CCFA-200B · Question #5
You notice there are multiple Windows hosts in Reduced functionality mode (RFM). What is the most likely culprit causing these hosts to be in RFM?
The correct answer is C. A patch was pushed overnight to all Windows systems. The most likely culprit causing multiple Windows hosts to be in Reduced Functionality Mode (RFM) is a patch that was pushed overnight to all Windows systems. RFM occurs when the sensor detects a change in the operating system that requires a reboot to complete. A patch is one…
Question
You notice there are multiple Windows hosts in Reduced functionality mode (RFM). What is the most likely culprit causing these hosts to be in RFM?
Options
- AA Sensor Update Policy was misconfigured
- BA host was offline for more than 24 hours
- CA patch was pushed overnight to all Windows systems
- DA host was placed in network containment from a detection
How the community answered
(52 responses)- A2% (1)
- B6% (3)
- C81% (42)
- D12% (6)
Explanation
The most likely culprit causing multiple Windows hosts to be in Reduced Functionality Mode (RFM) is a patch that was pushed overnight to all Windows systems. RFM occurs when the sensor detects a change in the operating system that requires a reboot to complete. A patch is one of the common causes of such a change. The other options are either incorrect or not related
Topics
Community Discussion
No community discussion yet for this question.