CCNP Infrastructure Practice Question
A network architect is designing a data center fabric that must support Layer 2 extension over a Layer 3 underlay while using a control-plane protocol that advertises MAC reachability. The design requires the use of a protocol that encapsulates Layer 2 frames in IP packets and uses an EVPN address family for MAC/IP advertisement. Which technology best meets these requirements?
⚠ Common exam trap
The trap here is assuming that any Layer 2 extension technology uses BGP EVPN for MAC advertisement, overlooking that OTV and MPLS L2VPN use different control planes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VXLAN with BGP EVPN control plane
VXLAN with BGP EVPN is the correct choice because it encapsulates Layer 2 frames in UDP/IP and uses BGP EVPN as the control plane to advertise MAC and IP reachability. This provides a scalable and efficient solution for Layer 2 extension over a Layer 3 underlay, meeting the design requirements for a data center fabric.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VXLAN with BGP EVPN control plane
Why this is correct
VXLAN provides Layer 2 extension over a Layer 3 underlay by encapsulating Ethernet frames in UDP/IP. BGP EVPN is used as the control plane to advertise MAC and IP reachability, enabling efficient forwarding and multi-tenancy. This matches the requirement for a protocol that encapsulates Layer 2 frames in IP and uses EVPN for MAC/IP advertisement.
- ✗
OTV with IS-IS as the control plane
Why it's wrong here
OTV is a Cisco proprietary technology for Layer 2 extension over Layer 3, but it uses IS-IS as its control plane and does not use BGP EVPN for MAC/IP advertisement. It encapsulates Layer 2 frames in IP, but the control plane is different from what is specified. OTV is also primarily used for data center interconnect, not for a fabric underlay with EVPN.
- ✗
LISP with a Map-Server/Map-Resolver
Why it's wrong here
LISP is a routing architecture that separates location and identity, but it does not encapsulate Layer 2 frames; it encapsulates IP packets. It uses a Map-Server/Map-Resolver for EID-to-RLOC mapping, not BGP EVPN for MAC/IP advertisement. LISP is not designed for Layer 2 extension, so it does not meet the requirement.
- ✗
MPLS L2VPN with BGP for label distribution
Why it's wrong here
MPLS L2VPN can extend Layer 2 over an MPLS network, but it does not encapsulate Layer 2 frames in IP packets; it uses MPLS labels. It may use BGP for label distribution, but it does not use BGP EVPN for MAC/IP advertisement. This technology is not based on IP encapsulation and does not meet the requirement.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.