mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ip nat translations
Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 --- --- --- 192.0.2.11 10.0.0.11 --- --- --- 192.0.2.12 10.0.0.12 --- ---
R1# show ip nat statistics
Total active translations: 3 (0 static, 3 dynamic; 3 extended) Outside interfaces: GigabitEthernet0/1 Inside interfaces: GigabitEthernet0/0 Hits: 45 Misses: 0 CEF Translated packets: 45, CEF Punted packets: 0 Expired translations: 0 Dynamic mappings: -- Inside Source
[Id] ip nat pool POOL1 192.0.2.10 192.0.2.20 netmask 255.255.255.240
refcount 3 map-id 1 overload
[Id] ip nat inside source list ACL1 pool POOL1 overload
refcount 3
Based on this output, which statement is correct?
⚠ Common exam trap
Cisco often tests the misconception that 'overload' always forces all hosts to share a single IP address, but in reality, PAT will first assign unique IPs from the pool if available, and only reuse IPs with port differentiation when the pool is exhausted.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
PAT is working correctly; translations are dynamic and overload is enabled.
The output shows three dynamic translations from the inside local addresses (10.0.0.10–12) to inside global addresses (192.0.2.10–12) using the pool POOL1 (192.0.2.10–20). The 'overload' keyword in the NAT configuration enables Port Address Translation (PAT), allowing multiple inside hosts to share a single global IP by using unique port numbers. The 'refcount 3' and the presence of three active translations confirm that PAT is working correctly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
PAT is working correctly; translations are dynamic and overload is enabled.
Why this is correct
The output shows dynamic mappings with overload, and translations are active. No errors or misses indicate proper operation.
- ✗
NAT is failing because the pool is exhausted.
Why it's wrong here
The pool has 16 addresses, and only 3 are used. Exhaustion is not indicated.
- ✗
Static NAT is configured, but dynamic NAT is not working.
Why it's wrong here
The statistics show 0 static translations and 3 dynamic. Static NAT is not configured.
- ✗
The inside and outside interfaces are reversed.
Why it's wrong here
The interfaces are correctly listed: GigabitEthernet0/0 as inside, GigabitEthernet0/1 as outside.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.