired bindings: 1 Malformed messages: 0

Message Received

BOOTREQUEST    0

DHCPDISCOVER 100 DHCPREQUEST 95 DHCPDECLINE 1 DHCPRELEASE 2 DHCPINFORM 0

Based on this output, what can be concluded?

Question 18hardmultiple choice
Read the full DHCP explanation →

A network engineer runs the following command on Router R9:

R9# show ip nat translations

Pro Inside global Inside local Outside local Outside global udp 192.0.2.20:1234 10.0.0.20:1234 203.0.113.1:53 203.0.113.1:53 tcp 192.0.2.20:5678 10.0.0.20:5678 198.51.100.1:80 198.51.100.1:80 --- 192.0.2.21 10.0.0.21 --- ---

Based on this output, what can be concluded?

Question 19mediummultiple choice
Read the full DHCP explanation →

Consider the following configuration snippet: ```

interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside

!

interface GigabitEthernet0/2
 ip address 203.0.113.1 255.255.255.0
 ip nat outside

!

ip nat inside source list 1 interface GigabitEthernet0/2 overload
access-list 1 permit 192.168.1.0 0.0.0.255

``` What is the effect of this configuration?

Question 20mediummultiple choice
Read the full DHCP explanation →

Examine this DHCP configuration: ```

ip dhcp pool POOL1
 network 10.10.10.0 255.255.255.0

default-router 10.10.10.1 dns-server 8.8.8.8 lease 0 12 !

ip dhcp excluded-address 10.10.10.1 10.10.10.10

``` Which statement is true?

Question 21mediummultiple choice
Read the full DHCP explanation →

Given this NAT configuration: ```

interface GigabitEthernet0/0
 ip address 10.0.0.1 255.255.255.0
 ip nat inside

!

interface GigabitEthernet0/1
 ip address 198.51.100.1 255.255.255.0
 ip nat outside

!

ip nat inside source static 10.0.0.5 198.51.100.5

``` What is the purpose of this configuration?

Question 22mediummultiple choice
Open the full VLAN trunking answer →

Review the following DHCP relay configuration: ```

interface Vlan10
 ip address 192.168.10.1 255.255.255.0
 ip helper-address 172.16.1.100

``` What is the effect of the 'ip helper-address' command?

Question 23mediummultiple choice
Read the full DHCP explanation →

Analyze this NAT configuration: ```

ip nat pool GLOBAL 203.0.113.10 203.0.113.20 netmask 255.255.255.0
ip nat inside source list 1 pool GLOBAL overload
access-list 1 permit 192.168.1.0 0.0.0.255

``` Which statement is correct?

Question 24mediummultiple choice
Read the full DHCP explanation →

Examine this DHCP configuration: ```

service dhcp
ip dhcp pool POOL2
 network 10.20.20.0 255.255.255.0

default-router 10.20.20.1 lease infinite ``` What is the effect of the 'lease infinite' command?

Question 25easymultiple choice
Read the full DHCP explanation →

What is the default lease time for a DHCP pool in Cisco IOS?

Question 26easymultiple choice
Read the full DHCP explanation →

Which type of NAT translates multiple inside addresses to a single outside address using different port numbers?

Question 27mediummultiple choice
Read the full DHCP explanation →

What is the purpose of the 'ip nat inside source list' command in Cisco IOS?

Question 28mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of the DHCP DORA process into the correct order, from first to last.

Question 29mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of configuring Dynamic NAT on a Cisco IOS router into the correct order, from first to last.

Question 30mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of DHCP snooping operation on a Cisco switch into the correct order, from first to last.

Question 31mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.

Question 32mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of DHCP snooping and dynamic ARP inspection flow into the correct order, from first to last.

Question 33mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of stateless DHCPv6 address assignment steps into the correct order, from first to last.

Question 34mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of NAT64 IPv6-to-IPv4 translation flow into the correct order, from first to last.

Question 35mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of DHCP failover configuration between primary and standby into the correct order, from first to last.

Question 36mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.

Question 37mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of DHCP snooping and dynamic ARP inspection flow into the correct order, from first to last.

Question 38mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of stateless DHCPv6 address assignment steps into the correct order, from first to last.

Question 39mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of NAT64 IPv6-to-IPv4 translation flow into the correct order, from first to last.

Question 40mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps of DHCP failover configuration between primary and standby into the correct order, from first to last.

Question 41mediummatching
Read the full DHCP explanation →

Drag and drop each NAT type on the left to its matching description on the right.

Question 42mediummatching
Read the full DHCP explanation →

Drag and drop each DHCP message on the left to its correct order in the DORA process on the right.

Question 43mediummatching
Read the full DHCP explanation →

Drag and drop each DHCP option on the left to its matching purpose on the right.

Question 44mediummatching
Read the full DHCP explanation →

Drag and drop each NAT terminology on the left to its matching definition on the right.

Question 45mediummatching
Read the full DHCP explanation →

Drag and drop each DHCPv6 mode on the left to its matching address assignment method on the right.

Question 46mediummatching
Read the full DHCP explanation →

Drag and drop each NAT type on the left to its matching description on the right.

Question 47mediummatching
Read the full DHCP explanation →

Drag and drop each DHCP message on the left to its matching flow order position on the right.

Question 48mediummatching
Read the full DHCP explanation →

Drag and drop each DHCP option on the left to its matching purpose on the right.

Question 49mediummatching
Read the full DHCP explanation →

Drag and drop each NAT terminology on the left to its matching definition on the right.

Question 50mediummatching
Read the full DHCP explanation →

Drag and drop each DHCPv6 mode on the left to its matching address assignment method on the right.

Question 51mediummulti select
Read the full DHCP explanation →

Which two statements about NAT configuration on Cisco IOS routers are true? (Choose two.)

Question 52hardmulti select
Read the full DHCP explanation →

Which two statements about DHCP snooping are true? (Choose two.)

Question 53mediummulti select
Read the full DHCP explanation →

Which three statements about DHCP relay are true? (Choose three.)

Question 54hardmulti select
Read the full DHCP explanation →

Which three statements about NAT64 and NPTv6 are true? (Choose three.)

Question 55mediummulti select
Read the full DHCP explanation →

Which two statements about NAT configuration on Cisco IOS-XE are true? (Choose two.)

Question 56hardmulti select
Read the full DHCP explanation →

Which three statements about DHCP snooping are true? (Choose three.)

Question 57easymulti select
Read the full DHCP explanation →

Which two statements about DHCP client configuration on a Cisco router are true? (Choose two.)

Question 58mediummulti select
Read the full DHCP explanation →

Which three statements about NAT traversal and translation are true? (Choose three.)

Practice tests

Scored 10-question sessions with instant feedback and explanations.

CCNP Practice Test 1 — 10 Questions→CCNP Practice Test 2 — 10 Questions→CCNP Practice Test 3 — 10 Questions→CCNP Practice Test 4 — 10 Questions→CCNP Practice Test 5 — 10 Questions→CCNP Practice Exam 1 — 20 Questions→CCNP Practice Exam 2 — 20 Questions→CCNP Practice Exam 3 — 20 Questions→CCNP Practice Exam 4 — 20 Questions→Free CCNP Practice Test 1 — 30 Questions→Free CCNP Practice Test 2 — 30 Questions→Free CCNP Practice Test 3 — 30 Questions→CCNP Practice Questions 1 — 50 Questions→CCNP Practice Questions 2 — 50 Questions→CCNP Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

ArchitectureEnterprise Network DesignSD-Access ArchitectureSD-WAN ArchitectureQoS ArchitectureVirtualizationNetwork Function VirtualizationVirtual Machines and HypervisorsVRF and Path IsolationInfrastructureOSPFBGPEIGRPVLANs and TrunkingSpanning Tree ProtocolEtherChannelWireless InfrastructureMPLSWAN TechnologiesNAT and DHCPIP MulticastQoSNetwork AssuranceSNMP and SyslogNetFlow and TelemetrySPAN and RSPANIP SLASecurityAAA, RADIUS, and TACACS+ACLs and CoPP802.1X and TrustSecVPN TechnologiesInfrastructure SecurityAutomationPython for Network AutomationAnsible AutomationREST APIs and Data ModelsCisco DNA CenterModel-Driven Telemetry

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All NAT and DHCP setsAll NAT and DHCP questionsCCNP Practice Hub