ISC2 CISSP Practice Question

The correct answer is to reschedule anti-malware scans to occur during off-hours. This approach maintains the full protective capabilities of the anti-malware solution while minimizing the performance impact on business operations. Anti-malware scans are resource-intensive operations that can consume significant CPU and I/O resources. By scheduling these scans during periods of low system activity (typically overnight or on weekends), the organization can ensure thorough scanning without disrupting critical business functions.

Excluding critical business applications from scanning would introduce security gaps, as these may be high-value targets for malware. Reducing the scan depth would decrease protection effectiveness. While upgrading hardware might eventually be necessary if performance issues persist, it's more efficient to first try optimizing the scanning schedule, which is a standard best practice for anti-malware deployment.