Which of the following statements about advanced AD access mode for FSSO collector agent are true? (Choose two.)

A. It is only supported if DC agents are deployed.

B. FortiGate can act as an LDAP client configure the group filters.

C. It supports monitoring of nested groups.

D. It uses the Windows convention for naming, that is, Domain\Username.