CCFA-200b practice question 24 of 25
You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following parameters can be used to override the 20- minute default provisioning window?
Full set: 153 questionsDomain Endpoint Security
The CrowdStrike Falcon sensor installer for Windows has a default provisioning timeout of 20 minutes. During this time, it attempts to connect to the CrowdStrike cloud to complete its registration. On hosts with slow or intermittent network connectivity, this process can time out, causing the installation to fail. The ProvNoWait=1 command-line parameter instructs the installer to complete its process without waiting for the cloud provisioning step to finish. This allows the installation to succeed, and the sensor will then continue to attempt provisioning in the background once network connectivity is stable.
A. ExtendedWindow=1: This is not a valid or documented command-line parameter for the CrowdStrike Falcon sensor installer.
B. Timeout=0: This is not a valid parameter for the Falcon sensor installer. A timeout value of zero typically implies no wait, but ProvNoWait=1 is the correct syntax.
D. Timeout=30: This is not a valid parameter to extend the provisioning window for the Falcon sensor installer. The timeout is fixed, and the supported method is to bypass the wait.
1. CrowdStrike Falcon® Documentation
Sensor deployment > Deploying sensors > Deploying the Windows sensor
Section: 'Command-line arguments'. This official documentation details the available parameters for silent installation. It specifies ProvNoWait=1 as the parameter to use when you do not want the installer to wait for the sensor to be provisioned by the CrowdStrike cloud. This is the designated solution for installations on systems without immediate internet access or with slow connections that could cause the default 20-minute timeout to be exceeded.
2. CrowdStrike Falcon® Documentation
Falcon Sensor for Windows Deployment Guide. This guide explicitly mentions the ProvNoWait parameter for use cases such as creating golden images for VDI or deploying on systems where immediate cloud communication cannot be guaranteed. It confirms this parameter prevents the installation from failing due to provisioning timeouts.
Keep practicing
Take the free CCFA-200b practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CCFA-200b practice questions
- Question 1After Network Containing a host, your Incident Response team states they are unable to re…
- Question 2Why would you assign hosts to a static group instead of a dynamic group?
- Question 3How can a API client secret be viewed after it has been created?
- Question 4What best describes what happens to detections in the console after clicking "Enable Dete…
- Question 5Which option best describes the general process Whereinstallation of the Falcon Sensor on…
- Question 6What is the purpose of a containment policy?
