350-401 Architecture Practice Question
A network architect is designing a Cisco SD-Access fabric for a hospital campus. The fabric must support wired and wireless clients, and the architect wants to ensure that all fabric edge nodes use a consistent mapping of endpoint IP addresses to fabric locations. Which control plane component is responsible for maintaining the endpoint-to-edge-node mapping database?
⚠ Common exam trap
The trap here is assuming that DNA Center, as the management platform, also provides the real-time endpoint location database, when that role belongs to the fabric control plane node running LISP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric control plane node
In Cisco SD-Access, the control plane node is the LISP map-server and map-resolver that stores endpoint identifiers (EIDs) and their routing locators (RLOCs). Fabric edge nodes register endpoints with the control plane node and query it for location resolution. This design centralizes endpoint reachability information, ensuring that every edge node has a consistent view of where endpoints are attached.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric intermediate node
Why it's wrong here
Fabric intermediate nodes are part of the underlay and simply forward VXLAN-encapsulated traffic between fabric edge nodes based on the outer IP header. They do not maintain endpoint location information or participate in the LISP control plane. Their role is limited to high-speed transport, so they cannot provide the mapping database required for endpoint location resolution.
- ✗
Fabric border node
Why it's wrong here
Fabric border nodes connect the SD-Access fabric to external networks such as data centers or the internet. They handle VXLAN-to-VLAN or VXLAN-to-VXLAN handoffs and may run LISP for fabric external routes, but they do not maintain the endpoint location database for internal fabric endpoints. Therefore, they are not the component responsible for the endpoint-to-edge-node mapping.
- ✗
Cisco DNA Center
Why it's wrong here
Cisco DNA Center is the management and automation platform for SD-Access but does not maintain the real-time endpoint location database used by fabric edge nodes. It performs policy and fabric provisioning, while the actual endpoint identifiers and their mappings to fabric edge nodes are learned and stored by the fabric control plane. Thus, DNA Center is not the component that directly provides endpoint-to-edge-node mapping.
- ✓
Fabric control plane node
Why this is correct
The fabric control plane node runs LISP and maintains the endpoint-to-edge-node mapping database, known as the map-server and map-resolver. When a fabric edge node needs to locate an endpoint, it queries the control plane node, which returns the RLOC of the edge node where the endpoint is attached. This ensures consistent mapping across all fabric edge nodes.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.