Courseiva
mediumMultiple SelectObjective-mapped

CCNP Practice Question: Which two statements about the Cisco SD-Access…

Which two statements about the Cisco SD-Access fabric roles are true? (Choose two.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The fabric edge node connects wired endpoints to the SD-Access fabric.

In Cisco SD-Access, the fabric edge is the device that connects wired endpoints to the fabric, and the fabric border is responsible for connecting the fabric to external networks (e.g., WAN, data center). The fabric control plane node manages the LISP mapping database and authentication, not the fabric border. The fabric wireless LAN controller does not exist as a separate role; wireless services are integrated into the fabric edge or border. The intermediate node is not a defined role in SD-Access.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The fabric edge node connects wired endpoints to the SD-Access fabric.

    Why this is correct

    Correct because the fabric edge is the switch or wireless controller that provides network access to endpoints and applies policies.

  • The fabric border node provides connectivity to networks outside the SD-Access fabric.

    Why this is correct

    Correct because the fabric border is the gateway between the fabric and external networks such as WAN, data center, or the Internet.

  • The fabric control plane node is responsible for forwarding traffic between fabric edges.

    Why it's wrong here

    Incorrect because the control plane node maintains the LISP mapping database and handles endpoint registration; traffic forwarding is done by fabric edges and borders.

  • The fabric wireless LAN controller is a dedicated role for wireless integration.

    Why it's wrong here

    Incorrect because there is no dedicated fabric WLAN controller role; wireless services are integrated into the fabric edge or border node.

  • The intermediate node is a core role in SD-Access fabric.

    Why it's wrong here

    Incorrect because the intermediate node is not a defined role in SD-Access; the fabric roles are edge, border, control plane, and (optionally) extended node.

About these practice questions

One of 1,175 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on 350-401

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. Which two statements about the Cisco SD-Access fabric roles are true? (Choose two.)

medium
  • A.The fabric edge node is responsible for connecting end devices and enforcing SGT-based policies.
  • B.The fabric border node is responsible for connecting the SD-Access fabric to external Layer 3 networks.
  • C.The control plane node is responsible for encapsulating and forwarding user traffic across the fabric.
  • D.The intermediate node is responsible for policy enforcement and traffic segmentation within the fabric.
  • E.The wireless controller in SD-Access acts as a dedicated fabric border node for wireless traffic.

Why A: In SD-Access, the fabric edge node is the switch that connects to end devices and enforces policy, while the fabric border node connects the fabric to external networks (e.g., WAN, data center). The control plane node hosts the LISP map server/map resolver, not the edge. The intermediate node is a simple transit switch that does not perform encapsulation or policy enforcement. The wireless controller in SD-Access is integrated as a fabric WLC, not a separate fabric role.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.