Which of the following statements are correct regarding FortiGate virtual domains (VDOMs)? (Choose two)

VDOMs allow a single FortiGate unit to be logically segmented into multiple independent virtual firewalls, each with its own configurations, interfaces, and policies, enabling multi-tenancy or network segmentation.

In a FortiGate with VDOMs, a designated management VDOM is responsible for handling device-wide services such as SNMP, central logging, alert emails, and FortiGuard updates, ensuring centralized administrative functions.

All VDOMs on a single FortiGate unit share the same underlying operating system and must run the exact same firmware version; they cannot run different firmware versions independently.

An administrative user with a 'super_admin' profile possesses global administrative access and can manage all VDOMs on the FortiGate unit, not just a single one.