nerdexam
Cisco

200-301 · Question #598

Refer to the exhibit. How should the configuration be updated to allow PC1 and PC2 access to the Internet?

The correct answer is B. Add either the ip nat {inside|outside} command under both interfaces.. To enable Network Address Translation (NAT) for Internet access, both the internal and external interfaces must be explicitly configured with the ip nat inside and ip nat outside commands, respectively.

Submitted by tyler.j· Mar 5, 2026IP Services

Question

Refer to the exhibit. How should the configuration be updated to allow PC1 and PC2 access to the Internet?

Exhibits

200-301 question #598 exhibit 1
200-301 question #598 exhibit 2

Options

  • AModify the configured number of the second access list.
  • BAdd either the ip nat {inside|outside} command under both interfaces.
  • CRemove the overload keyword from the ip nat inside source command.
  • DChange the ip nat inside source command to use interface GigabitEthernet0/0.

How the community answered

(68 responses)
  • A
    6% (4)
  • B
    54% (37)
  • C
    26% (18)
  • D
    13% (9)

Why each option

To enable Network Address Translation (NAT) for Internet access, both the internal and external interfaces must be explicitly configured with the `ip nat inside` and `ip nat outside` commands, respectively.

AModify the configured number of the second access list.

The exhibit only shows one access list (number 1), and modifying a non-existent second access list or changing the existing one's number would not resolve the fundamental issue of missing NAT interface commands.

BAdd either the ip nat {inside|outside} command under both interfaces.Correct

For Cisco IOS NAT to function, interfaces must be explicitly designated as `ip nat inside` for the private network-facing interface (GigabitEthernet0/0 for PC1/PC2) and `ip nat outside` for the public network-facing interface (Serial0/0/0 for Internet access). Without these critical commands, the router cannot properly distinguish between inside and outside local/global addresses to perform NAT translations, thus preventing Internet access.

CRemove the overload keyword from the ip nat inside source command.

The `overload` keyword enables Port Address Translation (PAT), which is typically desired for multiple internal hosts sharing a single public IP address, and removing it would likely break connectivity for multiple users if only one public IP is available.

DChange the ip nat inside source command to use interface GigabitEthernet0/0.

The `ip nat inside source` command specifies which interface's IP address (typically the outside interface's) should be used for the NAT translation; changing it to the inside interface (GigabitEthernet0/0) would use a private IP for the global address, preventing Internet access.

Concept tested: Cisco IOS NAT interface configuration

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/nat-xe-3s-book/ipnat-cfg-nat-ovrld.html

Topics

#Cisco NAT#NAT interface configuration#PAT configuration

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice