CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ91

VerifiedHost Management and Setup

You observe that several Windows hosts are in Reduced Functionality Mode (RFM). What is the most likely cause of these hosts entering RFM?

Explanation

A broadly deployed Windows patch can change the Windows kernel or related operating-system components, causing the Falcon sensor to enter Reduced Functionality Mode as a compatibility safeguard until compatible sensor support is available.

Community Discussion

No comments yet. Be the first to start the discussion!