Refer to the exhibit to view the authentication rule configuration In this scenario, which statement is true?

IP-based authentication grants access based on a device's source IP address rather than individual user logins, which is less common for granular user-level access control in scenarios involving individual team members.

Route-based authentication is not a recognized or standard authentication method within FortiGate or general network security contexts; authentication primarily deals with user or device identity, not routing paths.

Session-based authentication enables users to authenticate once (e.g., via a captive portal or transparently) and maintain their authenticated state for a specified duration across multiple connections, allowing them to access various resources without repeated logins within that session timeout.

Policy-based authentication describes where authentication requirements are enforced (within firewall policies), not the underlying technical mechanism or type of authentication itself, unlike session-based authentication which is a specific mechanism.