350-401 Question #289: Real Exam Question with Answer & Explanation

Question

What is the function of the fabric control plane node In a Cisco SD-Access deployment?

Options

• AIt is responsible for policy application and network segmentation in the fabric.
• BIt performs traffic encapsulation and security profiles enforcement in the fabric.
• CIt holds a comprehensive database that tracks endpoints and networks in the fabric.
• DIt provides Integration with legacy nonfabric-enabled environments.

Explanation

Cisco SD-Access Fabric Control Plane Node

In a Cisco SD-Access fabric, the control plane node acts as the central directory or "phone book" of the network, maintaining a comprehensive database (using LISP – Locator/ID Separation Protocol) that maps endpoint identities (EIDs) to their current locations (RLOCs), making Option C correct.

Why the distractors are wrong:

• Option A describes the role of the policy plane / Cisco DNA Center, which applies group-based policies and segmentation using SGTs (Scalable Group Tags).
• Option B describes the fabric edge node, which performs VXLAN traffic encapsulation and enforces security profiles for endpoints connecting to the fabric.
• Option D describes the fabric border node, which serves as the gateway between the SD-Access fabric and external non-fabric environments (e.g., the internet or legacy networks).

💡 Memory Tip: Think of the control plane node as the "air traffic controller" - it doesn't move the planes (traffic) itself, but it always knows where everything is and directs others accordingly. Each SD-Access node has a distinct role: Control = knows locations, Edge = connects endpoints, Border = connects outside worlds.

No community discussion yet for this question.