In Cisco SD-Access wireless, which device serves as the fabric entry and exit point?

The fabric border node is the correct answer because it connects the SD-Access fabric to networks outside the fabric, such as the enterprise core, data center, or internet. It acts as the entry and exit point for traffic going into or coming out of the fabric, performing routing lookups and enforcing policies. A fabric edge node connects endpoints (like wireless access points or wired clients) to the fabric, but it doesn't handle external network connectivity. A control plane node (typically a Cisco DNA Center appliance or a dedicated server) manages the fabric's control plane functions, such as host tracking and policy enforcement, but it's not a data plane entry/exit point. Fabric access points are wireless devices that connect clients to the network, not fabric entry/exit points.