> 2. after it stops learning mode in this situation, which mode will be started?
It is a safeguard to avoid memory consumption.
Entries are no longer appended to that domain automatically.
That domain behaves as if a profile for permissive mode is assigned
although that domain is assigned a profile for learning mode.