350-401 Question 48
Select 4A network administrator is deploying Cisco SD-Access in the enterprise network. The solution needs to simplify network segmentation, ensure consistent policy enforcement, and provide automated network provisioning. Which key working principles of the Cisco SD-Access solution enable these capabilities?
- A
Virtual networks (VNs) provide scalable Layer 2 and Layer 3 segmentation across the network.
- B
The control plane uses LISP (Locator/ID Separation Protocol) to map endpoints to fabric nodes.
- C
Policy enforcement relies on manual VLAN and ACL configurations across all devices.
- D
The data plane leverages VXLAN encapsulation for traffic forwarding within the fabric.
- E
Cisco DNA Center serves as the centralized controller for automation, orchestration, and assurance.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Cisco SD-Access operates using key principles such as virtual networks for segmentation, LISP for endpoint mapping in the control plane, VXLAN for traffic forwarding in the data plane, and centralized automation and orchestration via Cisco DNA Center. These features collectively simplify segmentation, automate provisioning, and ensure consistent policy enforcement, addressing the administrator's requirements.
- A. Correct.
Correct: Virtual networks (VNs) allow for scalable segmentation, enabling SD-Access to support multiple tenants or purposes without interference.
- B. Correct.
Correct: LISP is used in the control plane to map endpoint identities to fabric locations, ensuring efficient endpoint mobility and traffic routing.
- C. Incorrect.
Incorrect: Cisco SD-Access eliminates the need for manual VLAN and ACL configuration by using policy-based automation and group-based access control.
- D. Correct.
Correct: VXLAN encapsulation provides efficient traffic forwarding within the SD-Access fabric, supporting scalability and segmentation.
- E. Correct.
Correct: Cisco DNA Center is the centralized management platform that automates SD-Access deployment, policy enforcement, and provides assurance.