CCNP Practice Question: Runs the following command on Router R1: R1# show…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Dynamic NAT is configured with a pool of addresses.

  Why it's wrong here

  Dynamic NAT with a pool is event-driven: translations are created only when an inside host initiates traffic, and the resulting entries show the transport protocol (TCP, UDP, or ICMP), idle timers, and outside local/global addresses. The output shown has entries with no protocol column value, no on-the-fly outside addressing, and no timer information, which is the signature of a preconfigured static mapping rather than a pool-based dynamic translation.

• ✓

  Static NAT is configured for two internal hosts.

  Why this is correct

  Static NAT creates persistent one-to-one mappings that appear in 'show ip nat translations' as entries with an inside global address and a corresponding inside local address, but no protocol, port, or outside address fields. The output shows exactly two such pairs, meaning two internal hosts have been statically translated to two unique global addresses. Because the mappings exist in the configuration regardless of traffic, they display even when no connection is active.

• ✗

  PAT is translating multiple internal addresses to a single global address.

  Why it's wrong here

  PAT (overload) uses the same inside global IP for many inside-local devices and differentiates flows by Layer 4 port numbers; the translation table would list the identical global address repeatedly with TCP/UDP/ICMP protocol entries and changing source ports. This output has no protocol or port column values, and every inside global address is unique, so it cannot be PAT. PAT translations are also traffic-generated, so they would show timers and outside addresses, which are absent here.

• ✗

  NAT is not operational because no outside local addresses are shown.

  Why it's wrong here

  The absence of outside local addresses in static NAT output is normal, because static inside-source NAT only maps the inside local address to the inside global address; outside local/global fields are populated only when destination NAT or outside-source translation is also configured. 'show ip nat translations' displays configured static entries immediately, and an entry with an inside global/local pair is proof that NAT is operational. A lack of outside addresses therefore does not indicate failure; instead, it indicates there is no outside destination address translation in use.