When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?
A. MIB
B. SID
C. MAB
D. TGT