Which of the following statements is correct about how the FortiGate unit verifies username
and password during user authentication?

A.
An administrator can define a local account for which the password must be verified by
querying a remote server.

B.
If authentication fails with a local password, the FortiGate unit will query the
authentication server if the local user is configured with both a local password and an
authentication server.

C.
The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet
Server Authentication Extensions are installed and configured.

D.
If a remote server is included in a user group, it will be checked before local accounts.