350-401 Architecture Practice Question
A network architect is designing a Cisco SD-Access fabric that spans two buildings. The fabric must support Layer 2 extension for a legacy application that requires broadcast traffic to reach hosts in both buildings. The architect plans to use a single fabric with two fabric edge nodes connected to a common control plane node. Which component of the SD-Access architecture is responsible for mapping endpoint identifiers to fabric edge nodes?
⚠ Common exam trap
The trap here is assuming that the border node handles all inter-node communication, when in fact the control plane node is the authoritative source for endpoint location mappings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Control plane node
The control plane node hosts the LISP map-server and map-resolver, which together maintain the EID-to-RLOC mappings that tell fabric edge nodes where each endpoint is located. This mapping is essential for directing traffic to the correct edge node within the SD-Access fabric.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric intermediate node
Why it's wrong here
Fabric intermediate nodes are part of the underlay network and simply forward VXLAN-encapsulated traffic between fabric edge nodes and border nodes based on the underlay routing table. They do not participate in the LISP mapping system and have no knowledge of endpoint-to-edge-node associations, so they cannot fulfill the mapping role.
- ✓
Control plane node
Why this is correct
The control plane node runs the LISP map-server and map-resolver functions, maintaining the database that maps endpoint identifiers (EIDs) to routing locators (RLOCs), which are the fabric edge nodes. When a fabric edge needs to reach an endpoint, it queries the control plane node to learn which edge node is authoritative for that endpoint, enabling proper forwarding.
- ✗
Fabric border node
Why it's wrong here
Fabric border nodes provide connectivity between the SD-Access fabric and external networks such as the data center or WAN. They handle traffic entering and leaving the fabric, but they do not maintain the endpoint-to-edge-node mappings that direct intra-fabric traffic, so they are not the component responsible for the mapping function described.
- ✗
Fabric wireless controller
Why it's wrong here
The fabric wireless controller integrates wireless access points into the SD-Access fabric and manages wireless client onboarding. It does not maintain the endpoint-to-edge-node mapping database for wired or wireless endpoints; that function belongs to the control plane node, which uses LISP to resolve endpoint locations across the fabric.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.