220-1102 · Question #338
A systems administrator notices that a server on the company network has extremely high CPU utilization. Upon further inspection, the administrator sees that the server is consistently communicating…
The correct answer is D. Cryptomining malware. Extremely high CPU utilization on a server consistently communicating with an IP address associated with digital currency mining strongly indicates a cryptomining malware infection.
Question
A systems administrator notices that a server on the company network has extremely high CPU utilization. Upon further inspection, the administrator sees that the server is consistently communicating with an IP address that is traced back to a company that awards digital currency for salving hash algorithms. Which of the following was MOST likely used to compromise the server?
Options
- AKeylogger
- BRansomware
- CBoot sector virus
- DCryptomining malware
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C16% (4)
- D72% (18)
Why each option
Extremely high CPU utilization on a server consistently communicating with an IP address associated with digital currency mining strongly indicates a cryptomining malware infection.
A keylogger records keystrokes and typically doesn't cause high CPU usage or communication with cryptocurrency services.
Ransomware encrypts data and demands a ransom, usually causing data access issues rather than sustained high CPU for mining.
A boot sector virus infects the boot sector, interfering with system startup, and is not directly associated with high CPU for cryptocurrency mining.
Cryptomining malware hijacks a system's CPU or GPU resources to perform complex cryptographic calculations (mining hashes) for cryptocurrency, leading to high utilization and communication with mining pools.
Concept tested: Identifying cryptomining malware symptoms
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/detect-and-block-cryptomining-attacks
Topics
Community Discussion
No community discussion yet for this question.