CCNP NAT and DHCP Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on Router R7:

R7# show ip nat translations verbose
Pro Inside global      Inside local       Outside local      Outside global
--- 192.0.2.10         10.0.0.10          ---                ---
  create: 03/01/2025 09:00:00, use: 03/01/2025 09:05:00
  timeout: never, flags: static
--- 192.0.2.11         10.0.0.11          ---                ---
  create: 03/01/2025 09:00:00, use: 03/01/2025 09:06:00
  timeout: never, flags: static

Based on this output, what can be concluded?

Accepted Answer

The translations are static and will remain until manually removed.. The verbose output shows static NAT entries with 'timeout: never' and 'flags: static'. These translations will not time out and are manually configured.

Answer

These translations will expire after a configurable timeout.

Answer

The translations are dynamic and will be removed after idle timeout.

Answer

The router is performing PAT for these addresses.

Question 2

A network engineer runs the following command on Router R8:

R8# show ip dhcp server statistics
Memory usage: 12345
Address pools: 2
Database agents: 0
Automatic bindings: 10
Manual bindings: 2
Expired bindings: 1
Malformed messages: 0

Message        Received
BOOTREQUEST    0
DHCPDISCOVER   100
DHCPREQUEST    95
DHCPDECLINE    1
DHCPRELEASE    2
DHCPINFORM     0

Based on this output, what can be concluded?

Accepted Answer

The DHCP server has received more DHCPDISCOVER messages than DHCPREQUEST messages, indicating some clients did not proceed to request.. The statistics show 100 DISCOVERs and 95 REQUESTs, indicating some clients did not complete the process. There is 1 DECLINE, meaning a client detected an address conflict. The server has 10 automatic and 2 manual bindings.

Answer

The DHCP server has 12 active leases.

Answer

The DHCP server rejected 5 DHCPDISCOVER messages.

Answer

The DHCP server has 2 manual bindings that are static reservations.

Question 3

A network engineer runs the following command on Router R9:

R9# show ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
udp 192.0.2.20:1234    10.0.0.20:1234     203.0.113.1:53     203.0.113.1:53
tcp 192.0.2.20:5678    10.0.0.20:5678     198.51.100.1:80    198.51.100.1:80
--- 192.0.2.21         10.0.0.21          ---                ---

Based on this output, what can be concluded?

Accepted Answer

The router is using both static NAT and PAT simultaneously.. The output shows a mix of dynamic PAT translations (with ports) and a static NAT entry (no protocol/port). The static entry maps 10.0.0.21 to 192.0.2.21, while PAT is used for 10.0.0.20.

Answer

All translations are dynamic.

Answer

The router is configured with a single NAT pool.

Answer

The inside global address 192.0.2.20 is used for both static and dynamic translations.

Question 4

Consider the following configuration snippet:
```
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
!
interface GigabitEthernet0/2
 ip address 203.0.113.1 255.255.255.0
 ip nat outside
!
ip nat inside source list 1 interface GigabitEthernet0/2 overload
access-list 1 permit 192.168.1.0 0.0.0.255
```
What is the effect of this configuration?

Accepted Answer

It translates all traffic from 192.168.1.0/24 to the IP address 203.0.113.1, using port address translation.. The configuration enables dynamic NAT with overload (PAT) for the 192.168.1.0/24 network, translating source addresses to the IP of the outside interface.

Answer

It performs static NAT for each host in 192.168.1.0/24 to a unique IP in the 203.0.113.0/24 network.

Answer

It translates only traffic from 192.168.1.1 to the outside interface IP.

Answer

The configuration is invalid because 'ip nat inside' and 'ip nat outside' are on the wrong interfaces.

Question 5

Examine this DHCP configuration:
```
ip dhcp pool POOL1
 network 10.10.10.0 255.255.255.0
 default-router 10.10.10.1
 dns-server 8.8.8.8
 lease 0 12
!
ip dhcp excluded-address 10.10.10.1 10.10.10.10
```
Which statement is true?

Accepted Answer

DHCP clients will receive a lease for 12 hours.. The configuration defines a DHCP pool with a lease of 12 hours (0 days, 12 hours) and excludes the first 10 addresses.

Answer

The router will assign IP addresses from 10.10.10.1 to 10.10.10.254.

Answer

The default lease is used because the lease command is incomplete.

Answer

The DNS server is set to 8.8.8.8, but clients will ignore it.

Question 6

Given this NAT configuration:
```
interface GigabitEthernet0/0
 ip address 10.0.0.1 255.255.255.0
 ip nat inside
!
interface GigabitEthernet0/1
 ip address 198.51.100.1 255.255.255.0
 ip nat outside
!
ip nat inside source static 10.0.0.5 198.51.100.5
```
What is the purpose of this configuration?

Accepted Answer

It creates a one-to-one mapping between 10.0.0.5 and 198.51.100.5, allowing inbound and outbound traffic.. This configures static NAT, mapping a single inside host to a specific outside address.

Answer

It translates all traffic from 10.0.0.0/24 to 198.51.100.0/24 using PAT.

Answer

It translates only outbound traffic from 10.0.0.5 to 198.51.100.5.

Answer

The configuration is incomplete; it needs an access-list.

Question 7

Review the following DHCP relay configuration:
```
interface Vlan10
 ip address 192.168.10.1 255.255.255.0
 ip helper-address 172.16.1.100
```
What is the effect of the 'ip helper-address' command?

Accepted Answer

It forwards DHCP requests from VLAN 10 to the DHCP server at 172.16.1.100.. The command forwards DHCP broadcasts (and other UDP broadcasts by default) to the specified server.

Answer

It configures the router as a DHCP server for VLAN 10.

Answer

It translates the source IP of DHCP requests to 192.168.10.1.

Answer

It blocks DHCP traffic from VLAN 10.

Question 8

Analyze this NAT configuration:
```
ip nat pool GLOBAL 203.0.113.10 203.0.113.20 netmask 255.255.255.0
ip nat inside source list 1 pool GLOBAL overload
access-list 1 permit 192.168.1.0 0.0.0.255
```
Which statement is correct?

Accepted Answer

Traffic from 192.168.1.0/24 is translated to addresses in the range 203.0.113.10-20, using PAT.. This is dynamic NAT with overload (PAT) using a pool of addresses.

Answer

Each host in 192.168.1.0/24 gets a unique IP from the pool without port translation.

Answer

The pool must include the outside interface IP address.

Answer

Access-list 1 is used to filter inbound traffic.

Question 9

Examine this DHCP configuration:
```
service dhcp
ip dhcp pool POOL2
 network 10.20.20.0 255.255.255.0
 default-router 10.20.20.1
 lease infinite
```
What is the effect of the 'lease infinite' command?

Accepted Answer

Clients will receive an infinite lease and never need to renew.. The lease infinite command sets the DHCP lease time to never expire.

Answer

The lease time is set to the default value of 1 day.

Answer

Clients will be unable to obtain an IP address because infinite is invalid.

Answer

The router will ignore the lease command and use the default.

Question 10

What is the default lease time for a DHCP pool in Cisco IOS?

Accepted Answer

1 day. The default DHCP lease time on Cisco IOS is 1 day (24 hours).

Answer

12 hours

Answer

2 days

Answer

Infinite

Question 11

Which type of NAT translates multiple inside addresses to a single outside address using different port numbers?

Accepted Answer

Port Address Translation (PAT). PAT (Port Address Translation) allows many inside hosts to share one outside IP by differentiating sessions via port numbers.

Answer

Static NAT

Answer

Dynamic NAT

Answer

Policy NAT

Question 12

What is the purpose of the 'ip nat inside source list' command in Cisco IOS?

Accepted Answer

It identifies the traffic to be translated and the translation method.. This command specifies which inside source addresses (matched by an access-list) are to be translated using NAT.

Answer

It defines the inside interface for NAT.

Answer

It filters inbound traffic before NAT is applied.

Answer

It configures the router as a DHCP server.

Question 13

Drag and drop the steps of the DHCP DORA process into the correct order, from first to last.

Accepted Answer

Client broadcasts DHCP Discover. The DHCP DORA process begins with the client broadcasting a Discover message to locate a DHCP server. The server responds with an Offer message containing an IP address and configuration parameters. The client then sends a Request message to formally request the offered IP address. Finally, the server sends an Acknowledge message to confirm the lease and provide the configuration.

Question 14

Drag and drop the steps of configuring Dynamic NAT on a Cisco IOS router into the correct order, from first to last.

Accepted Answer

Define NAT pool with ip nat pool. Dynamic NAT configuration starts by defining the pool of global IP addresses using 'ip nat pool'. Next, an access list is created to identify the inside local addresses that will be translated. The NAT source list is then configured to associate the ACL with the pool. After that, the inside and outside interfaces are designated with 'ip nat inside' and 'ip nat outside'. Finally, translation is verified with 'show ip nat translations'.

Question 15

Drag and drop the steps of DHCP snooping operation on a Cisco switch into the correct order, from first to last.

Accepted Answer

Enable DHCP snooping globally. DHCP snooping begins by enabling the feature globally with 'ip dhcp snooping'. Then, the feature is enabled on specific VLANs. Trusted interfaces (typically uplinks to DHCP servers) are configured with 'ip dhcp snooping trust'. The switch then intercepts DHCP messages, building the DHCP snooping binding database from valid server responses. Finally, any DHCP server messages received on untrusted interfaces are dropped to prevent rogue server attacks.