CCFA-200B · Question #157
What is the earliest version of Windows Server that a Sensor is compatible with?
The correct answer is C. Server 2008 R2 SP1. Server 2008 R2 SP1 is the earliest supported version because CrowdStrike Falcon Sensor requires the Windows kernel features and security APIs introduced in that release - specifically, the SP1 service pack is mandatory, not just Server 2008 R2 alone. Option D (Server 2008) is…
Question
What is the earliest version of Windows Server that a Sensor is compatible with?
Options
- AServer 2012
- BServer 2003
- CServer 2008 R2 SP1
- DServer 2008
How the community answered
(54 responses)- A2% (1)
- B2% (1)
- C93% (50)
- D4% (2)
Explanation
Server 2008 R2 SP1 is the earliest supported version because CrowdStrike Falcon Sensor requires the Windows kernel features and security APIs introduced in that release - specifically, the SP1 service pack is mandatory, not just Server 2008 R2 alone.
- Option D (Server 2008) is wrong because the base Server 2008 release lacks the kernel-level hooks and service pack updates required by the Sensor; only the R2 SP1 variant qualifies.
- Option A (Server 2012) is a supported version, but it is not the earliest - it came after 2008 R2 SP1, making it a later floor, not the minimum.
- Option B (Server 2003) is wrong because that OS is far too old and reached end-of-life long before modern EDR sensors were designed; it lacks the necessary kernel architecture entirely.
Memory tip: Think "R2 SP1 = Really 2 Steps required" - you need both the R2 revision and Service Pack 1; neither Server 2008 alone nor a missing SP1 will work, and anything older than that is simply off the table.
Topics
Community Discussion
No community discussion yet for this question.