mediumMultiple SelectObjective-mapped
350-401 Practice Question: Which two statements about Cisco DNA Center…
Which two statements about Cisco DNA Center integration with Cisco SD-Access are true? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco DNA Center is used to design and provision the SD-Access fabric, including defining virtual networks and host pools.
DNA Center is the management and automation platform for SD-Access. The correct answers describe its role in fabric design and policy enforcement. The incorrect options misrepresent the control plane (LISP, not OSPF), the border role (fabric exit, not WAN), and the device role (edge, not core).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Cisco DNA Center is used to design and provision the SD-Access fabric, including defining virtual networks and host pools.
Why this is correct
Correct because DNA Center provides the GUI and API to create fabric domains, IP pools, and virtual networks (VRFs).
- ✗
Cisco DNA Center automatically configures OSPF as the control plane protocol for SD-Access.
Why it's wrong here
Incorrect because SD-Access uses LISP as the control plane protocol; OSPF is used for underlay routing but not as the fabric control plane.
- ✓
Cisco DNA Center can enforce group-based policies using Scalable Group Tags (SGTs) in the SD-Access fabric.
Why this is correct
Correct because DNA Center integrates with Cisco ISE to define and apply SGT-based policies across the fabric.
- ✗
Cisco DNA Center requires a separate WAN controller to manage SD-Access border nodes.
Why it's wrong here
Incorrect because DNA Center directly manages border nodes as part of the fabric; no separate WAN controller is needed.
- ✗
Cisco DNA Center configures SD-Access edge nodes as the core routers of the network.
Why it's wrong here
Incorrect because edge nodes are access-layer switches that connect endpoints, not core routers; core routers are part of the underlay.
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
Learn chapter
Network Access Control and AAA
Key term
Cisco DNA Center
A centralized network management and automation platform from Cisco that provides intent-based networking for easier configuration, monitoring, and troubleshooting of Cisco devices.
Key term
Cisco SD-Access
Cisco Software-Defined Access is a network architecture that uses a central controller to automate and secure user and device access across an enterprise network.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.