Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

System time is a global setting that applies to the entire FortiGate device and cannot be configured differently for individual VDOMs, as all VDOMs share the same system clock.

FortiGuard update servers are typically a global setting for the entire FortiGate device, determining where the device fetches security updates and definitions for all VDOMs.

The operating mode, which defines if the VDOM functions in NAT/Route or Transparent mode, is a fundamental networking setting that can be configured independently for each VDOM, allowing different VDOMs to perform distinct roles on the network.

The NGFW mode, specifically policy-based or profile-based, is a security-related configuration that can be enabled and configured separately within each VDOM, enabling granular control over how security policies are applied within different virtualized environments.