Timedora
Free Practice Quiz Question List

4 NAT Configuration and Troubleshooting Online Quiz Questions

Use this free practice quiz with 20 questions to review 4 NAT Configuration and Troubleshooting, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

True or false: In the dynamic NAT example, the source ACL selects inside addresses for translation; it does not act as a firewall rule that grants or denies inbound access.

  1. A

    True

  2. B

    False

02
Written response
1 point

Which Cisco IOS command displays NAT translation entries so you can check whether an inside host has been translated?

03
Fill in the blank
1 point

A dynamic NAT pool has no available addresses. An additional eligible host may not receive a .

04
Choose one
1 point

A router has one interface connected to its inside LAN and another connected to the ISP. Which NAT role command belongs on the ISP-facing interface?

  1. A

    ip nat inside

  2. B

    ip nat outside

  3. C

    ip nat pool PUBLIC-POOL

  4. D

    ip nat inside source list 10 pool PUBLIC-POOL

05
Written response
1 point

Which Cisco IOS command displays NAT statistics that can help confirm whether interfaces and mappings are active?

06
Choose one
1 point

A static TCP port mapping publishes an inside web server at 192.168.10.20:80 as 198.51.100.11:8080. At which endpoint should an outside client connect?

  1. A

    198.51.100.11 on TCP port 80

  2. B

    192.168.10.20 on TCP port 8080

  3. C

    198.51.100.11 on TCP port 8080

  4. D

    192.168.10.20 on TCP port 80

07
Fill in the blank
1 point

Unlike ordinary dynamic NAT, lets multiple hosts share one address by distinguishing their connections with transport-layer ports.

08
True or false
1 point

True or false: An inside client can always test a port-forwarded service through the router's outside address, regardless of the router's NAT capabilities.

  1. A

    True

  2. B

    False

09
Choose one
1 point

An inside host must keep the same global address through a permanent one-to-one mapping. Which NAT method fits this requirement?

  1. A

    It assigns an address from a pool only when a host initiates traffic.

  2. B

    It provides a persistent one-to-one mapping to a fixed global address.

  3. C

    It lets multiple hosts share one address using transport-layer ports.

  4. D

    It maps an outside port to an inside service port only.

10
Choose all
1 point

You are preparing a dynamic NAT pool for a growing inside network. Which actions help prevent allocation failures or reachability problems? Select all that apply.

  1. A

    Make sure the pool has enough addresses for expected simultaneous allocations.

  2. B

    Use pool addresses that overlap the statically assigned NAT addresses.

  3. C

    Keep pool addresses separate from addresses used for static NAT.

  4. D

    Ensure the upstream network routes the pool to the NAT router.

11
Choose all
1 point

An inside host generates outbound traffic, but no NAT translation appears. Which checks are relevant to finding why the traffic was not translated? Select all that apply.

  1. A

    Confirm the source ACL matches the inside host and subnet.

  2. B

    Verify that the intended interfaces have the correct NAT roles and traffic passes through the router.

  3. C

    Assume the server's listening service is the only possible cause, even though no translation appears.

  4. D

    Check whether routing sends the test traffic through the NAT device.

12
Open ended
1 point

A test flow produces a NAT translation entry, but the application session still fails. Explain which parts of the traffic path or destination you would investigate next and why the translation entry alone does not prove the session works.

13
Choose one
1 point

Several inside hosts need outbound access while sharing one public address. Which NAT behavior supports this by distinguishing connections with transport-layer ports?

  1. A

    Each host receives a permanent one-to-one global address.

  2. B

    Multiple hosts share an address, with transport-layer ports distinguishing connections.

  3. C

    A host receives an available address from a pool, with no simultaneous sharing of one pool address.

  4. D

    An outside address and port are permanently mapped to one inside service and port.

14
Choose one
1 point

A server has a static NAT mapping to a fixed global address, but outside clients cannot reach it. Which statement best explains why the mapping alone may not be enough for inbound access?

  1. A

    Yes; a static mapping automatically overrides firewall and access-control rules and supplies a return route.

  2. B

    Not necessarily; inbound traffic must also be permitted by applicable security rules, and the host needs a working return route through the NAT router.

  3. C

    No; static NAT can only translate traffic initiated by the inside host.

  4. D

    Yes; inbound access requires no route back from the inside host.

15
Choose one
1 point

An inside server must always use the same global address. Which NAT method is designed for this requirement?

  1. A

    Assign a temporary address from a pool when the host initiates traffic

  2. B

    Keep a permanent one-to-one mapping between an inside host and a global address

  3. C

    Allow multiple hosts to share an address using transport-layer ports

16
True or false
1 point

A static NAT mapping alone guarantees that outside clients can reach the inside host, even if filtering blocks the traffic or the host's return route bypasses the NAT router.

  1. A

    True

  2. B

    False

17
Choose one
1 point

In the dynamic NAT example, what does the standard ACL used by the NAT rule do?

  1. A

    It determines which outside clients may connect to inside hosts

  2. B

    It assigns an available address from the public pool

  3. C

    It selects source addresses eligible for NAT translation, but does not itself control access

18
Choose one
1 point

A dynamic NAT pool has ten addresses, and all ten are currently in use. What may happen when another eligible inside host initiates traffic?

  1. A

    Additional eligible hosts may not receive a translation while all pool addresses are in use

  2. B

    The router automatically lets several hosts share one pool address at the same time

  3. C

    The NAT ACL begins permitting inbound connections to the hosts

19
Written response
1 point

A static TCP port mapping forwards traffic to inside server 192.168.10.20 on port 80 and publishes it as 198.51.100.11:8080. Which TCP port should an outside client connect to?

20
Written response
1 point

Which Cisco IOS command displays NAT statistics that can help confirm whether the configured interfaces and mappings are active?