Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)
A . System time
B. FortiGuaid update servers
C. Operating mode
D. NGFW mode

Answer: C,D

Explanation:

C: "Operating mode is per-VDOM setting. You can combine transparent mode VDOM’s with NAT mode VDOMs on the same physical Fortigate.

D: "Inspection-mode selection has moved from VDOM to firewall policy, and the default inspection-mode is flow, so NGFW Mode can be changed from Profile-base (Default) to Policy-base directly in System > Settings from the VDOM" Page 125 of FortiGate_Infrastructure_6.4_Study_Guide