CrowdStrike Certified Falcon Administrator (CCFA) — Question 192

What is the primary concern with Windows sensors going into Reduced Functionality Mode (RFM)?

Answer options

• A. The operating systems on these hosts have crashed
• B. The sensors do not have full visibility into all events occurring on the host
• C. The sensors are unable to report any of their recorded events
• D. The hosts have been powered off or otherwise cannot communicate with the Falcon cloud

Correct answer: B

Explanation

The correct answer is B because when Windows sensors are in Reduced Functionality Mode, they lose the ability to monitor all events effectively. Options A, C, and D describe different issues, such as system crashes or communication failures, but they do not specifically address the visibility limitation that occurs in RFM.