Which three statements are true regarding session-based authentication? (Choose three.)

In session-based authentication, each distinct HTTP session initiated by a user is generally tracked and treated as belonging to a single, authenticated user.

IP sessions from the same source IP address being treated as a single user is characteristic of IP-based authentication, not session-based authentication, which aims to differentiate users.

A key advantage of session-based authentication is its ability to distinguish and authenticate multiple individual clients or users that are sharing the same source IP address, for example, behind a NAT device.

Implementing and maintaining session-based authentication requires the FortiGate to manage more state information and perform more complex processing per session, thus consuming more system resources compared to basic IP-based authentication.

Session-based authentication is highly recommended and often necessary when multiple users are behind a source NAT, as it provides the granular control and individual user identification that IP-based authentication lacks in such scenarios.