Complete step-by-step Packet Tracer (.PKA) lab solution for Network Support and Security Final Lab & Checkpoint Exam Answers (Cisco Skills for All). Includes the Topology Addressing Table, Missing Score Checklist (97% or 98% -> 100% Fix), multi-device Cisco IOS CLI scripts, and 10 interactive lab verification questions.
1. Topology & Addressing Table (SFA-LAB-3)
| Device | Interface | IP Address | Subnet Mask | Gateway |
|---|---|---|---|---|
| WLC-2504 Controller | Management VLAN 1 | 172.31.1.250 | 255.255.255.0 | 172.31.1.1 |
| LAP-1 (Lightweight AP) | GigabitEthernet0 | DHCP (VLAN 1) | 255.255.255.0 | 172.31.1.1 |
⚠️ Stuck at 97% or 98% in Packet Tracer? (3 Hidden Grader Checks)
1. Check #1: On WLC GUI under WLANs -> Security -> AAA Servers, forgot to select Server 1 (172.31.1.254).
2. Check #2: Case-sensitive SSID mismatch ('Floor 2 Employees') or wrong WLAN ID.
3. Check #3: Forgot to enable 'FlexConnect Local Switching' under the Advanced tab of WLC GUI.
2. Complete Multi-Device Cisco IOS CLI Solution (SFA-LAB-3)
WLC-2504 Controller Configuration Script
WLC-2504 Controller — IOS CLI
enable configure terminal interface g0/0.1 encapsulation dot1Q 1 native ip address 172.31.1.1 255.255.255.0 interface g0/0.10 encapsulation dot1Q 10 ip address 172.31.10.1 255.255.255.0 interface g0/0.20 encapsulation dot1Q 20 ip address 172.31.20.1 255.255.255.0 end
LAP-1 (Lightweight AP) Configuration Script
LAP-1 (Lightweight AP) — IOS CLI
enable configure terminal interface g0/1 switchport mode trunk interface f0/1 switchport mode trunk switchport trunk native vlan 1 end
3. Practical Lab Verification Quiz (10 Interactive Questions)
Lab Question 1While configuring SFA-LAB-3 in Packet Tracer, your score is stuck at 97% or 98% even though pings succeed. What is the #1 configuration item missed?
✔ Correct Answer: A. On WLC GUI under WLANs -> Security -> AAA Servers, forgot to select Server 1 (172.31.1.254).
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 2Refer to the Addressing Table in SFA-LAB-3. Which command sequence configures WLC-2504 Controller (Management VLAN 1)?
✔ Correct Answer: B. ip address 172.31.1.250 255.255.255.0 and no shutdown
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 3During Part 2 of SFA-LAB-3, which second common mistake prevents reaching 100%?
✔ Correct Answer: C. Case-sensitive SSID mismatch ('Floor 2 Employees') or wrong WLAN ID.
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 4Which Cisco IOS verification command confirms operational status for SFA-LAB-3?
✔ Correct Answer: A. show ip dhcp binding | show interfaces trunk
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 5What is the third critical grader check required before submitting SFA-LAB-3?
✔ Correct Answer: D. Forgot to enable 'FlexConnect Local Switching' under the Advanced tab of WLC GUI.
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 6What happens if the Native VLAN is mismatched on an 802.1Q trunk link in SFA-LAB-3?
✔ Correct Answer: B. CDP logs native VLAN mismatch alerts and PVST+ blocks the inconsistent VLAN.
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 7If a switch port configured with Port Security violates the max MAC count in default mode, what state does it enter?
✔ Correct Answer: C. err-disabled (requires shutdown and no shutdown to recover)
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 8Why must you execute 'copy running-config startup-config' before submitting SFA-LAB-3 or a 200-301 PBQ Simlet?
✔ Correct Answer: A. To save active RAM configuration into non-volatile NVRAM so grading scripts score it.
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 9If a router learns a /24 route via OSPF (AD 110) and a Floating Static Route configured with AD 5, which enters the routing table?
✔ Correct Answer: B. The Floating Static Route (AD 5) because 5 is lower than OSPF AD 110.
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.Lab Question 10Where should an Extended IPv4 ACL (100-199) be placed according to Cisco best practices?
✔ Correct Answer: D. As close to the SOURCE of the traffic as possible.
Lab Verification Note: Always verify with
show ip dhcp binding | show interfaces trunk and save configuration to NVRAM.