easyMultiple ChoiceObjective-mapped
350-701 Practice Question: Refer to the exhibit
Exhibit
Refer to the exhibit. ciscoftd(config)# show running-config | section nat nat (inside,outside) source static 10.0.1.0 10.0.1.0 destination static 192.168.1.0 192.168.1.0 no-proxy-arp route-lookup
Refer to the exhibit. What is the effect of this NAT rule on the Cisco FTD device deployed in the cloud?
⚠ Common exam trap
Cisco often tests the distinction between identity NAT and dynamic PAT, where candidates mistakenly assume that any NAT rule must involve address translation or PAT, but identity NAT explicitly preserves the original IP without port translation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Performs identity NAT between the two networks without port translation
The NAT rule shown in the exhibit is a static identity NAT (also known as NAT exempt or no-translation NAT) that translates the source IP address of traffic from the 192.168.1.0/24 network to the same IP address when going to the 10.0.0.0/24 network. This is achieved by specifying the source address as both the original and translated address, effectively bypassing any address translation while still being processed by the NAT engine. Since no port translation is configured, it performs identity NAT without PAT, which is why option A is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Performs identity NAT between the two networks without port translation
Why this is correct
The 'static' keyword with same IP on both sides indicates identity NAT.
- ✗
Translates source IP when traffic goes from outside to inside
Why it's wrong here
The rule is applied on the 'inside' interface; source translation is static for inside to outside traffic.
- ✗
Enables Port Address Translation (PAT)
Why it's wrong here
There is no 'pat' keyword; this is identity NAT.
- ✗
Translates destination IP from 192.168.1.0 to a public IP
Why it's wrong here
Destination is also static with same IP, so no translation.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.