Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

A hub-and-spoke topology does not inherently provide full redundancy; if the hub fails, all spoke-to-spoke and spoke-to-internet connectivity through the hub is lost.

In a hub-and-spoke VPN topology, each spoke connects only to the central hub, resulting in a linear increase (N-1) in the number of tunnels for N sites. This is substantially fewer compared to a fully-meshed topology, which requires N*(N-1)/2 tunnels, simplifying management and configuration.

The encryption protocols used (e.g., AES, 3DES) are independent of the VPN topology and are configured per tunnel, not dictated by whether it's hub-and-spoke or fully-meshed.

A hub-and-spoke topology typically requires fewer routes because inter-spoke traffic often traverses the central hub, simplifying routing tables at spoke sites.