Refer to the exhibit.
An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
The command set rollback-allow-reboot enable on FortiManager allows the FortiGate device to reboot and recover its previous configuration from its configuration file if a new configuration causes the FGFM tunnel to go down for more than 15 minutes. This ensures that the FortiGate can revert to a known working state in case the new configuration disrupts connectivity beyond a recoverable state without human intervention.
Answer C Page 281 Study Guide If the connection fails to reestablish, FortiGate applies the unset command after 15 minutes (not configurable and not based on sock timeout values). If the connection remains down, and rollback-allow-reboot is enabled on FortiManager, FortiGate reboots to recover the previous configuration from its configuration file.