350-401 Architecture Practice Question
A network engineer is deploying Cisco SD-Access and needs to ensure that endpoint IP addresses are mapped to fabric locators so that the fabric can forward traffic between wired and wireless clients. Which control-plane node role is responsible for maintaining this mapping database?
⚠ Common exam trap
It's easy for candidates to confuse the data-plane edge role, which encapsulates traffic, with the control-plane role that actually stores and resolves endpoint locator mappings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric control-plane node
In Cisco SD-Access, the control-plane node runs LISP map-server and map-resolver functions. Edge nodes register endpoint EID-to-RLOC mappings with it, and other edges query it to resolve destinations before encapsulating VXLAN traffic. Border and intermediate nodes handle external connectivity and underlay transport respectively, so they do not own the mapping database required by the scenario.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric border node
Why it's wrong here
The border node provides connectivity between the SD-Access fabric and external networks such as the data center or WAN. It handles VXLAN-to-VXLAN or VXLAN-to-VRF handoff and does not maintain the endpoint-to-locator mapping database. Confusing the border role with the control plane would leave endpoint registration unmanaged, so this option is incorrect for the stated requirement.
- ✓
Fabric control-plane node
Why this is correct
The control-plane node runs LISP and hosts the map-server and map-resolver functions that store endpoint identifier-to-routing locator mappings. Edge nodes register endpoints with it and query it to resolve destinations. This directly fulfills the requirement of maintaining the mapping database that enables fabric forwarding, making it the correct role.
- ✗
Fabric intermediate node
Why it's wrong here
Intermediate nodes are underlay routers that provide IP connectivity between fabric nodes. They do not participate in LISP registration or mapping resolution. Their role is purely transport, so they cannot maintain the endpoint-to-locator database needed for SD-Access overlay forwarding, making this option incorrect.
- ✗
Fabric edge node
Why it's wrong here
Edge nodes connect endpoints to the fabric and encapsulate traffic in VXLAN, but they do not own the mapping database. They query the control plane to resolve destination locators. While edges are essential for endpoint onboarding, they are consumers of the mapping service rather than the authority that stores and serves it, so this option does not satisfy the scenario.
Visual reference
Go deeper
Related to this question
Learn chapter
Wireless Deployment Models and Security
Key term
VXLAN
VXLAN is a network overlay technology that encapsulates Layer 2 Ethernet frames in UDP packets to extend VLANs across Layer 3 networks.
Key term
Cisco Virtual Topology System
Cisco Virtual Topology System is a software-defined networking solution that creates and manages virtual network overlays across physical and virtual infrastructure for enterprise networks.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.