mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Given this configuration: ip nat pool GLOBAL…
Given this configuration:
ip nat pool GLOBAL 203.0.113.1 203.0.113.10 prefix-length 28 ip nat inside source list 10 pool GLOBAL overload access-list 10 permit 10.0.0.0 0.255.255.255
What is the effect?
⚠ Common exam trap
Watch out — candidates often confuse `overload` with static NAT or assume `prefix-length` is invalid, but Cisco explicitly tests the understanding that `overload` enables PAT and that `prefix-length` is a valid syntax for defining the subnet mask in NAT pools.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inside hosts matching ACL 10 are translated to addresses in the pool using PAT.
The configuration uses `ip nat inside source list 10 pool GLOBAL overload`, which combines a NAT pool with the `overload` keyword to enable Port Address Translation (PAT). ACL 10 permits all 10.0.0.0/8 addresses, so inside hosts matching this ACL are translated to the pool addresses (203.0.113.1–203.0.113.10) with port multiplexing, allowing many hosts to share the same public IP. This is the standard Cisco PAT behavior, making option C correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
All inside hosts are translated to the first pool address only.
Why it's wrong here
With overload, the router can use any address in the pool, not just the first.
- ✗
Each inside host gets a unique pool address without port translation.
Why it's wrong here
The 'overload' keyword enables PAT, so multiple hosts share pool addresses.
- ✓
Inside hosts matching ACL 10 are translated to addresses in the pool using PAT.
Why this is correct
This correctly describes the configuration: dynamic NAT with overload.
- ✗
The prefix-length 28 is invalid; a netmask must be used instead.
Why it's wrong here
Both 'netmask' and 'prefix-length' are valid in the ip nat pool command.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.