Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)
A . Shut down/reboot a downstream FortiGate device.
B . Disable FortiAnalyzer logging for a downstream FortiGate device.
C . Log in to a downstream FortiSwitch device.
D . Ban or unban compromised hosts.

Answer: BC