Refer to the exhibit.

An administrator has to provide on-fabric clients with access to FortiAnalyzer using ZTNA tags.
Which two conditions must be met to achieve this task? (Choose two.)
Refer to the exhibit.
An administrator has to provide on-fabric clients with access to FortiAnalyzer using ZTNA tags.
Which two conditions must be met to achieve this task? (Choose two.)
To provide on-fabric clients with access to FortiAnalyzer using ZTNA tags, the on-fabric client should have FortiGate as its default gateway to ensure proper routing and access control. Additionally, the IP/MAC-based firewall policy must be configured on FortiGate to apply the appropriate security measures and tag-based access controls for the on-fabric devices.
Answer is A & D, study guide page 124-126. the question refers to on-fabric device, and ZTNA server and rule is used when device is off-fabric.
IP/MAC-based access control uses ZTNA tags to control access between on-fabric devices and an internal web server or the internet. This does not require the use of the access proxy, and uses only ZTNA tags for access control. A & D.