200-301 domain - 10% of the exam

IP Services

IP Services is 10% of the Cisco Certified Network Associate (CCNA 200-301) (200-301) exam. These are the objectives it covers, each with practice questions and worked explanations.

Objectives in this domain

Sample question from this domain

Free sampleIP Servicesmedium

A router runs inside source NAT so that a workstation in the private LAN can reach a public web server. The workstation holds a private RFC 1918 address, and the router rewrites the source to a registered public address before the packet leaves the WAN interface. Which NAT term describes that registered public address the workstation is translated to?

  • AInside local address, because it is the address the router assigns to the inside host before the packet is forwarded to the WAN.
  • BOutside global address, because it is the public address that the inside host is given when its traffic crosses to the outside.
  • CInside global address, because it is the registered public address that represents the inside host as seen from the outside network. Correct
  • DOutside local address, because it is the public address the inside host presents while communicating with the outside server.
Distinguish inside global as the translated public address of an inside host from the inside local and outside NAT terms. In Cisco NAT terminology the inside local address is the private address used inside, while the inside global address is the registered public address the router maps it to; outside local and outside global describe the far-end host, so only inside global names the translated public address of the inside host.

Why A is wrong: The inside local address is the private address the host actually uses inside the network, not the registered public address it is translated to, so this term is the wrong end of the mapping.

Why B is wrong: The outside global address is the real public address of the destination on the outside network, not the address assigned to the translated inside host, so the label is applied to the wrong host.

Why C is correct: The inside global address is exactly the routable public address the router substitutes for the inside host's private address, so outside devices see the inside host by this address.

Why D is wrong: The outside local address is how an outside host appears to devices inside the network, so it does not describe the inside host's own translated public address.

Other domains in this exam

See also the 200-301 cert hub, the study guide, and the cheat sheet.

Examworthy is not affiliated with or endorsed by Cisco. Original, blueprint-aligned practice material only.