An administrator is creating a global service group. The requirement is to automatically fail over this service group to the remote cluster if the service group is faulted on all nodes in the local cluster, but only if the local cluster is still exchanging heartbeats with the remote cluster.

What is the appropriate value for the ClusterFailOverPolicy attribute in this scenario?