nerdexam
CrowdStrike

CCFA-200B · Question #219

What happens when a Falcon Sensor on a Linux host enters Reduced Functionality Mode (RFM)?

The correct answer is B. RFM sensors on Linux hosts stop processing both events and detections. Sensors send basic. You've hit your limit · resets 12:50am (America/New_York)

Sensor Management

Question

What happens when a Falcon Sensor on a Linux host enters Reduced Functionality Mode (RFM)?

Options

  • ARFM sensors on Linux hosts only send detection information to the Falcon Console. Event
  • BRFM sensors on Linux hosts stop processing both events and detections. Sensors send basic
  • CRFM sensors on Linux hosts stop processing events and detections but continue to send log data
  • DRFM sensors on Linux hosts continue to process events and detections for existing policies but

How the community answered

(43 responses)
  • B
    93% (40)
  • C
    5% (2)
  • D
    2% (1)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#Reduced Functionality Mode#RFM#Linux sensor behavior#sensor status

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice