SY0-501 · Question #429
A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours. The main culprit of CPU utilization is the antivirus program. Which of the following issue could…
The correct answer is B. DoS attack E. Resource exhaustion. Sustained 100% CPU utilization by an antivirus process indicates a potential runaway or compromised process that, if unresolved, can cause resource exhaustion and effectively deny service to legitimate users and applications.
Question
A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours. The main culprit of CPU utilization is the antivirus program. Which of the following issue could occur if left unresolved? (Select TWO)
Options
- AMITM attack
- BDoS attack
- CDLL injection
- DBuffer overflow
- EResource exhaustion
How the community answered
(48 responses)- A6% (3)
- B79% (38)
- C10% (5)
- D4% (2)
Why each option
Sustained 100% CPU utilization by an antivirus process indicates a potential runaway or compromised process that, if unresolved, can cause resource exhaustion and effectively deny service to legitimate users and applications.
A Man-in-the-Middle (MITM) attack involves intercepting network communications between two parties, which is unrelated to high CPU utilization caused by an antivirus process.
When CPU resources are completely consumed for an extended period, legitimate processes and services cannot obtain the processing time they need to function, effectively making the server unavailable to users - this constitutes a Denial of Service (DoS) condition, even if unintentional.
DLL injection is a code injection technique where a malicious library is loaded into a running process, which is a separate attack vector not caused or worsened by sustained high CPU utilization.
Buffer overflow attacks involve writing data beyond allocated memory boundaries to execute arbitrary code, which is a memory-management vulnerability unrelated to the CPU exhaustion scenario described.
Resource exhaustion occurs when a critical system resource (in this case, CPU) is fully consumed and not released, preventing other processes from executing normally; sustained 100% CPU utilization for 24 hours is a textbook example of resource exhaustion that can cascade into memory and I/O starvation as well.
Concept tested: Impact of sustained CPU resource exhaustion on availability
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/intelligence/understanding-malware
Topics
Community Discussion
No community discussion yet for this question.