Which two statements are true about collector agent advanced mode? (Choose two.)

Which two statements are true about collector agent advanced mode? (Choose two.)

A. Security profiles can be applied only to user groups, not individual users. B. FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate. C. Advanced mode supports nested or inherited groups. D. Advanced mode uses Windows convention - NetBios: Domain\Username.