Refer to the exhibit. Which checkbox must be enabled to allow Cisco ISE to publish group membership information for active users that can be shared with Cisco Firepower devices?

Passive Identity Service is primarily for collecting user identity information from sources like AD sensors or WMI, not for publishing that information to other systems like Firepower.

SXP (Security Group Tag Exchange Protocol) is used for sharing Security Group Tag (SGT) information, not general user group membership.

Device Admin Service is related to TACACS+ for network device administration, not for sharing user group membership with Firepower.

pxGrid (Platform Exchange Grid) is the primary framework in Cisco ISE for sharing contextual information, including user identity and group membership, with other security platforms like Cisco Firepower. Enabling pxGrid allows ISE to publish this active user data, which Firepower can then subscribe to for identity-based policy enforcement.