Which of the following statements are correct concerning IPsec dialup VPN configurations for FortiGate devices? (Choose two)

While main mode offers enhanced security and is often preferred for site-to-site VPNs, aggressive mode is commonly used for dial-up VPNs regardless of the number of tunnels due to its faster negotiation, and its use is not strictly limited by the count of VPNs.

A FortiGate device configured as an IPsec dialup VPN server acts as a listener and waits for remote clients to initiate the tunnel connection; it cannot initiate a dialup connection itself.

When configuring multiple aggressive-mode IPsec dialup VPNs on a FortiGate, a unique Peer ID is essential for the FortiGate to correctly distinguish and apply the appropriate tunnel configuration for each connecting client.

Upon successful establishment of an IPsec dialup VPN tunnel, the FortiGate automatically adds a static route for the remote client's network (defined by the quick mode selector's destination address) through the VPN interface, simplifying routing management.