The correct answer is D. fabric edge node. In Cisco SD-Access, the Anycast Gateway provides a consistent default gateway for endpoints across the fabric. This allows endpoints to keep the same gateway behavior regardless of where they attach within the fabric. The fabric edge node provides the Anycast Gateway service for connected endpoints. It is the node where endpoints attach to the fabric, and it performs the first-hop gateway function using the distributed Anycast Gateway model. This design provides: * Consistent default gateway addressing * Simplified endpoint mobility * Optimal forwarding within the fabric * Distributed first-hop gateway services * A. fabric border node The border node connects the SD-Access fabric to external networks. It does not provide the endpoint Anycast Gateway service. * B. control plane node The control plane node maintains host tracking and endpoint-to-location mappings using LISP. It is not the default gateway for endpoints. * C. intermediate node An intermediate node only forwards traffic inside the fabric underlay/overlay path and does not provide gateway services to endpoints. Remember these SD-Access roles: * Fabric edge node = endpoint connectivity + Anycast Gateway * Control plane node = endpoint mapping database * Border node = external connectivity * Intermediate node = transit forwarding Anycast Gateway in SD-Access = Fabric Edge Node