An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy. Which two components must be configured, in addition to…

Active Directory External Identity Sources must be configured in Cisco ISE to establish a connection and enable communication with the Active Directory domain, allowing ISE to query user and group information.

After connecting to Active Directory, you define a Library Condition for External Identity: External Groups to import or reference specific Active Directory groups into ISE. This makes the AD group memberships available for use as conditions within authorization policies.

Identity Source Sequences are used to specify the order in which ISE checks multiple identity sources, but they are not a direct component for configuring Active Directory or making its groups usable.

LDAP External Identity Sources are used for general LDAP directories, but for Microsoft Active Directory, the specific 'Active Directory External Identity Sources' configuration is preferred as it offers deeper integration features.

A Library Condition for Identity Group: User Identity Group refers to internal ISE identity groups, not groups sourced from external directories like Active Directory.