Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)

Trusted host allows administrators to specify particular source IP addresses or subnets from which administrative access (GUI, CLI) to the FortiGate is permitted, thereby restricting unauthorized access.

HTTPS encrypts web-based administrative traffic to the FortiGate's GUI, protecting login credentials and sensitive configuration data from eavesdropping during transmission.

"Trusted authentication" is not a standard FortiGate feature or protocol for restricting administrative access; while authentication is used, the concept listed does not directly apply to restrictive access methods.

SSH provides a secure, encrypted command-line interface for remote FortiGate administration, safeguarding credentials and commands from interception.

FortiTelemetry is a communication protocol for the Fortinet Security Fabric, used for endpoint communication or logging to FortiAnalyzer, not for administrative access to the FortiGate itself.