300-715 Question #2: Real Exam Question with Answer & Explanation

The correct answer is D: SID. Cisco ISE uses the Security Identifier (SID) to uniquely identify and resolve ambiguous Active Directory group names.

Policy Enforcement

Question

When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

Cisco ISE uses the Security Identifier (SID) to uniquely identify and resolve ambiguous Active Directory group names.

Common mistakes.

A. MIB (Management Information Base) is used in SNMP for network device management, not for resolving Active Directory group names.
B. TGT (Ticket Granting Ticket) is part of the Kerberos authentication process, used to obtain service tickets, not to resolve group names directly.
C. OMAB is not a standard acronym related to Active Directory group resolution.

Concept tested. Cisco ISE Active Directory group resolution using SID

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_guide_31/b_ISE_admin_guide_31_chapter_01000.html#concept_50170A5825E14917BE1B6C4F37386D22

#Active Directory Integration#Group Resolution#Security Identifier#Cisco ISE

No community discussion yet for this question.