easyMultiple ChoiceObjective-mapped
SSCP Practice Question: Refer to the exhibit
Exhibit
Router# show ip nat translations Pro Inside global Inside local Outside local Outside global tcp 203.0.113.10:80 192.168.1.10:80 198.51.100.20:80 198.51.100.20:80 tcp 203.0.113.10:443 192.168.1.10:443 198.51.100.20:443 198.51.100.20:443 tcp 203.0.113.11:80 192.168.1.11:80 198.51.100.30:80 198.51.100.30:80
Refer to the exhibit. A security analyst notices that multiple internal hosts are using the same inside global IP address but different port numbers. Which technology is being used?
⚠ Common exam trap
Many exam-takers confuse PAT with Dynamic NAT, not realizing that Dynamic NAT requires a pool of public IPs and does not allow port-level multiplexing, whereas PAT is specifically designed to allow many-to-one address sharing using port differentiation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
PAT (Port Address Translation)
The scenario describes multiple internal hosts sharing a single inside global IP address but using different port numbers. This is the defining behavior of Port Address Translation (PAT), also known as NAT overload. PAT maps multiple private IP addresses to one public IP by differentiating sessions based on the transport-layer port number (TCP/UDP), allowing many hosts to share a single public address.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Dynamic NAT
Why it's wrong here
Dynamic NAT uses a pool of public IPs.
- ✗
Static NAT
Why it's wrong here
Static NAT maps one private IP to one public IP.
- ✓
PAT (Port Address Translation)
Why this is correct
PAT allows many internal hosts to share a single public IP by differentiating via port numbers.
- ✗
Port forwarding
Why it's wrong here
Port forwarding is used to allow external access to internal services.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.