CCFA-200B · Question #5
You notice there are multiple Windows hosts in Reduced functionality mode (RFM). What is the most likely culprit causing these hosts to be in RFM?
The correct answer is C. A patch was pushed overnight to all Windows systems. The most likely culprit causing multiple Windows hosts to be in Reduced Functionality Mode (RFM) is a patch that was pushed overnight to all Windows systems. RFM occurs when the sensor detects a change in the operating system that requires a reboot to complete. A patch is one of
Question
You notice there are multiple Windows hosts in Reduced functionality mode (RFM). What is the most likely culprit causing these hosts to be in RFM?
Options
- AA Sensor Update Policy was misconfigured
- BA host was offline for more than 24 hours
- CA patch was pushed overnight to all Windows systems
- DA host was placed in network containment from a detection
How the community answered
(52 responses)- A2% (1)
- B6% (3)
- C81% (42)
- D12% (6)
Explanation
The most likely culprit causing multiple Windows hosts to be in Reduced Functionality Mode (RFM) is a patch that was pushed overnight to all Windows systems. RFM occurs when the sensor detects a change in the operating system that requires a reboot to complete. A patch is one of the common causes of such a change. The other options are either incorrect or not related
Topics
Community Discussion
No community discussion yet for this question.