Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

The root FortiGate has central control over its Security Fabric members, allowing it to initiate system-level operations like shutdown or reboot on downstream FortiGate devices directly from the fabric interface. This centralized management simplifies administration of the entire fabric by providing a single point of control.

FortiAnalyzer logging configuration for all Security Fabric members is managed centrally from the root FortiGate. The root FortiGate acts as the central point for enabling or disabling logging to FortiAnalyzer for its downstream fabric members, ensuring consistent policy enforcement and log management across the fabric.

Logging into a downstream FortiSwitch device can be done directly from its managing FortiGate or via its own management IP, not exclusively from the root FortiGate of the fabric.

Banning or unbanning compromised hosts is typically a function of FortiClient EMS, FortiManager, or individual FortiGate devices, and is not an action exclusively performed by the root FortiGate within the Security Fabric.