Which of the following statements about advanced AD access mode for FSSO collector agent are true? (Choose two.)

Advanced AD access mode in FSSO is an alternative to deploying DC agents and does not require them; it relies on the FSSO Collector Agent polling Active Directory directly for logon events.

In an FSSO deployment utilizing advanced AD access mode, the FortiGate can function as an LDAP client to directly query Active Directory for retrieving and configuring user group filters for policy application.

While FSSO generally supports the resolution of nested groups, this capability is not exclusively tied to "advanced AD access mode" and can be supported by other FSSO deployment methods as well.

FSSO's integration with Active Directory, including advanced access modes, identifies and processes users using the standard Windows convention for naming, which is typically represented as `Domain\Username`.