Which two statements about advanced AD access mode for the FSSO collector, agent are true? (Choose two.)

Which two statements about advanced AD access mode for the FSSO collector, agent are true? (Choose two.)

A. FortiGate can act as an LDAP client to configure the group filters.

B. It uses the Windows convention for naming; that is, DomainUsername.

C. It supports monitoring of nested groups.

D. It is only supported if DC agents are deployed.

Answer: A,C

Explanation:

The correct statements about the advanced AD access mode for the FSSO collector agent are:

A. FortiGate can act as an LDAP client to configure the group filters.

In advanced AD access mode, FortiGate can use LDAP (Lightweight Directory Access Protocol) to query

and retrieve user and group information from Active Directory for configuring group filters.

C. It supports monitoring of nested groups.

Advanced AD access mode does support monitoring of nested groups, allowing for a more comprehensive view of user group memberships.