What is the most likely reason?

You have added your Active Directory server to the Cisco ISE and see the status as operational. However, when you try to add Active Directory groups to your authorization policy conditions in the Cisco ISE, no Active Directory groups appear.

What is the most likely reason?
A . You did not add any attributes in the Active Directory join point under the External Identity Sources.
B . A firewall is blocking TCP port 389 between the Cisco ISE and Active Directory.
C . You did not add any groups in the Active Directory join point under the External Identity Sources.
D . The credentials used to join the Cisco ISE to Active Directory do not have sufficient privileges to query Active Directory.

View Answer

Answer: C

Explanation:

From:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/ISE-ADIntegrationDoc/b_ISE-ADIntegration.html#ID687