Which two methods should the administrator use to achieve this?

An OT network administrator is trying to implement active authentication.

Which two methods should the administrator use to achieve this? (Choose two.)
A . Two-factor authentication on FortiAuthenticator
B . Role-based authentication on FortiNAC
C . FSSO authentication on FortiGate
D . Local authentication on FortiGate

Answer: A,B