When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

MIB (Management Information Base) is used in SNMP for network device management, not for resolving Active Directory group names.

TGT (Ticket Granting Ticket) is part of the Kerberos authentication process, used to obtain service tickets, not to resolve group names directly.

OMAB is not a standard acronym related to Active Directory group resolution.

Cisco ISE relies on the Security Identifier (SID) attribute from Active Directory to uniquely identify groups and resolve potential ambiguity when multiple groups might share the same name in different domains or sub-domains. SIDs ensure that each security principal, including groups, has a distinct and immutable identifier within the Windows security model.