Which statement about the firewall policy authentication timeout is true?

A. It is a hard timeout. The FortiGate removes the temporary policy for a user-s source IP address after this times expires.

B. It is a hard timeout. The FortiGate removes the temporary policy for a user-s source MAC address after this times expires.

C. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user-s source MAC address.

D. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user-s source IP.