Which of the following statements about advanced AD access mode for the FSSO collector agent are true?

Which of the following statements about advanced AD access mode for the FSSO collector agent are true?

(Choose two.)

Response:
A . FortiGate can act as an LDAP client to configure the group filters.
B . It is only supported if DC agents are deployed.
C . It supports monitoring of nested groups.
D . It uses the Windows convention for naming; that is, DomainUsername.

Answer: AB