This 200-301 practice question tests your understanding of network services and security. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. A key principle to apply: nAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
An engineer configures NAT overload on a router for inside users. Which resource is primarily used to let many internal hosts share one public IPv4 address?
IPv6 extension headers
Why wrong: Distractor.
TCP and UDP port numbers
Correct choice.
Different source MAC addresses on the WAN
Why wrong: Distractor.
Separate routing tables per client
Why wrong: Distractor.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
TCP and UDP port numbers
PAT distinguishes sessions by using Layer 4 port numbers. That is what allows many inside devices to use the same outside IP address at the same time without conflicting with each other.
Key principle: NAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
IPv6 extension headers
Why it's wrong here
Distractor.
When this WOULD be correct
In a question asking about the benefits of IPv6 over IPv4, specifically regarding how IPv6 handles multiple connections without the need for NAT, an option about IPv6 extension headers could be correct. For instance, if the question focused on how IPv6 improves address space management and connection handling.
TCP and UDP port numbers
Different source MAC addresses on the WAN
Why it's wrong here
Distractor.
When this WOULD be correct
In a scenario where the question asks about how to distinguish between multiple devices on a network segment using MAC addresses, such as in a discussion about VLANs or Ethernet switching, this option could be correct. For example, a question could ask how a switch manages traffic from multiple devices on the same subnet.
Separate routing tables per client
Why it's wrong here
Distractor.
When this WOULD be correct
In a question where the focus is on advanced routing techniques for isolating traffic from different clients, such as in a multi-tenant environment, the option could be correct if it specifies that separate routing tables are used to manage distinct traffic flows for each client without overlap.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
Correct choice.
Why this is wrong here
IPv6 extension headers are used for additional functionality in IPv6 packets, such as fragmentation or security, and are not involved in NAT overload (PAT) which operates at Layer 4 using port numbers.
★ When this WOULD be the correct answer
In a question asking about the benefits of IPv6 over IPv4, specifically regarding how IPv6 handles multiple connections without the need for NAT, an option about IPv6 extension headers could be correct. For instance, if the question focused on how IPv6 improves address space management and connection handling.
Why candidates choose this
Students might confuse extension headers with the concept of 'extending' address translation, but they are unrelated to port-based multiplexing.
Why this is wrong here
Source MAC addresses are used for Layer 2 forwarding within a local network and are not preserved across a router's WAN interface; NAT operates at Layer 3 and above, not using MAC addresses for translation.
★ When this WOULD be the correct answer
In a scenario where the question asks about how to distinguish between multiple devices on a network segment using MAC addresses, such as in a discussion about VLANs or Ethernet switching, this option could be correct. For example, a question could ask how a switch manages traffic from multiple devices on the same subnet.
Why candidates choose this
Students may think that different MAC addresses could help identify hosts, but MAC addresses are stripped when packets leave the local subnet and are not used in NAT overload.
Why this is wrong here
Routers do not maintain separate routing tables per client; routing tables are based on destination networks, not individual hosts. NAT overload uses a single routing table and relies on port numbers for translation.
★ When this WOULD be the correct answer
In a question where the focus is on advanced routing techniques for isolating traffic from different clients, such as in a multi-tenant environment, the option could be correct if it specifies that separate routing tables are used to manage distinct traffic flows for each client without overlap.
Why candidates choose this
The idea of per-client tables might seem logical for tracking multiple hosts, but it is not how routing or NAT operates; the correct mechanism is port-based multiplexing.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Don't confuse static or dynamic NAT with PAT; only PAT allows multiple hosts to share a single IP using port numbers.
Detailed technical explanation
Network Address Translation (NAT) overload, commonly called Port Address Translation (PAT), is a critical technique in IPv4 networking that allows multiple internal hosts to access external networks using a single public IP address. PAT works by translating the private IP addresses of inside hosts to the router's public IP address while uniquely identifying each session by modifying the TCP or UDP source port numbers. This multiplexing of sessions enables efficient use of scarce IPv4 addresses, which is a fundamental concept in Cisco CCNA IP Services topics. When a packet from an internal host is sent to the outside network, the router replaces the source IP address with its public IP address and assigns a unique source port number for that session. The router keeps a NAT translation table that maps the inside local IP address and port to the outside global IP address and port. Incoming packets are then translated back to the correct internal host based on this table. This process relies entirely on Layer 4 port numbers, which is why TCP and UDP port numbers are the primary resource enabling many hosts to share one public IPv4 address. A common exam trap is confusing NAT overload with other network identifiers such as MAC addresses or routing tables. MAC addresses operate at Layer 2 and are irrelevant to NAT, which functions at Layer 3 and Layer 4. Similarly, separate routing tables per client do not exist in NAT configurations. Understanding that PAT uses port numbers to distinguish sessions prevents misinterpretation of how NAT overload works in Cisco routers and ensures correct answers on the CCNA exam.
Key takeaway
NAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously.
Real-world example
A small business has 20 workstations on the 192.168.1.0/24 network and one public IP from its ISP. The router uses PAT (NAT overload) so all 20 devices share one public address using different source ports. NAT questions test whether you understand the four address terms and which direction each translation applies.
What to study next
Review nAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously., then practise related 200-301 questions on the same topic to reinforce the concept.
Network Services and Security — study guide chapter
Learn the concepts, then practise the questions
Network Services and Security practice questions
Targeted practice on this topic area only
All 200-301 questions
1,819 questions across all exam domains
CCNA 200-301 v2 study guide
Full concept coverage aligned to exam objectives
200-301 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise 200-301 questions linked to Network Infrastructure and Connectivity.
Practise 200-301 questions linked to Switching and Network Access.
Practise 200-301 questions linked to IP Routing.
Practise 200-301 questions linked to Network Services and Security.
Practise 200-301 questions linked to AI and Network Operations.
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Network Services and Security — This question tests Network Services and Security — NAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously..
The correct answer is: TCP and UDP port numbers — PAT distinguishes sessions by using Layer 4 port numbers. That is what allows many inside devices to use the same outside IP address at the same time without conflicting with each other.
Review nAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously., then practise related 200-301 questions on the same topic to reinforce the concept.
NAT overload, also known as Port Address Translation (PAT), uses TCP and UDP port numbers to allow multiple internal hosts to share a single public IPv4 address simultaneously.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
Last reviewed: May 17, 2026
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.