Which information does FortiSASE use to bring network lockdown into effect on an endpoint?

A customer wants to upgrade their legacy on-premises proxy to a cloud-based proxy for a hybrid network.
Which two FortiSASE features would help the customer achieve this outcome? (Choose two.)

Refer to the exhibit.

A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate.
In this scenario, which two setups will achieve these requirements? (Choose two.)

What can be configured on FortiSASE as an additional layer of security for FortiClient registration?

Which secure internet access (SIA) use case minimizes individual endpoint configuration?