mediumMultiple SelectObjective-mapped
CCNP Practice Question: Which two statements about NAT configuration on…
Which two statements about NAT configuration on Cisco IOS-XE are true? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NAT overload (PAT) allows multiple internal hosts to share a single public IP address by using unique source port numbers.
NAT overload (PAT) translates multiple inside local addresses to a single inside global address using port numbers. The ip nat inside source list command with the overload keyword enables this. The ip nat inside source static command creates a one-to-one mapping, not many-to-one. Dynamic NAT without overload uses a pool of global addresses one-to-one. The ip nat outside command is applied to the external interface, not inside. NAT can translate source addresses for traffic leaving the inside network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
NAT overload (PAT) allows multiple internal hosts to share a single public IP address by using unique source port numbers.
Why this is correct
Correct because PAT uses port multiplexing to distinguish sessions from different internal hosts sharing one global IP.
- ✗
The ip nat inside source list 1 pool POOL overload command enables dynamic NAT without port translation.
Why it's wrong here
Incorrect because the 'overload' keyword enables PAT (port translation); without it, it is dynamic NAT using a pool one-to-one.
- ✓
A static NAT entry is created using the ip nat inside source static 192.168.1.10 203.0.113.10 command.
Why this is correct
Correct because this command creates a permanent one-to-one mapping from an inside local to an inside global address.
- ✗
The ip nat outside command is applied to the internal interface to mark it as the source of NAT translations.
Why it's wrong here
Incorrect because ip nat outside is applied to the external interface; ip nat inside is applied to the internal interface.
- ✗
Dynamic NAT without overload translates multiple inside addresses to a single outside address using port numbers.
Why it's wrong here
Incorrect because dynamic NAT without overload maps inside addresses one-to-one to a pool of global addresses, not using ports.
Visual reference
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.