hardMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO statements about the 'ip nat outside…
Which TWO statements about the 'ip nat outside source' feature are true? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the distinction between 'ip nat inside source' and 'ip nat outside source', and candidates mistakenly assume that 'outside source' translates destination addresses or that translations are unidirectional.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It translates the source IP address of packets arriving on an interface configured as 'ip nat outside'.
The 'ip nat outside source' command translates the source IP address of packets that arrive on an interface configured as 'ip nat outside'. This is used when an external host's source address needs to be translated to a different address, typically to allow inside routers to route return traffic to a private address that the external host is mapped to.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It translates the source IP address of packets arriving on an interface configured as 'ip nat outside'.
Why this is correct
Correct. The command translates the source address of outside-originated traffic.
- ✓
It can be used to map an external public IP to an internal private IP so that inside routers can route to the private address.
Why this is correct
Correct. This is a common use case, e.g., when an external server's IP must appear as a private address inside the network.
- ✗
It requires the 'overload' keyword to perform Port Address Translation.
Why it's wrong here
Incorrect. 'overload' is used with 'ip nat inside source' for PAT; 'ip nat outside source' does not use overload.
- ✗
It translates the destination IP address of packets leaving the inside network.
Why it's wrong here
Incorrect. 'ip nat outside source' translates source IPs of outside packets, not destination IPs of inside packets.
- ✗
The translation is unidirectional; return traffic is not translated back.
Why it's wrong here
Incorrect. NAT is bidirectional; the router automatically performs reverse translation for return traffic.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.