Your customer requires some users to be mapped to a specific role. The Active Directory (AD)
administrator frequently changes users from one AD group to another.
Which role mapping rule type should you use?

A.
the user’s group membership returned by the realm’s authentication server

B.
the result of a host check rule for machine certificate

C.
the authentication realm accessed

D.
the user’s username and NetBIOS name

Explanation: