Courseiva
Infrastructure →hardMultiple Choice

350-401 Infrastructure Practice Question

A network engineer is implementing VXLAN with a distributed anycast gateway in a Cisco SD-Access fabric. The fabric uses LISP for control plane and VXLAN for data plane. Which component is responsible for mapping endpoint IP addresses to fabric edge nodes?

⚠ Common exam trap

Watch out — candidates often confuse the roles of fabric nodes; the control plane node is the one that provides the mapping service, not the edge or border nodes.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Control plane node

In Cisco SD-Access, the control plane node runs LISP Map-Server and Map-Resolver. It maintains the mapping of endpoint IP addresses to the RLOC of the fabric edge node where the endpoint is connected. When an edge node needs to forward traffic to an endpoint, it queries the control plane node to obtain the mapping, enabling VXLAN encapsulation. The border and intermediate nodes do not perform this mapping function.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Fabric edge node

    Why it's wrong here

    The fabric edge node is responsible for encapsulating and de-encapsulating VXLAN traffic and connecting endpoints to the fabric. It registers endpoints with the control plane but does not perform the mapping itself. The mapping is done by the control plane node, which maintains the database of endpoint locations. The edge node queries the control plane to resolve destinations, but it is not the component that stores or serves the mapping.

  • ✗

    Fabric intermediate node

    Why it's wrong here

    The fabric intermediate node is a simplified switch that forwards VXLAN-encapsulated traffic between fabric edge and border nodes based on the outer IP header. It does not participate in the LISP control plane and does not maintain endpoint mappings. Its role is purely transport, forwarding packets without inspecting the inner payload. Therefore, it is not responsible for mapping endpoint IP addresses to edge nodes.

  • ✗

    Fabric border node

    Why it's wrong here

    The fabric border node provides connectivity between the SD-Access fabric and external networks, such as traditional Layer 3 networks or the internet. It handles traffic entering and leaving the fabric but does not maintain the endpoint-to-edge mapping database. That function is performed by the control plane node. The border node may query the control plane for mappings but is not the authoritative source.

  • ✓

    Control plane node

    Why this is correct

    The control plane node in a Cisco SD-Access fabric runs the LISP Map-Server and Map-Resolver functions. It maintains the mapping database of endpoint IP addresses to fabric edge nodes (RLOCs). When an edge node needs to reach an endpoint, it sends a Map-Request to the control plane node, which responds with the Map-Reply containing the RLOC of the edge node where the endpoint is located. This enables VXLAN encapsulation and forwarding.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Cisco exam blueprint

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.