CCNP Architecture Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Cisco Identity Services Engine (ISE)

  Why it's wrong here

  Cisco ISE provides authentication, authorization, and accounting (AAA) services and can assign security group tags (SGTs) based on identity. However, it does not maintain endpoint location information; that is handled by the LISP Map-Server. ISE integrates with SD-Access for policy enforcement but is not the component that tracks endpoint location. Thus, it is not the correct answer.

• ✓

  LISP Map-Server

  Why this is correct

  The LISP Map-Server maintains the mapping of endpoint identities (EIDs) to routing locators (RLOCs), effectively tracking endpoint location and identity. It registers EID-to-RLOC mappings from fabric edge nodes and responds to map requests. This enables policy-based segmentation and mobility by allowing endpoints to be reached regardless of their location. Thus, it is the correct component.

• ✗

  Cisco DNA Center

  Why it's wrong here

  Cisco DNA Center is the management platform for SD-Access, providing automation, assurance, and policy definition. It does not maintain real-time endpoint location and identity; that function is handled by the LISP control plane. DNA Center pushes policies and configurations but relies on other components for endpoint tracking. Therefore, it is not the correct answer.

• ✗

  VXLAN Tunnel Endpoint (VTEP)

  Why it's wrong here

  A VTEP is responsible for encapsulating and decapsulating VXLAN traffic. It does not maintain endpoint location and identity information; that is the role of the LISP control plane. VTEPs forward data based on mappings provided by LISP. In SD-Access, fabric edge nodes act as VTEPs, but they query the Map-Server for endpoint locations. Therefore, this is not the correct answer.