Which of the following statements are correct about NTLM authentication? (Choose three)

NTLM negotiation typically starts with the FortiGate device initiating a challenge-response process with the user's web browser when configured for NTLM authentication.

For NTLM authentication to function, the user's web browser must be configured to support and engage in the NTLM challenge-response protocol.

NTLM is a Microsoft authentication protocol that inherently relies on Windows Domain Controllers to authenticate users against the Active Directory database.

FortiGate's NTLM authentication typically requires a collector agent, such as the FortiGate DC agent or FortiAuthenticator, to communicate with domain controllers and collect user information.

FortiGate's NTLM integration with Active Directory environments usually requires DC agents (like the FortiGate DC agent or a FortiAuthenticator acting as one) to facilitate communication with Domain Controllers.