CCNP Architecture Practice Question
A network architect is designing a Cisco SD-Access fabric and must ensure that the control plane and data plane are properly separated. Which two statements accurately describe the roles of fabric nodes in Cisco SD-Access? (Choose two.)
⚠ Common exam trap
The trap here is mixing up the roles of edge, control plane, and border nodes, especially assuming edge nodes perform control plane functions like LISP map-server.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric edge nodes encapsulate traffic in VXLAN and provide anycast gateway functionality for endpoints.
In Cisco SD-Access, fabric edge nodes provide VXLAN encapsulation and anycast gateway for endpoints, while control plane nodes run LISP map-server and map-resolver to track endpoint locations. Border nodes connect to external networks, and intermediate nodes provide underlay transport. Edge nodes do not maintain the LISP map-server database; that is the control plane node's function.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Fabric edge nodes encapsulate traffic in VXLAN and provide anycast gateway functionality for endpoints.
Why this is correct
Fabric edge nodes are responsible for VXLAN encapsulation and decapsulation at the fabric boundary. They provide the anycast gateway, which serves as the default gateway for endpoints, allowing seamless mobility. This statement correctly describes a key role of edge nodes in SD-Access, making it one of the accurate statements.
- ✓
Fabric control plane nodes run LISP map-server and map-resolver to track endpoint locations.
Why this is correct
Control plane nodes in SD-Access use LISP to maintain a mapping of endpoint IP addresses to fabric edge nodes. They function as map-server and map-resolver, enabling fabric edge nodes to query and register endpoint locations. This statement accurately reflects the control plane node's role, making it a correct choice.
- ✗
Fabric intermediate nodes perform LISP map-cache resolution for endpoints on behalf of edge nodes.
Why it's wrong here
Intermediate nodes are used in SD-Access to provide Layer 3 underlay connectivity between fabric sites, but they do not perform LISP map-cache resolution. That function is handled by control plane nodes. Intermediate nodes simply forward VXLAN-encapsulated traffic based on outer IP headers, so this statement is inaccurate.
- ✗
Fabric border nodes are responsible for VXLAN encapsulation of traffic between edge nodes within the same fabric site.
Why it's wrong here
VXLAN encapsulation between edge nodes within a fabric site is done by the edge nodes themselves, not border nodes. Border nodes handle traffic entering and leaving the fabric, connecting to external networks or other fabric sites. This statement misassigns the encapsulation role, so it is incorrect.
- ✗
Fabric edge nodes maintain the LISP map-server database for all endpoints in the fabric site.
Why it's wrong here
The LISP map-server database is maintained by control plane nodes, not edge nodes. Edge nodes register their endpoints with the control plane node but do not host the map-server database. This statement incorrectly assigns the map-server role to edge nodes, so it is not accurate.
Visual reference
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.