hardMultiple Select
CCNP Practice Question: Which three statements about Cisco SD-Access…
Which three statements about Cisco SD-Access design are true? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VXLAN is used as the data plane encapsulation in SD-Access to create overlay tunnels.
Cisco SD-Access is a policy-based, intent-driven network architecture that uses VXLAN for overlay tunneling and LISP for control plane. It separates the network into fabric and non-fabric domains. The fabric uses a border node to connect to external networks. Option A is correct because VXLAN provides the data plane encapsulation. Option C is correct because LISP is the control plane that maps endpoints to their locations. Option D is correct because the border node connects the fabric to outside networks (e.g., WAN, Internet). Option B is incorrect because the fabric edge is the access layer switch that connects endpoints, not the border. Option E is incorrect because SD-Access typically uses a two-tier spine-leaf design, not a three-tier core-distribution-access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VXLAN is used as the data plane encapsulation in SD-Access to create overlay tunnels.
Why this is correct
VXLAN provides the Layer 2 overlay that carries endpoint traffic across the SD-Access underlay, encapsulating original frames in UDP. This satisfies the design requirement for a data plane encapsulation, separating the virtual overlay from the physical routed fabric.
- ✗
The fabric border node is the access layer switch that connects end devices to the network.
Why it's wrong here
The border node sits at the fabric edge, connecting the fabric to external networks and shared services, not the access layer switch attaching endpoints. It is tempting because border and edge functions both touch endpoint traffic, but in SD-Access the edge node performs the access-layer role described.
- ✓
LISP provides the control plane for SD-Access by managing endpoint identifiers and routing locators.
Why this is correct
LISP separates endpoint identifiers from routing locators, letting the control plane track where each endpoint attaches while the fabric forwards on locators. This satisfies SD-Access's requirement for scalable host mobility and overlay independence from the underlay, which VXLAN alone does not provide.
- ✓
The border node provides connectivity between the SD-Access fabric and traditional networks or the WAN.
Why this is correct
The border node handles all traffic entering or leaving the fabric, peering with external networks such as the WAN, data centre, or legacy infrastructure via VRF-aware handoff. This satisfies the stem's requirement for a fabric-to-external connectivity role, distinct from control plane nodes (which map endpoints) and edge nodes (which attach endpoints).
- ✗
SD-Access requires a three-tier hierarchical design with core, distribution, and access layers.
Why it's wrong here
SD-Access uses an underlay plus overlay fabric with edge, border and control plane nodes, and supports both three-tier and collapsed two-tier designs. It is tempting because traditional campus networks are three-tier, but SD-Access does not mandate core, distribution and access layers.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.