Which three ways are SD-Access and ACI Fabric similar? (Choose three.)

Both SD-Access and ACI utilize identifiers, such as Virtual Network Identifiers (VNIs) in VXLAN, to create virtual networks and logically segment traffic.

While ACI uses Endpoint Groups (EPGs) as a core construct for policy application, SD-Access primarily uses Scalable Group Tags (SGTs) and Virtual Networks for group-based policy, not EPGs in the ACI context.

Both solutions employ a group-based policy model (e.g., Endpoint Groups in ACI, Virtual Networks and SGTs in SD-Access) to define communication rules for entities, abstracting policy from physical network details.

Scalable Group Tags (SGTs) are a foundational element for policy enforcement in SD-Access, typically integrated with Cisco ISE, but they are not a native or primary construct in ACI for group identification.

While both manage endpoints, SD-Access has a strong focus on user endpoints in campus/branch networks, whereas ACI primarily focuses on application endpoints and services in the data center, making this statement too specific to SD-Access.

Both SD-Access and ACI fundamentally rely on overlay networks, typically using VXLAN encapsulation, to extend logical networks and decouple them from the underlying physical infrastructure.