350-401 Architecture Practice Question
A network engineer is deploying a Cisco SD-Access fabric for a campus network. The fabric consists of border nodes, control plane nodes, edge nodes, and an intermediate node. The engineer needs to ensure that endpoints in the fabric can communicate with external networks such as the data center and the internet. Which component of the SD-Access architecture is responsible for providing connectivity between the fabric and external networks?
⚠ Common exam trap
Test-takers frequently confuse the roles of border nodes and intermediate nodes, or assuming that control plane nodes handle external routing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Border node
In Cisco SD-Access, border nodes are responsible for connecting the fabric to external networks. They act as the gateway between the fabric and outside networks, performing functions such as LISP proxy and route redistribution. Control plane nodes handle endpoint registration, edge nodes connect endpoints, and intermediate nodes connect multiple fabric sites. Thus, the border node is the correct component for providing external connectivity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Control plane node
Why it's wrong here
The control plane node in SD-Access hosts the LISP map-server and map-resolver functions. It handles endpoint registration and resolution within the fabric, but it does not provide external connectivity. External connectivity is handled by border nodes, which connect to outside networks. Therefore, the control plane node is not responsible for connecting the fabric to external networks in this scenario.
- ✗
Edge node
Why it's wrong here
Edge nodes connect endpoints to the fabric and act as LISP tunnel routers (xTRs). They encapsulate traffic from endpoints and forward it into the fabric. However, they do not provide the handoff to external networks; that is the role of border nodes. Thus, edge nodes are not the component that provides external connectivity in this SD-Access deployment.
- ✓
Border node
Why this is correct
Border nodes in Cisco SD-Access provide connectivity between the fabric and external networks, such as the data center, internet, or legacy networks. They perform the role of LISP proxy tunnel routers (PxTRs) and can also run BGP or other routing protocols to exchange routes with external devices. In this scenario, the border node is the correct component because it is specifically designed to handle external traffic entering and leaving the fabric.
- ✗
Intermediate node
Why it's wrong here
The intermediate node is used in SD-Access to connect fabric sites over a transit network, such as a WAN or dark fiber. It forwards VXLAN-encapsulated traffic between fabric sites but does not provide connectivity to external non-fabric networks. External connectivity is the function of border nodes. Therefore, the intermediate node is not the correct answer for this scenario.
Go deeper
Related to this question
Learn chapter
Network Architecture Fundamentals
Key term
Cisco SD-Access
Cisco Software-Defined Access is a network architecture that uses a central controller to automate and secure user and device access across an enterprise network.
Key term
Route Redistribution
Route redistribution is the process of sharing routing information from one routing protocol to another within a network.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.