Mike uncovers malware on a web server that is triggering 100% CPU utilization which prevents other processes from launching. What category of Denial of Service attacks does he place these attacks?

Network-based stopping services describes attacks delivered over the network that terminate specific services, which does not match malware already resident on the host consuming CPU.

This attack is local-based because the malware is executing directly on the web server, not arriving as external network traffic. It falls under exhausting resources because it monopolizes CPU - a finite system resource - to 100% utilization, which indirectly prevents other processes from launching rather than explicitly stopping a named service.

Network-based exhausting resources applies to attacks like flood-based DoS that saturate bandwidth or network-layer resources from an external source, not local malware CPU consumption.

Local-based stopping services would describe an attack that kills or disables a specific process or service on the host, not one that simply starves all processes of CPU cycles.