300-715 Question #365: Real Exam Question with Answer & Explanation

Question

An engineer is deploying Cisco ISE into an existing wireless environment for a hospital. The requirement from the customer is that the WLC use Cisco ISE for Central Web Authentication. The company also has a Cisco MSE that is used with the WLC to restrict access to patient records over wireless to the room of the patient only. Which option must be selected in the Authorization Profile on Cisco ISE to support the integration?

Options

• AMAP Location
• BAccess Type
• CTrack Movement
• DService Template

Explanation

{"question_number": 9, "question": "An engineer is deploying Cisco ISE into an existing wireless environment for a hospital... Cisco MSE that is used with the WLC to restrict access to patient records over wireless to the room of the patient only...", "correct_answer": "A", "explanation": "The Cisco MSE (Mobility Services Engine) tracks the physical location of wireless clients on a campus map and exposes this information via API. In Cisco ISE Authorization Profiles, the 'MAP Location' (A) option enables location-based authorization by referencing the MSE to determine where a client is physically located on the wireless network map. For the hospital use case - restricting access to patient records based on which room the device is in - ISE must check the device's MAP location (provided by the MSE) and only permit access when the device is in the authorized room. 'Track Movement' (C) is used to trigger re-authentication when a device moves, not to enforce room-specific access. 'Access Type' (B) and 'Service Template' (D) are general authorization parameters unrelated to location-based restrictions.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.