Your network contains an Active Directory domain named contoso.com. The domain contains domain controllers that run Windows Server 2016 The Job Title attribute for a domain user named User1 has a value of Sales Manager.
User1 runs whoami/claims and receives the following output.
You need to ensure that the security token of User1 has a claim for Job Title.
What should you do?
A. From Active Directory Users and Computers, modify the properties of the User1 account.
B. From a Group Policy object(GPO), configure KDC support for claims, compound authentication, and Kerberos armoring
C. From Active Directory Administrative Center, add a claim type.
D. From Windows PowerShell, run the New-ADCIaimTransformPolicy cmdlet and specify the -Name parameter.
given answer C is correct .
From the output, obviously, a claim type is missing (or disabled) so that the domain controller is not issuing tickets with the “Job Title” claim type.
correctcorrect