How many NAT and PAT Configuration Scenarios questions are on this page?

This page has 5 NAT and PAT Configuration Scenarios scenario questions for the 350-401 exam, each with detailed explanations and wrong-answer analysis.

How should I approach 350-401 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to ENCOR 350-401 questions

Scenario-based practice

NAT and PAT Configuration Scenarios

Practise 350-401 NAT and PAT questions covering address translation types, inside/outside interface roles, static vs dynamic vs PAT, and troubleshooting missing or incorrect translations.

Start full practice test Read exam guide

scenario questions

350-401

exam code

Cisco

vendor

Scenario guide

How to approach nat and pat configuration scenarios

NAT and PAT questions cover static NAT (one-to-one), dynamic NAT (pool-based), and PAT/overload (many-to-one using port numbers). The CCNA asks you to read NAT table output, fix misconfigured NAT, and match the right NAT type to a scenario.

Quick answer

NAT questions usually test how private addresses are translated, when to use static NAT, dynamic NAT or PAT, and how inside/outside interfaces affect traffic flow.

Static NAT, dynamic NAT and PAT behaviour.

Inside local, inside global, outside local and outside global address meanings.

How NAT affects connectivity between private networks and public destinations.

How to troubleshoot NAT rules, ACL matches and interface direction.

Practice scenarios

Question 1mediummultiple choice

Read the full NAT/PAT explanation →

A network engineer runs the following command on Router R7:

R7# show ip nat translations verbose

Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:05:00 timeout: never, flags: static --- 192.0.2.11 10.0.0.11 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:06:00 timeout: never, flags: static

Based on this output, what can be concluded?

A
These translations will expire after a configurable timeout.
Why wrong: The timeout is 'never', so they do not expire.
B
The translations are dynamic and will be removed after idle timeout.
Why wrong: The flags indicate 'static', not dynamic.
C
The router is performing PAT for these addresses.
Why wrong: No protocol or port is shown; these are simple static NAT entries.
D
The translations are static and will remain until manually removed.
Static NAT entries with timeout 'never' persist indefinitely.

Full breakdown with real-world context →

Question 2mediumdrag order

Read the full VRF explanation →

Drag and drop the steps of VRF-aware NAT configuration steps into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 3mediummulti select

Read the full NAT/PAT explanation →

Which two statements about NAT configuration on Cisco IOS-XE are true? (Choose two.)

A
NAT overload (PAT) allows multiple internal hosts to share a single public IP address by using unique source port numbers.
Correct because PAT uses port multiplexing to distinguish sessions from different internal hosts sharing one global IP.
B
The ip nat inside source list 1 pool POOL overload command enables dynamic NAT without port translation.
Why wrong: Incorrect because the 'overload' keyword enables PAT (port translation); without it, it is dynamic NAT using a pool one-to-one.
C
A static NAT entry is created using the ip nat inside source static 192.168.1.10 203.0.113.10 command.
Correct because this command creates a permanent one-to-one mapping from an inside local to an inside global address.
D
The ip nat outside command is applied to the internal interface to mark it as the source of NAT translations.
Why wrong: Incorrect because ip nat outside is applied to the external interface; ip nat inside is applied to the internal interface.
E
Dynamic NAT without overload translates multiple inside addresses to a single outside address using port numbers.
Why wrong: Incorrect because dynamic NAT without overload maps inside addresses one-to-one to a pool of global addresses, not using ports.

Full breakdown with real-world context →

Question 4hardmultiple choice

Read the full NAT/PAT explanation →

A network engineer runs the following command on Router R9:

R9# show ip nat translations

Pro Inside global Inside local Outside local Outside global udp 192.0.2.20:1234 10.0.0.20:1234 203.0.113.1:53 203.0.113.1:53 tcp 192.0.2.20:5678 10.0.0.20:5678 198.51.100.1:80 198.51.100.1:80 --- 192.0.2.21 10.0.0.21 --- ---

Based on this output, what can be concluded?

A
All translations are dynamic.
Why wrong: The third entry has no protocol, indicating it is static.
B
The router is using both static NAT and PAT simultaneously.
Static NAT for 10.0.0.21 and PAT for 10.0.0.20 are both active.
C
The router is configured with a single NAT pool.
Why wrong: Static NAT does not use a pool; PAT may use a pool or interface.
D
The inside global address 192.0.2.20 is used for both static and dynamic translations.
Why wrong: 192.0.2.20 is used only for dynamic PAT; static uses 192.0.2.21.

Full breakdown with real-world context →

Question 5mediumdrag order

Read the full NAT/PAT explanation →

Drag and drop the steps of configuring Dynamic NAT on a Cisco IOS router into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

These 350-401 practice questions are part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style 350-401 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

NAT and PAT Configuration Scenarios

How to approach nat and pat configuration scenarios

Quick answer

Related 350-401 topic practice pages

Architecture practice questions

Virtualization practice questions

Infrastructure practice questions

Network Assurance practice questions

Security practice questions

Automation practice questions

ENCOR BGP practice questions

ENCOR OSPF practice questions

ENCOR EIGRP practice questions

ENCOR VLANs and trunking practice questions

ENCOR STP practice questions

ENCOR ACLs and CoPP practice questions

Practice scenarios

Drag and drop the steps of VRF-aware NAT configuration steps into the correct order, from first to last.

Which two statements about NAT configuration on Cisco IOS-XE are true? (Choose two.)

Drag and drop the steps of configuring Dynamic NAT on a Cisco IOS router into the correct order, from first to last.