CCNP Architecture Practice Question
Which TWO statements are correct about Cisco SD-Access architecture? (Choose two.)
⚠ Common exam trap
Cisco often tests the misconception that VLANs are used for fabric segmentation, but the correct answer is VXLAN VNIs; similarly, candidates may confuse the roles of fabric edge and border nodes, thinking edges handle external connectivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VXLAN encapsulation is used for data plane traffic within the fabric.
VXLAN is the encapsulation protocol used in the Cisco SD-Access fabric to carry data plane traffic between fabric edge nodes. VXLAN provides a Layer 2 overlay over a Layer 3 underlay, enabling scalable segmentation and mobility without VLAN limitations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VXLAN encapsulation is used for data plane traffic within the fabric.
Why this is correct
VXLAN is the encapsulation used to carry Layer 2 frames over Layer 3 fabric.
- ✓
Control plane nodes host the LISP mapping database.
Why this is correct
Control plane nodes maintain the endpoint ID (EID) to routing locator (RLOC) mapping.
- ✗
Wireless access points must be directly connected to the fabric edge switches.
Why it's wrong here
Wireless can be integrated using SD-Access Wireless, but APs do not have to be directly connected to fabric edge.
- ✗
Fabric edge nodes are responsible for connecting the fabric to external networks.
Why it's wrong here
Fabric border nodes connect to external networks, not edge nodes.
- ✗
The fabric uses VLANs to isolate tenant traffic.
Why it's wrong here
SD-Access uses VRFs and VXLAN network IDs (VNIs) for isolation, not VLANs.
Visual reference
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.