mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ip nat translations
Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 203.0.113.5 203.0.113.5 --- 192.0.2.11 10.0.0.11 203.0.113.5 203.0.113.5
R1# show ip nat statistics
Total active translations: 2 (0 static, 2 dynamic; 0 extended) Outside interfaces: GigabitEthernet0/1 Inside interfaces: GigabitEthernet0/0 Hits: 20 Misses: 0 CEF Translated packets: 20, CEF Punted packets: 0 Expired translations: 0 Dynamic mappings: -- Inside Source
[Id] ip nat pool POOL1 192.0.2.10 192.0.2.20 netmask 255.255.255.240
refcount 2 map-id 1
[Id] ip nat inside source list ACL1 pool POOL1
refcount 2
Based on this output, which statement is correct?
⚠ Common exam trap
Cisco often tests the distinction between NAT and PAT by hiding port numbers in the 'Pro' column; candidates mistakenly assume PAT is active when they see multiple translations, but the absence of port numbers and the presence of unique global addresses clearly indicate standard dynamic NAT.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NAT is configured without PAT; each inside host uses a unique global address.
The output shows two dynamic NAT translations, each with a unique inside global address (192.0.2.10 and 192.0.2.11) mapped to different inside local addresses (10.0.0.10 and 10.0.0.11). The absence of any port numbers in the 'Pro' column indicates that Port Address Translation (PAT) is not used; instead, each inside host receives a one-to-one mapping to a unique public IP from the pool. This confirms standard dynamic NAT without PAT.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
NAT is configured without PAT; each inside host uses a unique global address.
Why this is correct
The statistics show 0 extended translations, and the mapping lacks 'overload'. The translations show different inside global addresses for each inside local.
- ✗
PAT is enabled, but only two translations are active.
Why it's wrong here
PAT would show extended translations (protocol/port) and the 'overload' keyword in the mapping.
- ✗
The pool is exhausted because two addresses are used.
Why it's wrong here
The pool has 16 addresses; using 2 is not exhaustion.
- ✗
Static NAT is configured for both hosts.
Why it's wrong here
The statistics show 0 static translations.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.