Which NAT type allows only objects or groups to reference an IP address?

A.
Static NAT

B.
Dynamic NAT

C.
Dynamic PAT

D.
Identity NAT

Explanation:
Brad
Answer- B
Confidence level: 100%
Note: A lot of people are claiming that Dynamic PAT is the correct answer. This is also wrong. When using
dynamic PAT, you can also configure an inline host address or specify the interface address to be assigned to
an IP.
BD
Adding Network Objects for Mapped Addresses
For dynamic NAT, you must use an object or group for the mapped addresses. Other NAT types have the
option of using inline addresses, or you can create an object or group according to this section.
* Dynamic NAT:
+ You cannot use an inline address; you must configure a network object or group.
+ The object or group cannot contain a subnet; the object must define a range; the group can include hosts and
ranges.
+ If a mapped network object contains both ranges and host IP addresses, then the ranges are used for
dynamic NAT, and then the host IP addresses are used as a PAT fallback.
* Dynamic PAT (Hide):
+ Instead of using an object, you can optionally configure an inline host address or specify the interfaceaddress.
+ If you use an object, the object or group cannot contain a subnet; the object must define a host, or for a PAT
pool, a range; the group (for a PAT pool) can include hosts and ranges.
* Static NAT or Static NAT with port translation:
+ Instead of using an object, you can configure an inline address or specify the interface address (for static
NAT-with-port-translation).
+ If you use an object, the object or group can contain a host, range, or subnet.
* Identity NAT
+ Instead of using an object, you can configure an inline address.
+ If you use an object, the object must match the real addresses you want to translate.
Source: http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/
nat_objects.html#61711