mediumMultiple SelectObjective-mapped
CCNP Practice Question: Which two statements about NAT configuration on…
Which two statements about NAT configuration on Cisco IOS routers are true? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The ip nat inside source list command translates traffic from the inside interface to the outside interface.
A is correct because the 'ip nat inside source list' command translates inside local addresses to inside global addresses for traffic exiting the inside interface. E is correct because NAT overload (PAT) typically uses a single public IP address and differentiates flows using TCP/UDP port numbers. B is incorrect: static NAT requires 'ip nat inside' on one interface and 'ip nat outside' on a different interface, not both on the same interface. C is incorrect: 'ip nat outside source list' translates the source IP of packets entering the outside interface, not the inside. D is incorrect: dynamic NAT uses a pool of public IP addresses but does not assign them on a true 'first-come, first-served' basis; it allocates from the pool as needed, but the phrase is misleading in the context of NAT behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The ip nat inside source list command translates traffic from the inside interface to the outside interface.
Why this is correct
Correct. The 'ip nat inside source list' command translates source addresses for traffic from inside to outside.
- ✗
Static NAT requires both ip nat inside and ip nat outside commands on the same interface.
Why it's wrong here
Incorrect because static NAT requires one interface to be inside and another to be outside; they cannot be on the same interface.
- ✗
The ip nat outside source list command translates the source IP of packets entering the inside interface.
Why it's wrong here
Incorrect because ip nat outside source list translates the source IP of packets entering the outside interface, not the inside interface.
- ✗
Dynamic NAT uses a pool of public IP addresses assigned on a first-come, first-served basis.
Why it's wrong here
Incorrect. Dynamic NAT uses a pool of addresses, but the description 'first-come, first-served' is not accurate for NAT address allocation.
- ✓
NAT overload (PAT) uses a single public IP address by mapping multiple inside hosts to different TCP/UDP ports.
Why this is correct
Correct. NAT overload (PAT) commonly uses a single public IP with port multiplexing to support multiple inside hosts.
Visual reference
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.