In which scenario does Cisco ISE allocate an Advanced license?

Basic guest services with dACL enforcement are generally covered by a Base license or a combination of Base and Wireless licenses.

Endpoint authorization using Security Group Access (SGA) enforcement, which leverages Security Group Tags (SGTs), typically falls under the Base license functionality.

Dynamic device profiling, including passive and active probes, and the ability to assign device-specific profiles for granular authorization, is a feature that requires a Cisco ISE Advanced license. This capability is crucial for implementing sophisticated identity-based access control policies.

High availability (HA) for Administrator nodes is a fundamental architectural capability of Cisco ISE and is typically covered by the Base license, not specifically an Advanced license feature.