Question

64. Your inside locals are not being translated to the inside global addresses. Which of the
following commands will show you if your inside globals are allowed to use the NAT pool?
ip nat pool Corp 198.18.41.129 198.18.41.134 netmask 255.255.255.248
ip nat inside source list 100 int s0/0 Corp overload
a. debug ip nat
b. show access-list
c. show ip nat translation
d. show ip nat statistics
65. Which command would you place on the interface of a private network?
a. ip nat inside
b. ip nat outside
c. ip outside global
d. ip inside local
66. Which command would you place on an interface connected to the Internet?
a. ip nat inside
b. ip nat outside
c. ip outside global
d. ip inside local
67. Port Address Translation is also called what?
a. NAT Fast
b. NAT Static
c. NAT Overload
d. Overloading Static
68. What does the asterisk (*) represent in the following output?
NAT*: s=172.16.2.2, d=192.168.2.1->10.1.1.1 [1]
a. The packet was destined for a local interface on the router.
b. The packet was translated and fast-switched to the destination.
c. The packet attempted to be translated but failed.
d. The packet was translated but there was no response from the remote host.
69. Which of the following needs to be added to the configuration to enable PA
T? ip nat pool Corp 198.18.41.129 198.18.41.134 netmask 255.255.255.248
access-list 1 permit 192.168.76.64
0.0.0.31 ip nat pool inside overload
a. ip nat inside source list 1 pool Corp overload
b. ip nat pool outside overload
c. ip nat pool Corp 198.41.129 net 255.255.255.0 overload
70. Which of the following statements is false when a packet is being compared to an access
list?
a. It’s always compared with each line of the access list in sequential order.
b. Once the packet matches the condition on a line of the access list, the packet is acted upon and no
further comparisons take place.
c. There is an implicit “deny” at the end of each access list.
d. Until all lines have been analyzed, the comparison is not over.
71. You need to create an access list that will prevent hosts in the network range
of 192. 168.160.0 to 192 .168 .191.0 . Which of the following lists will you use?
a. access-list 10 deny 192.168.160.0 255.255.224.0
b. access-list 10 deny 192.168.160.0 0.0.191.255
c. access-list 10 deny 192.168.160.0 0.0.31.255
d. access-list 10 deny 192.168.0.0 0.0.31.255
72. You have created a named access list called BlockSales. Which of the following is a valid
command for applying this to packets trying to enter interface Fa0/0 of your ro uter?
a. (config)#ip access-group 110 in
b. (config-if)#ip access-group 110 in
c. (config-if)#ip access-group Blocksales in
d. (config-if)#BlockSales ip access-list in

Answer 1

64. b — show access-list (checks whether the NAT ACL permits the inside addresses to use the pool)
65. a — ip nat inside
66. b — ip nat outside
67. c — NAT Overload
68. b — The asterisk means the translation was used and fast-switched to the destination
69. a — ip nat inside source list 1 pool Corp overload
70. d — False: comparison does not always wait until all lines are analyzed (matching stops at the first match)
71. c — access-list 10 deny 192.168.160.0 0.0.31.255 (wildcard for /19)
72. c — (config-if)# ip access-group BlockSales in