A. Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.

B. On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.

C. On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.

D. Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.