CCNA Network Services and Security Practice Question
A show ip nat translations command displays this entry:
Inside global 203.0.113.10:30001 Inside local 192.168.10.25:51514 Outside local 198.51.100.20:443 Outside global 198.51.100.20:443
Which statement is correct?
⚠ Common exam trap
Be careful not to confuse inside local with inside global addresses, and understand the difference between local and global in NAT terminology.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
192.168.10.25 is the inside local address of the host
Inside local is the actual address assigned to the inside host before translation. The inside global address is the public representation used after NAT, and the port values show PAT is in use.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
192.168.10.25 is the inside local address of the host
Why this is correct
The inside local address is the original private IP address of the host as it appears in the internal network before NAT is applied. In the translation entry, 192.168.10.25 is shown as the source address that the router will translate, identifying the actual internal host. Because it is a private address in the RFC 1918 range, it correctly matches the definition of an inside local address.
- ✗
203.0.113.10 is the inside local address of the host
Why it's wrong here
203.0.113.10 is a public IP address and is listed as the inside global address, which is the translated address that the outside network sees for the internal host. The inside local address must be the host's real private address, never a public address. Therefore, calling 203.0.113.10 the inside local address misidentifies its role in the NAT translation table.
When this WOULD be correct
In a different question where the context specifies that the NAT configuration is being examined for a device that has been misconfigured, leading to confusion between inside local and inside global addresses, option B could be correct if it explicitly states that 203.0.113.10 is being referred to as the inside local address due to a specific scenario or misinterpretation.
- ✗
198.51.100.20 is the translated private address of the internal client
Why it's wrong here
198.51.100.20 appears in the outside portion of the NAT entry, meaning it is the address of the external server with which the internal client is communicating. This address is not a translation of the internal client; rather, it is the actual destination address that remains unchanged by NAT. Thus, it cannot be described as the translated private address of the internal client.
When this WOULD be correct
In a different question setup where the NAT configuration is explicitly described as using static NAT with a mapping that translates a private address to a public address, and the question asks for the translated address of an internal client, then 198.51.100.20 could be correctly identified as the translated private address.
- ✗
The entry proves static NAT is being used without port translation
Why it's wrong here
The presence of a translated source port in the NAT entry indicates Port Address Translation (PAT), not static NAT without overloading. In pure static NAT, the mapping is a one-to-one IP-to-IP translation, and the 'Inside global' column would contain only a public IP address with no port number. The fact that a port is being translated alongside the IP clearly shows that PAT is in effect, so this statement is incorrect.
When this WOULD be correct
In a different question, if the NAT configuration specifically stated that 203.0.113.10 was assigned as the inside local address due to a misconfiguration or a specific static NAT mapping, then option D would be correct. For example, a question might present a scenario where a static NAT mapping is explicitly defined to use the same address for both inside local and global.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓192.168.10.25 is the inside local address of the hostCorrect answer▾
Why this is correct
The inside local address is the original private IP address of the host as it appears in the internal network before NAT is applied. In the translation entry, 192.168.10.25 is shown as the source address that the router will translate, identifying the actual internal host. Because it is a private address in the RFC 1918 range, it correctly matches the definition of an inside local address.
✗203.0.113.10 is the inside local address of the hostWrong answer — click to see why▾
Why this is wrong here
This option is wrong because 203.0.113.10 is the inside global address, not the inside local address. The inside local address is 192.168.10.25, which is correctly identified in option A.
★ When this WOULD be the correct answer
In a different question where the context specifies that the NAT configuration is being examined for a device that has been misconfigured, leading to confusion between inside local and inside global addresses, option B could be correct if it explicitly states that 203.0.113.10 is being referred to as the inside local address due to a specific scenario or misinterpretation.
Why candidates choose this
Candidates may choose this option due to a misunderstanding of NAT terminology, confusing inside local and inside global addresses, especially if they have encountered similar address formats in different contexts.
✗198.51.100.20 is the translated private address of the internal clientWrong answer — click to see why▾
Why this is wrong here
This option is incorrect because 198.51.100.20 is the outside local address, not a translated private address. The inside local address is specifically 192.168.10.25, as indicated in the NAT translation entry.
★ When this WOULD be the correct answer
In a different question setup where the NAT configuration is explicitly described as using static NAT with a mapping that translates a private address to a public address, and the question asks for the translated address of an internal client, then 198.51.100.20 could be correctly identified as the translated private address.
Why candidates choose this
Candidates may confuse the terms 'translated private address' and 'outside local address,' leading them to mistakenly identify 198.51.100.20 as a private address due to its common usage in NAT scenarios.
✗The entry proves static NAT is being used without port translationWrong answer — click to see why▾
Why this is wrong here
This option is incorrect because the entry shows that 203.0.113.10 is the inside global address, not the inside local address. The inside local address is 192.168.10.25, which is correctly identified in option A.
★ When this WOULD be the correct answer
In a different question, if the NAT configuration specifically stated that 203.0.113.10 was assigned as the inside local address due to a misconfiguration or a specific static NAT mapping, then option D would be correct. For example, a question might present a scenario where a static NAT mapping is explicitly defined to use the same address for both inside local and global.
Why candidates choose this
Candidates may be tempted by this option because they might confuse static NAT with dynamic NAT, leading them to incorrectly assume that the presence of an outside global address means static NAT is in use, especially if they overlook the port translation aspect.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
RA Guard — IPv6 First-Hop Security
Key term
Outside local
Outside local is the IP address that a device on the inside of a private network appears to have from the perspective of hosts located outside the network, typically after Network Address Translation (NAT) has been applied.
Key term
Inside global
An inside global is the public, routable IP address that represents an internal private host when it communicates with devices on the internet.
About these practice questions
Courseiva writes every 200-301 question from scratch — 1,389 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.