350-401 Network Assurance Practice Question
A network engineer is using Cisco DNA Center Assurance to monitor a network with Cisco SD-Access fabric. The engineer notices that the fabric health score is consistently low, but individual device health scores are high. Which component of the fabric should the engineer investigate first?
⚠ Common exam trap
The trap here is focusing on underlay or edge devices because they are more tangible, but the fabric health score specifically highlights control plane and overlay issues that don't degrade individual device health.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fabric control plane nodes
In Cisco SD-Access, the fabric health score reflects the health of the overlay and control plane. If individual device health scores are high but fabric health is low, the issue is likely with fabric control plane nodes (LISP map-server/map-resolver) or overlay tunnels. These components are critical for fabric operation but may not affect individual device health scores. Investigating control plane nodes first is the logical step to identify misconfigurations or failures in the fabric overlay.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Underlay network devices
Why it's wrong here
Underlay devices provide the physical transport for the fabric. If underlay devices were failing, their device health scores would be low. Since individual device health scores are high, the underlay is likely healthy. The fabric health score specifically reflects overlay and control plane health, not just underlay.
- ✓
Fabric control plane nodes
Why this is correct
In a Cisco SD-Access fabric, the control plane nodes (running LISP) are critical for overlay reachability. If the fabric health score is low while device health scores are high, the issue likely lies in the fabric control plane, such as LISP map-server/ map-resolver problems or inconsistent fabric domain configurations. This can cause overlay connectivity issues without affecting individual device health.
- ✗
Wireless LAN controllers
Why it's wrong here
Wireless LAN controllers are not part of the SD-Access fabric control plane. While they may integrate with the fabric, they do not directly affect fabric health scores. The fabric health score is computed from fabric nodes and overlay tunnels. Investigating WLCs would not address the low fabric health score if device health is high.
- ✗
Fabric edge nodes
Why it's wrong here
Fabric edge nodes are responsible for connecting endpoints and encapsulating traffic. If edge nodes had issues, their individual device health scores would likely be low. Since device health scores are high, the problem is more likely in the control plane or overlay, not the edge nodes themselves. The fabric health score aggregates control plane and overlay health.
Visual reference
Go deeper
Related to this question
Learn chapter
SDN Controllers and Cisco ACI
Key term
Cisco SD-Access
Cisco Software-Defined Access is a network architecture that uses a central controller to automate and secure user and device access across an enterprise network.
Key term
Cisco DNA Center
A centralized network management and automation platform from Cisco that provides intent-based networking for easier configuration, monitoring, and troubleshooting of Cisco devices.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.