500-490Updated 8d ago · Aug 28, 2026
Designing Cisco Enterprise Networks (ENDESIGN)
49 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 4 questions are free to preview.
Topics
| # | Topic | Questions | Free |
|---|---|---|---|
| 1 | Discovery | 49 | 4 |
Preview
4 of 49 accessibleQuestion 1 · Discovery Open
In which three ways are SD-Access and ACI Fabric alike? (Choose three.)
Answer: A, B, D
Both architectures use VXLAN overlays and VXLAN network identifiers to create logical network segments over an underlay. Both also enforce group-based policy: SD-Access uses TrustSec group-based policy and SGTs, while ACI applies policy between endpoint groups through contracts.
**Learn more:** [Cisco SD-Access Solution Design Guide](https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html) · [Cisco ACI Forwarding Configuration Guide](https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/l3-configuration/cisco-apic-layer-3-networking-configuration-guide-62x/aci-forwarding-layer3-config-62x.html)
Question 2 · Discovery Open
Which Cisco product supports SD-Access and is specifically designed to address the new challenges enterprises face?
Answer: C
Cisco Catalyst 9500 Series switches are purpose-built enterprise core and aggregation platforms for emerging security, IoT, mobility, and cloud requirements. They form a foundational building block for Cisco SD-Access.
**Learn more:** [Release Notes for Cisco Catalyst 9500 Series Switches](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/26-x/release_notes/ol-26-1-x-9500.pdf)
Question 3 · Design Open
What is the simplest way to enable SD-Access at all remote sites after the campus SD-Access fabric is already operational?
Answer: D
Cisco SD-Access and SD-WAN integrated-domain deployment extends secure onboarding, end-to-end segmentation, and consistent group-based policy between campus and branch locations. Using SD-WAN as the WAN transport while keeping the sites in one fabric domain avoids the additional management and policy boundaries created by separate fabric domains.
**Learn more:** [Cisco SD-Access and Cisco SD-WAN Integrated Domain Solution Release Notes](https://www.cisco.com/c/en/us/td/docs/routers/sdwan/release/notes/sda-sdwan-integration/sda-sdwan-rel-notes.html) · [Validated Profile: Financial (SD-Access and SD-WAN)](https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/catalyst-center/cisco-validated-solution-profiles/validated_profile_financial_vertical_sda_sdwan.html)