CCNP Infrastructure Practice Question
A network engineer is implementing VXLAN with a distributed anycast gateway in a Cisco SD-Access fabric. The fabric uses LISP for control plane and VXLAN for data plane. Which component is responsible for mapping endpoint IP addresses to fabric edge nodes?
⚠ Common exam trap
Watch out — candidates often confuse the roles of fabric nodes; the control plane node is the one that provides the mapping service, not the edge or border nodes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Control plane node
In Cisco SD-Access, the control plane node runs LISP Map-Server and Map-Resolver. It maintains the mapping of endpoint IP addresses to the RLOC of the fabric edge node where the endpoint is connected. When an edge node needs to forward traffic to an endpoint, it queries the control plane node to obtain the mapping, enabling VXLAN encapsulation. The border and intermediate nodes do not perform this mapping function.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric edge node
Why it's wrong here
The fabric edge node is responsible for encapsulating and de-encapsulating VXLAN traffic and connecting endpoints to the fabric. It registers endpoints with the control plane but does not perform the mapping itself. The mapping is done by the control plane node, which maintains the database of endpoint locations. The edge node queries the control plane to resolve destinations, but it is not the component that stores or serves the mapping.
- ✗
Fabric intermediate node
Why it's wrong here
The fabric intermediate node is a simplified switch that forwards VXLAN-encapsulated traffic between fabric edge and border nodes based on the outer IP header. It does not participate in the LISP control plane and does not maintain endpoint mappings. Its role is purely transport, forwarding packets without inspecting the inner payload. Therefore, it is not responsible for mapping endpoint IP addresses to edge nodes.
- ✗
Fabric border node
Why it's wrong here
The fabric border node provides connectivity between the SD-Access fabric and external networks, such as traditional Layer 3 networks or the internet. It handles traffic entering and leaving the fabric but does not maintain the endpoint-to-edge mapping database. That function is performed by the control plane node. The border node may query the control plane for mappings but is not the authoritative source.
- ✓
Control plane node
Why this is correct
The control plane node in a Cisco SD-Access fabric runs the LISP Map-Server and Map-Resolver functions. It maintains the mapping database of endpoint IP addresses to fabric edge nodes (RLOCs). When an edge node needs to reach an endpoint, it sends a Map-Request to the control plane node, which responds with the Map-Reply containing the RLOC of the edge node where the endpoint is located. This enables VXLAN encapsulation and forwarding.
Visual reference
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.