mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Is troubleshooting an issue where users on a…
A network engineer is troubleshooting an issue where users on a specific VLAN cannot access the internet through a Cisco ASA firewall. The ASA has a default route pointing to the ISP router. The security policy includes an ACL that permits all traffic from the inside interface to the outside interface. What is the most likely cause of the problem?
⚠ Common exam trap
Cisco often tests the misconception that an ACL permitting all traffic is sufficient for internet access, but the trap here is that the ASA requires NAT (or a NAT exemption) for traffic to traverse security levels, even when the ACL is permissive.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NAT (Network Address Translation) is not configured
The most likely cause is that NAT is not configured. Even though the ACL permits all traffic from inside to outside, the Cisco ASA requires NAT (or a NAT exemption rule) to translate private IP addresses to a routable public IP address when traffic traverses from a higher-security interface (inside) to a lower-security interface (outside). Without NAT, the ASA will drop the packets because it cannot determine how to route the private source addresses on the public internet, and the return traffic would have no way to reach the internal hosts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The default route is misconfigured
Why it's wrong here
The default route exists and points to the ISP router.
- ✗
DNS is not resolving domain names
Why it's wrong here
DNS failure would affect name resolution but not basic IP connectivity.
- ✓
NAT (Network Address Translation) is not configured
Why this is correct
Without NAT, private IP addresses cannot reach the internet because they are not routable.
- ✗
The ACL is blocking the traffic
Why it's wrong here
The ACL permits all traffic, so it is not blocking.
Visual reference
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.