CrowdStrike Certified Falcon Administrator (CCFA) — Question 90

You have a Windows host on your network in Reduced functionality mode (RFM). While the system is in RFM, which of the following is TRUE?

Answer options

• A. System monitoring will be unavailable
• B. Event reporting will be unavailable
• C. Prevention patterns will not be triggered
• D. Some detection patterns and preventions will not be triggered

Correct answer: D

Explanation

The correct answer is D because, in Reduced Functionality Mode, certain detection patterns and preventions may not be fully operational, but some can still function. Options A, B, and C are incorrect as system monitoring and event reporting can still be available, and not all prevention patterns are disabled.