CrowdStrike
CCFA-200B · Question #219
What happens when a Falcon Sensor on a Linux host enters Reduced Functionality Mode (RFM)?
The correct answer is B. RFM sensors on Linux hosts stop processing both events and detections. Sensors send basic. You've hit your limit · resets 12:50am (America/New_York)
Sensor Management
Question
What happens when a Falcon Sensor on a Linux host enters Reduced Functionality Mode (RFM)?
Options
- ARFM sensors on Linux hosts only send detection information to the Falcon Console. Event
- BRFM sensors on Linux hosts stop processing both events and detections. Sensors send basic
- CRFM sensors on Linux hosts stop processing events and detections but continue to send log data
- DRFM sensors on Linux hosts continue to process events and detections for existing policies but
How the community answered
(43 responses)- B93% (40)
- C5% (2)
- D2% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#Reduced Functionality Mode#RFM#Linux sensor behavior#sensor status
Community Discussion
No community discussion yet for this question.