CCFA-200b practice question 24 of 25

You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following parameters can be used to override the 20- minute default provisioning window?

Full set: 153 questions

Domain Endpoint Security

Answer options
A: ExtendedWindow=1
B: Timeout=0
C: ProvNoWait=1 Correct answer
D: Timeout=30
Correct Answer:
C. ProvNoWait=1
Explanation

The CrowdStrike Falcon sensor installer for Windows has a default provisioning timeout of 20 minutes. During this time, it attempts to connect to the CrowdStrike cloud to complete its registration. On hosts with slow or intermittent network connectivity, this process can time out, causing the installation to fail. The ProvNoWait=1 command-line parameter instructs the installer to complete its process without waiting for the cloud provisioning step to finish. This allows the installation to succeed, and the sensor will then continue to attempt provisioning in the background once network connectivity is stable.

Why Incorrect

A. ExtendedWindow=1: This is not a valid or documented command-line parameter for the CrowdStrike Falcon sensor installer.
B. Timeout=0: This is not a valid parameter for the Falcon sensor installer. A timeout value of zero typically implies no wait, but ProvNoWait=1 is the correct syntax.
D. Timeout=30: This is not a valid parameter to extend the provisioning window for the Falcon sensor installer. The timeout is fixed, and the supported method is to bypass the wait.

References

1. CrowdStrike Falcon® Documentation

Sensor deployment > Deploying sensors > Deploying the Windows sensor

Section: 'Command-line arguments'. This official documentation details the available parameters for silent installation. It specifies ProvNoWait=1 as the parameter to use when you do not want the installer to wait for the sensor to be provisioned by the CrowdStrike cloud. This is the designated solution for installations on systems without immediate internet access or with slow connections that could cause the default 20-minute timeout to be exceeded.

2. CrowdStrike Falcon® Documentation

Falcon Sensor for Windows Deployment Guide. This guide explicitly mentions the ProvNoWait parameter for use cases such as creating golden images for VDI or deploying on systems where immediate cloud communication cannot be guaranteed. It confirms this parameter prevents the installation from failing due to provisioning timeouts.

Scroll to Top