CCNP Architecture Practice Question
An engineer is deploying Cisco SD-Access and wants to separate the roles of the underlay and the fabric overlay. The design must provide a Layer 3 routed underlay using IS-IS, and the fabric edge nodes must register endpoint information with a fabric control-plane node. Which node type in Cisco SD-Access is responsible for mapping endpoint identity to location and answering EID-to-RLOC queries from fabric edge nodes?
⚠ Common exam trap
A common mix-up: candidates confuse the border node, which connects the fabric to outside networks, with the control-plane node, which owns LISP mapping and endpoint registration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric control-plane node
In Cisco SD-Access, the fabric control-plane node hosts the LISP map-server and map-resolver. Fabric edge nodes register endpoint identifiers with it, and it answers EID-to-RLOC queries, enabling VXLAN tunnel establishment between edge nodes. That responsibility matches the requirement to map endpoint identity to location.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric border node
Why it's wrong here
The fabric border node connects the SD-Access fabric to external networks such as data center, WAN, or legacy networks. It handles handoff and route redistribution but does not resolve endpoint ID to routing locator mappings. In this scenario, the control-plane node, not the border, answers those lookups, so the border is incorrect.
- ✗
Fabric wireless controller
Why it's wrong here
The fabric wireless controller integrates wireless access points and clients into the fabric, registering wireless endpoints through the control plane. It does not itself act as the map-server that answers EID-to-RLOC queries for all wired endpoints. The control-plane node provides that function, so the wireless controller is not the correct answer here.
- ✓
Fabric control-plane node
Why this is correct
The fabric control-plane node runs LISP map-server and map-resolver functions. Fabric edge nodes register endpoint EIDs with it, and it answers EID-to-RLOC map requests so that edge nodes can build VXLAN tunnels to the correct destination. In this design it is the component that owns identity-to-location mapping, satisfying the requirement stated in the scenario.
- ✗
Fabric intermediate node
Why it's wrong here
Fabric intermediate nodes are Layer 3 underlay devices that forward VXLAN-encapsulated traffic between edge and border nodes without participating in LISP registration or resolution. They pass traffic but hold no endpoint database. Because the scenario requires endpoint EID-to-RLOC resolution, the intermediate node cannot fulfill that role.
Visual reference
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.