If you are not able to update your Falcon sensors on a regular basis, what is the maximum recommended aging period before updating your sensors?

Question

Options

• A7 days
• B60 days
• C90 days
• DThere is no maximum aging period

• A
  3% (1)
• B
  8% (3)
• C
  86% (32)
• D
  3% (1)

Explanation

CrowdStrike recommends a maximum aging period of 90 days for Falcon sensors when regular updates aren't feasible, making C correct - beyond this threshold, sensors may miss critical detection logic and protection improvements that keep endpoints covered against evolving threats. A (7 days) describes a best-practice update frequency for actively managed environments, not the maximum tolerable gap. B (60 days) is a plausible-sounding middle ground but isn't the documented limit CrowdStrike specifies. D is incorrect because leaving sensors indefinitely outdated creates real security gaps; CrowdStrike explicitly sets a ceiling to ensure baseline coverage quality.

Memory tip: Think of it as a quarterly rule - 90 days ≈ one quarter of the year. If you can't update more often, at least update every quarter to stay protected.

No community discussion yet for this question.