nerdexam
CompTIA

SY0-501 · Question #429

A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours. The main culprit of CPU utilization is the antivirus program. Which of the following issue could…

The correct answer is B. DoS attack E. Resource exhaustion. Sustained 100% CPU utilization by an antivirus process indicates a potential runaway or compromised process that, if unresolved, can cause resource exhaustion and effectively deny service to legitimate users and applications.

Submitted by andres_qro· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours. The main culprit of CPU utilization is the antivirus program. Which of the following issue could occur if left unresolved? (Select TWO)

Options

  • AMITM attack
  • BDoS attack
  • CDLL injection
  • DBuffer overflow
  • EResource exhaustion

How the community answered

(48 responses)
  • A
    6% (3)
  • B
    79% (38)
  • C
    10% (5)
  • D
    4% (2)

Why each option

Sustained 100% CPU utilization by an antivirus process indicates a potential runaway or compromised process that, if unresolved, can cause resource exhaustion and effectively deny service to legitimate users and applications.

AMITM attack

A Man-in-the-Middle (MITM) attack involves intercepting network communications between two parties, which is unrelated to high CPU utilization caused by an antivirus process.

BDoS attackCorrect

When CPU resources are completely consumed for an extended period, legitimate processes and services cannot obtain the processing time they need to function, effectively making the server unavailable to users - this constitutes a Denial of Service (DoS) condition, even if unintentional.

CDLL injection

DLL injection is a code injection technique where a malicious library is loaded into a running process, which is a separate attack vector not caused or worsened by sustained high CPU utilization.

DBuffer overflow

Buffer overflow attacks involve writing data beyond allocated memory boundaries to execute arbitrary code, which is a memory-management vulnerability unrelated to the CPU exhaustion scenario described.

EResource exhaustionCorrect

Resource exhaustion occurs when a critical system resource (in this case, CPU) is fully consumed and not released, preventing other processes from executing normally; sustained 100% CPU utilization for 24 hours is a textbook example of resource exhaustion that can cascade into memory and I/O starvation as well.

Concept tested: Impact of sustained CPU resource exhaustion on availability

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/intelligence/understanding-malware

Topics

#resource exhaustion#DoS#CPU utilization#antivirus

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice