In CrowdStrike Falcon, how long is a host considered inactive if no heartbeat is received?

In CrowdStrike Falcon, how long is a host considered inactive if no heartbeat is received?

• A. 1 minute
• B. 2 minutes
• C. 5 minutes
• D. 10 minutes

Answer: (B)

In CrowdStrike Falcon, a host is considered inactive if no heartbeat is received for 2 minutes. This heartbeat is a regular signal sent from the endpoint to the CrowdStrike cloud that indicates the host's active status. This 2-minute threshold helps to promptly identify and react to potential issues with endpoint connectivity or security status. If a host fails to send a heartbeat within this time frame, it is marked as inactive, allowing security teams to take necessary actions to investigate or remediate potential risks associated with unattended endpoints.

In CrowdStrike Falcon, a host is considered inactive if no heartbeat is received for 2 minutes. This heartbeat is a regular signal sent from the endpoint to the CrowdStrike cloud that indicates the host's active status. This 2-minute threshold helps to promptly identify and react to potential issues with endpoint connectivity or security status. If a host fails to send a heartbeat within this time frame, it is marked as inactive, allowing security teams to take necessary actions to investigate or remediate potential risks associated with unattended endpoints.