nerdexam
CrowdStrike

CCFA-200B · Question #157

What is the earliest version of Windows Server that a Sensor is compatible with?

The correct answer is C. Server 2008 R2 SP1. Server 2008 R2 SP1 is the earliest supported version because CrowdStrike Falcon Sensor requires the Windows kernel features and security APIs introduced in that release - specifically, the SP1 service pack is mandatory, not just Server 2008 R2 alone. Option D (Server 2008) is…

Sensor Deployment and Management

Question

What is the earliest version of Windows Server that a Sensor is compatible with?

Options

  • AServer 2012
  • BServer 2003
  • CServer 2008 R2 SP1
  • DServer 2008

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    93% (50)
  • D
    4% (2)

Explanation

Server 2008 R2 SP1 is the earliest supported version because CrowdStrike Falcon Sensor requires the Windows kernel features and security APIs introduced in that release - specifically, the SP1 service pack is mandatory, not just Server 2008 R2 alone.

  • Option D (Server 2008) is wrong because the base Server 2008 release lacks the kernel-level hooks and service pack updates required by the Sensor; only the R2 SP1 variant qualifies.
  • Option A (Server 2012) is a supported version, but it is not the earliest - it came after 2008 R2 SP1, making it a later floor, not the minimum.
  • Option B (Server 2003) is wrong because that OS is far too old and reached end-of-life long before modern EDR sensors were designed; it lacks the necessary kernel architecture entirely.

Memory tip: Think "R2 SP1 = Really 2 Steps required" - you need both the R2 revision and Service Pack 1; neither Server 2008 alone nor a missing SP1 will work, and anything older than that is simply off the table.

Topics

#Windows Server compatibility#sensor requirements#OS support#minimum version

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice