When configuring Active Directory groups, an administrator is attempting to retrieve a group that has a name that is ambiguous with another group. What must be done so that the correct group is…

The Security Identifier (SID) is a globally unique identifier assigned to every user, group, and computer object in Active Directory. Using the SID guarantees that Cisco ISE always retrieves the precise, intended group, even if multiple groups share similar or ambiguous names, as SIDs are never reused and are unique within a domain.

Configuring MAB and 802.1X for conflicting groups relates to policy application, not to resolving ambiguity in Active Directory group names or how ISE identifies them.

Selecting both groups and using a 'TCT pointer' is not a recognized method in Active Directory or Cisco ISE for resolving ambiguous group names.

MIB (Management Information Base) entries are used for network device management via SNMP and are entirely unrelated to identifying Active Directory groups within Cisco ISE.