350-401 Architecture Practice Question
A network architect is designing a Cisco SD-Access fabric for a campus network. The architect wants to ensure that endpoints in the same virtual network can communicate with each other even when they are attached to different fabric edge nodes. Which control plane component is responsible for resolving endpoint location information across the fabric?
⚠ Common exam trap
The trap here is assuming that Cisco DNA Center or ISE performs endpoint location resolution, when in fact the fabric control plane node handles that function.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric control plane node
The fabric control plane node in Cisco SD-Access implements LISP map-server and map-resolver functions. It maintains a database of endpoint IP addresses and their corresponding fabric edge node RLOCs. When an endpoint on one edge node needs to communicate with an endpoint on another edge node, the source edge node queries the control plane node to learn the destination's location, enabling VXLAN encapsulation and delivery.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Fabric control plane node
Why this is correct
The fabric control plane node runs the LISP map-server and map-resolver functions. It maintains the mapping of endpoint IP addresses to fabric edge nodes, enabling communication between endpoints attached to different edge nodes. When an edge node needs to reach an endpoint not locally attached, it queries the control plane node for the location, which returns the RLOC of the correct edge node.
- ✗
Cisco DNA Center
Why it's wrong here
Cisco DNA Center is the management and automation platform for SD-Access. It provisions the fabric and defines policies, but it is not in the data or control path for endpoint location resolution. While DNA Center orchestrates the fabric, it does not maintain real-time endpoint-to-edge-node mappings. Relying on DNA Center for this function would introduce unnecessary latency and scalability issues.
- ✗
Fabric border node
Why it's wrong here
Fabric border nodes provide connectivity between the SD-Access fabric and external networks, such as the data center or WAN. They handle VXLAN encapsulation and decapsulation for traffic entering or leaving the fabric. They do not resolve endpoint locations within the fabric; that responsibility belongs to the control plane node. Using a border node for this would not provide the required mapping service.
- ✗
Cisco Identity Services Engine (ISE)
Why it's wrong here
Cisco ISE provides authentication, authorization, and policy enforcement for the fabric, but it does not resolve endpoint location information. ISE integrates with the fabric to apply group-based policies, yet the mapping of endpoint IP addresses to fabric edge nodes is handled by a different control plane element. Using ISE for location resolution would not provide the necessary scalable mapping service.
Visual reference
Go deeper
Related to this question
Learn chapter
SDN Controllers and Cisco ACI
Key term
VXLAN
VXLAN is a network overlay technology that encapsulates Layer 2 Ethernet frames in UDP packets to extend VLANs across Layer 3 networks.
Key term
Fabric Fundamentals
Fabric Fundamentals is the set of core concepts behind a network fabric, where switches and routers form a single logical system that simplifies traffic forwarding and automation.
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.