Totally up to you. Can you finish your training before the current exam
expires? That's what I would try to do so you don't have to go back
through an updated training.
Most likely CG-NAT getting in the way. What do the FortiGate logs say?
Does the firewall even see the request? The carrier could also be
blocking this. IKEv2?