FortiSASE endpoint upgrade rules provide controlled deployment of the latest supported FortiClient version. The FortiSASE study material specifies that administrators can either perform an upgrade immediately or configure a scheduled start time, with the scheduled deployment based on the endpoint ' s local time. It also identifies endpoint groups as the targeting mechanism and explains that automatic reboot behavior is configurable rather than unconditional.

Therefore, A is correct. Fortinet ' s Endpoint Upgrade documentation provides the exact scheduling behavior: when Scheduled (endpoint local time) is configured and the endpoint ' s clock has already passed the selected time, FortiClient installation is deferred until the next day at that selected time.

B is incorrect because upgrade rules cannot be assigned to a user group or user object; they apply to computer/device groups or computer/device objects. C is incorrect because only the Immediate option begins installation immediately; a scheduled deployment follows its configured local schedule. D is incorrect because the automatic reboot setting applies to Windows endpoints. Fortinet specifically states that macOS endpoints do not require a reboot to complete the FortiClient installation.

Study Guide Reference: Endpoint Management > Endpoint Upgrade; FortiSASE Enterprise Administrator Study Guide, Endpoint Management.

===============