CCNP Virtualization Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  MPLS L3VPN with a route target per virtual network

  Why it's wrong here

  MPLS L3VPN is a service provider technology that uses VRFs and route targets to separate customer traffic. It is not used inside a Cisco SD-Access fabric. SD-Access uses VXLAN with a LISP-based control plane. While MPLS can provide segmentation, it does not match the SD-Access architecture or the requirement for endpoint mobility and fabric encapsulation.

• ✗

  GRE with a tunnel key per virtual network

  Why it's wrong here

  GRE is a generic tunneling protocol and can carry overlay traffic, but it is not the data plane encapsulation used by Cisco SD-Access. SD-Access specifically uses VXLAN because it provides a 24-bit VNI space and is supported in hardware on the fabric switches. GRE would not provide the required scale or integration with the SD-Access control plane based on LISP.

• ✗

  OTV with an overlay VLAN per virtual network

  Why it's wrong here

  OTV is a Cisco technology for extending Layer 2 between data centers over a Layer 3 transport. It is not the encapsulation used in SD-Access. OTV uses its own adjacency and doesn't provide the VNI-based segmentation or the control plane integration that SD-Access requires. Using OTV would not meet the fabric requirements for endpoint communication across edge nodes.

• ✓

  VXLAN with a fabric VNI mapped to each virtual network

  Why this is correct

  SD-Access uses VXLAN encapsulation in the fabric data plane. Each virtual network is mapped to a unique VNI, and the fabric edge nodes and border nodes act as VTEPs. The endpoint traffic is carried inside VXLAN tunnels across the underlay, which allows Layer 2 and Layer 3 communication between endpoints attached to different edge nodes while maintaining segmentation.