350-401 Architecture Practice Question
A network engineer is implementing Cisco SD-Access for a campus network. The fabric uses LISP for control plane and VXLAN for data plane. The engineer needs to ensure that endpoints in the same VLAN but on different fabric edge nodes can communicate. Which Cisco SD-Access component is responsible for mapping endpoint EIDs to RLOCs?
⚠ Common exam trap
The trap here is assuming that fabric edge nodes resolve EIDs locally; in reality, they query the control plane node for mappings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Control plane node
In Cisco SD-Access, the control plane node provides LISP map-server and map-resolver services. It stores the EID-to-RLOC mappings for all endpoints registered by fabric edge nodes. When an edge node needs to send traffic to an endpoint on another edge node, it queries the control plane node to resolve the destination RLOC, enabling VXLAN encapsulation and forwarding. This centralizes mapping and supports mobility.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fabric border node
Why it's wrong here
Fabric border nodes handle connectivity between the fabric and external networks, such as WAN or data center. They also run LISP proxy functions for external routes, but they do not maintain the internal endpoint mapping database. They are not responsible for resolving EIDs to RLOCs for internal fabric endpoints.
- ✗
Fabric edge node
Why it's wrong here
Fabric edge nodes connect endpoints and encapsulate traffic into VXLAN. They register endpoints with the control plane node and query for mappings, but they do not maintain the mapping database. They are the data plane entry/exit points, not the mapping system.
- ✗
Intermediate node
Why it's wrong here
Intermediate nodes are part of the underlay network and simply forward VXLAN-encapsulated packets based on outer IP headers. They do not participate in LISP or maintain any endpoint mapping information. They provide transport between fabric nodes but are unaware of endpoint identities.
- ✓
Control plane node
Why this is correct
The control plane node in SD-Access runs LISP map-server and map-resolver functions. It maintains the mapping database of endpoint EIDs to RLOCs (fabric edge node locators). When an edge node needs to reach an endpoint, it queries the control plane node, which resolves the EID to the correct RLOC. This enables communication across fabric edge nodes.
Visual reference
Go deeper
Related to this question
Learn chapter
SDN Controllers and Cisco ACI
Key term
Cisco SD-Access
Cisco Software-Defined Access is a network architecture that uses a central controller to automate and secure user and device access across an enterprise network.
Key term
Cisco Virtual Topology System
Cisco Virtual Topology System is a software-defined networking solution that creates and manages virtual network overlays across physical and virtual infrastructure for enterprise networks.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.