Courseiva
Infrastructure →easyMultiple Choice

CCNP Infrastructure Practice Question

A network administrator is configuring a Cisco IOS router to support NAT overload for a small office. The inside network is 10.1.1.0/24, and the outside interface is GigabitEthernet0/1 with IP address 203.0.113.5. The administrator wants all inside hosts to share the outside interface address for internet access. Which command is required to define the NAT pool or interface used for translation?

⚠ Common exam trap

Many candidates confuse the direction of NAT (inside source versus outside source) and the use of an interface versus a pool, which can lead to incorrect translation entries.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

ip nat inside source list 1 interface GigabitEthernet0/1 overload

To configure NAT overload using the outside interface address, the correct command is 'ip nat inside source list 1 interface GigabitEthernet0/1 overload'. This command references an access list that identifies inside local addresses and translates them to the IP address of the specified interface, using port numbers to distinguish sessions. It is the standard method for enabling many inside hosts to share a single public IP address.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    ip nat inside destination list 1 interface GigabitEthernet0/1 overload

    Why it's wrong here

    The 'ip nat inside destination' command is used for destination NAT, often for load balancing or port forwarding to inside servers. It does not translate inside source addresses for outbound internet access. The scenario requires source NAT for inside hosts to share the outside interface address. Thus, this command is not applicable and would not provide the desired functionality.

  • ✗

    ip nat inside source list 1 pool MYPOOL overload

    Why it's wrong here

    This command would be correct if a NAT pool named MYPOOL were defined and the administrator wanted to use a pool of addresses for translation. However, the scenario specifies using the outside interface address, not a pool. Additionally, no pool is defined in the scenario. While the command syntax is valid, it does not meet the requirement of using the interface address for NAT overload.

  • ✗

    ip nat outside source list 1 interface GigabitEthernet0/1 overload

    Why it's wrong here

    The 'ip nat outside source' command is used to translate outside source addresses, typically for scenarios where outside hosts need to appear as inside addresses. This is the opposite of what is needed here. The requirement is to translate inside source addresses to the outside interface address for internet access. Therefore, this command is incorrect for the scenario.

  • ✓

    ip nat inside source list 1 interface GigabitEthernet0/1 overload

    Why this is correct

    This command configures NAT overload, also known as Port Address Translation (PAT), using the outside interface's IP address for translation. The 'list 1' refers to an access list that defines the inside local addresses. The 'overload' keyword enables many-to-one translation by multiplexing inside addresses using port numbers. This is the correct way to configure NAT overload when using the interface address rather than a pool.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Cisco exam blueprint

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.