350-401 Question #210: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

Options

• Aip nat inside source list 10 interface FastEthernet0/1 overload
• Bip nat inside source list 10 interface FastEthernet0/2 overload
• Cip nat outside source list 10 interface FastEthernet0/2 overload
• Dip nat outside source static 209.165.200.225 10.10.10.0 overload

Explanation

NAT Configuration Explanation

Option A is correct because it configures PAT (Port Address Translation) using ip nat inside source, which translates private IP addresses from hosts on the inside network (FastEthernet0/2) to the outside public interface (FastEthernet0/1), allowing multiple internal hosts to share a single public IP address for Internet access.

Why the distractors are wrong:

• Option B incorrectly references FastEthernet0/2 as the translation interface - this is the inside interface connected to hosts, not the outside/Internet-facing interface that holds the public IP
• Option C uses ip nat outside source, which translates addresses coming from the Internet inward, not outbound traffic from internal hosts
• Option D uses ip nat outside source static, which creates a static one-to-one mapping for outside addresses - this is neither the correct direction nor the correct method for sharing Internet access

💡 Memory Tip

Remember "Inside Out" - traffic from inside hosts going out to the Internet always uses ip nat inside source, and the interface specified should be the outside (Internet-facing) interface, not the one where the hosts are connected. Think: "translate using the public face."

No community discussion yet for this question.