Skip to content
AvailabilitySign inBook a DemoStart free lab
Topic: SD-AccessSwitch
All CCNP topics

1.0 Architecture

SD-Access Practice Questions

Cisco SD-Access fabric roles, LISP control plane, VXLAN data plane, and SGTs.

One solved question, so you can see how these are marked

Which component in the Cisco SD-Access architecture maintains the centralized database of endpoint IP addresses mapped to their Endpoint Identifiers (EIDs) and Routing Locators (RLOCs)?

Control Plane Node (LISP MS/MR)

The Control Plane Node in SD-Access runs LISP (Locator/ID Separation Protocol) functionality, serving as the Map-Server (MS) and Map-Resolver (MR) to track mappings between Endpoint Identifiers (EIDs) and Routing Locators (RLOCs).

Every question in the set below is marked like this. The answers stay hidden until you pick one.

All 11 SD-Access questions in this set

Answers and explanations appear when you work through the set above.

  1. Which encapsulation protocol is used in the Cisco SD-Access fabric data plane to carry layer 2/3 virtual network information and Scalable Group Tags (SGTs)?

    • GRE with the SGT in the GRE key field
    • VXLAN-GPO (Group Policy Option)
    • IPsec ESP with an SGT payload
    • OTV with an SGT overlay header

  2. What feature in Cisco SD-Access allows the same IP default gateway address to be configured across all Fabric Edge switches simultaneously?

    • HSRP Active-Active Mode
    • VRRP v3
    • Anycast Gateway
    • GLBP

  3. In a Cisco SD-Access Fabric-Enabled Wireless (FEW) design, where is client data traffic encapsulated into VXLAN?

    • At the WLC controller directly
    • At the Fabric Edge Switch
    • At the Fabric Access Point (AP)
    • At the Control Plane Node

  4. In a Cisco SD-Access network, which fabric node connects the internal fabric overlay to non-fabric external networks, such as the campus core or the public internet?

    • Fabric Edge Node
    • Control Plane Node
    • Fabric Border Node
    • Intermediate Node (underlay)

  5. During host onboarding in an SD-Access network, which server handles dynamic supplicant authentication, endpoint profiling, and Scalable Group Tag (SGT) assignment?

    • Cisco DNA Center
    • Cisco Identity Services Engine (ISE)
    • Active Directory Domain Controller
    • Dynamic Host Configuration Protocol (DHCP) Server

  6. In a Cisco SD-Access deployment, which component maintains the central Host Tracking Database based on Locator/ID Separation Protocol (LISP)?

    • Fabric Edge Node
    • Control Plane Node
    • Fabric Border Node
    • Cisco ISE Policy Server

  7. What primary function does a Fabric Edge node perform in a Cisco SD-Access enterprise environment?

    • Answers endpoint location queries from the WAN routers for the site.
    • Connects hosts and APs, handles 802.1X, and does VXLAN encapsulation.
    • Routes traffic between separate VNs by leaking routes on the edge switch.
    • Manages ISE policy profiles for all fabric sites from a central point.

  8. In SD-Access fabric wireless (including embedded wireless on a Catalyst 9000 switch), what role does the Wireless LAN Controller (WLC) play once it is integrated into the fabric?

    • Encapsulates wireless data frames into IPsec tunnels sent to the Internet edge.
    • Handles AP control (CAPWAP); client data is VXLAN-encapsulated at the AP.
    • Acts as the LISP Map Server for wired endpoints in the fabric site.
    • Routes inter-VRF traffic for wireless clients using MP-BGP EVPN.

  9. How does the Anycast Gateway feature in Cisco SD-Access simplify default gateway management for roaming endpoints across the fabric?

    • It gives each access switch a unique gateway IP and translates them with dynamic NAT.
    • Every Fabric Edge uses the same gateway IP and MAC for a given IP pool in a VN.
    • It relies on HSRP to elect one active Fabric Edge node for each subnet in the VN.
    • It proxies endpoint ARP requests to the ISE server, which answers with the gateway.

  10. Which dual functions are performed by a Fabric Edge node inside a Cisco SD-Access network deployment?

    • Runs the vManage GUI and distributes WAN routing schedules to each site.
    • Connects endpoints and encapsulates or decapsulates their fabric traffic.
    • Maintains the central database of all EID-to-RLOC mappings in the fabric.
    • Translates IPv4 packets into IPv6 at the access layer for the overlay.

  11. Which SD-Access Fabric Border Node type connects an internal fabric site exclusively to non-fabric enterprise networks, such as legacy campus subnets or data centers?

    • External Border Node
    • Internal Border Node
    • Anywhere Border Node
    • Fabric Control Plane Node