350-401 Infrastructure Practice Question
A network engineer is deploying Cisco SD-Access and needs to integrate a new fabric site with an existing traditional network. The requirement is to allow endpoints in the fabric to communicate with external networks while preserving their fabric-assigned IP addresses and providing policy enforcement. Which component is responsible for this integration?
⚠ Common exam trap
Watch out — candidates often confuse the roles of fabric nodes, particularly assuming the control plane node handles external routing or that edge nodes perform border functions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric border node
The fabric border node is the component that connects the SD-Access fabric to external networks. It handles route redistribution between the fabric and external routing domains, preserves endpoint IP addresses, and can enforce policy using SGTs. Edge, control plane, and intermediate nodes have different roles and do not provide external integration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric control plane node
Why it's wrong here
The control plane node runs LISP Map-Server/Map-Resolver functions, providing endpoint location mapping and fabric overlay control. It does not handle external network integration or routing. Its role is to maintain the mapping database and respond to map requests from edge nodes. It is not involved in connecting to traditional networks.
- ✗
Fabric edge node
Why it's wrong here
Fabric edge nodes connect endpoints to the fabric and are responsible for encapsulation and policy enforcement at the access layer. They do not connect to external networks; that role is handled by border nodes. Edge nodes register endpoints with the control plane and map traffic into VXLAN. They do not perform external route redistribution.
- ✓
Fabric border node
Why this is correct
The fabric border node connects the SD-Access fabric to external networks (traditional L3 networks, data centers, or other fabric sites). It performs route redistribution between the fabric's LISP/VXLAN domains and external routing protocols, and can enforce policy via SGT propagation. It preserves endpoint IP addresses by advertising fabric prefixes externally and importing external routes into the fabric.
- ✗
Fabric intermediate node
Why it's wrong here
Intermediate nodes are part of the underlay and provide IP connectivity between fabric nodes. They do not participate in the overlay control plane or external integration. They simply forward VXLAN-encapsulated packets based on the underlay routing. They do not enforce policy or perform route redistribution with external networks.
Go deeper
Related to this question
Learn chapter
Network Access Control and AAA
Key term
Cisco SD-Access
Cisco Software-Defined Access is a network architecture that uses a central controller to automate and secure user and device access across an enterprise network.
Key term
Route Redistribution
Route redistribution is the process of sharing routing information from one routing protocol to another within a network.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.