What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.)

Using an IPsec recommended template in FortiManager for a hub-and-spoke topology provides standardized configurations. The primary advantage of any template is ensuring consistency, which in this context applies to both Phase 1 and Phase 2 settings across all tunnels within the VPN community. This prevents configuration mismatches and simplifies management. Furthermore, the templates labeled as "recommended" are pre-configured by Fortinet with settings that align with security and performance best practices, guiding administrators toward an optimal and reliable setup without requiring deep expertise in every IPsec parameter.

C. Templates standardize configuration but do not automate the installation process. An administrator must still explicitly create the VPN community and install the configuration on the spokes.

D. The VPN monitor tool provides the same set of statistics for all IPsec tunnels, regardless of whether they were configured using a template or created manually.

1. Fortinet FortiManager Administration Guide 7.0.1, Page 418, "IPsec Templates" section: "FortiManager includes some recommended templates that you can use to create VPNs. You can also create your own templates." This supports option B, as it confirms Fortinet provides "recommended" templates.

2. Fortinet Certified Professional - Network Security Study Guide for FortiManager 7.0, Page 218, "IPsec Templates" section: "Using templates ensures that all VPNs in a community have consistent settings." This directly supports option A, highlighting the role of templates in maintaining consistency.

3. Fortinet FortiManager Administration Guide 7.0.1, Page 416, "Creating a hub-and-spoke VPN" section: This section details the manual steps required to create and install the VPN configuration using the wizard, which contradicts the automatic installation suggested in option C.

4. Fortinet FortiManager Administration Guide 7.0.1, Page 161, "Monitoring VPNs" section: The documentation describes the features of the VPN monitor without making any distinction in available statistics based on the tunnel's configuration method, which invalidates option D.