Which two statements about NTLM authentication are correct? (Choose two.)

A. It requires DC agents on every domain controller when used in multidomain environments.

B. It is useful when users log in to DCs that are not monitored by a collector agent.

C. It requires NTLM-enabled web browsers.

D. It takes over as the primary authentication method when configured alongside FSSO.

Reference: https://www.fortinetguru.com/2016/07/configuring-authenticated-access/12/