Portfolios that lie to the right of the market portfolio on the capital market line are created by borrowing funds to own more than 100% of the market portfolio (M).
Both the statement, "holding both the risk-free asset and the market portfolio" and "buying the risk-free asset" refer to portfolios that lie to the left of the market portfolio. Portfolios that lie to the left of point M are created by lending funds (or buying the risk free-asset). These investors own less than 100% of both the market portfolio and more than 100% of the risk-free asset. The portfolio at point Rf (intersection of the CML and the y-axis) is created by holding 100% of the risk-free asset. The statement, "fully diversifying" is incorrect because the market portfolio is fully diversified.