You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following parameters can be used to override the 20 minute default provisioning window?
You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following parameters can be used to override the 20 minute default provisioning window?
To override the 20-minute default provisioning window during the installation of the Falcon sensor on a host with a slow internet connection, you can use the parameter 'ProvNoWait=1'. This parameter prevents the sensor from aborting the installation if it can't connect to the CrowdStrike cloud within the default 20-minute window.
If your host requires more time to connect, you can override this by using the ProvWaitTime parameter in the command line to increase the timeout to 1 hour.
Plantvast is correct, the answer is C. Here's a quote from the documentation: "ProvNoWait=1 The sensor does not abort installation if it can't connect to the CrowdStrike cloud within 20 minutes (10 minutes, in Falcon sensor version 6.21 and earlier). (By default, if the host can't contact our cloud, it will retry the connection for 20 minutes. After that, the host will automatically uninstall its sensor.)" "ProvWaitTime=3600000 The sensor waits for 1 hour to connect to the CrowdStrike cloud when installing (the default is 20 minutes)."
The 2 command that can be used for this scenario are ProvNoWait=1 or ProvWaitTime=(time in milliseconds).
C is correct, per the docs "Needs more time for install? (ProvNoWait=1),"
C is correct