Which of the following statements are characteristics of a FSSO solution using advanced access mode? (Choose three.)

While some FortiGate policies can apply to individual users, FSSO advanced access mode emphasizes group-based policies for efficiency and scalability.

FSSO advanced access mode supports nested or inherited groups from Active Directory, allowing for more flexible and detailed group-based policy application based on complex organizational structures.

In advanced access mode, FSSO often interacts with LDAP directly, and usernames can follow the LDAP Distinguished Name (DN) convention (e.g., CN=User, OU=Name, DC=Domain) for identification.

The Windows convention 'Domain\username' is generally used in standard FSSO modes, whereas advanced access mode frequently uses LDAP DNs for user identification due to its deeper integration capabilities.

With FSSO advanced access mode, protection profiles (e.g., firewall policies) are primarily applied to user groups, rather than individual users, simplifying management and leveraging existing directory group structures.