CrowdStrike Certified Falcon Administrator (CCFA) — Question 194

What could cause your Windows host to be in Reduced Functionality Mode (RFM)?

Answer options

• A. Crowdstrike has not certified the latest Windows update
• B. A sensor update policy was misconfigured
• C. A misconfiguration in your prevention policy
• D. The host lost internet connectivity

Correct answer: A

Explanation

The correct answer is A because if Crowdstrike has not certified the latest Windows update, it can lead to the system being flagged as non-compliant, resulting in RFM. Options B and C relate to configuration issues that would not directly cause RFM, while option D, losing internet connectivity, does not specifically lead to RFM as it is more about the certification status.