CompTIA CySA+ CS0-003 Practice Question

Checking ongoing processes first is a key step to identifying potentially malicious activity, such as suspicious processes that may have caused the high processor usage. Monitoring for known malicious software (malware) or unauthorized applications can provide the necessary clues to determine the root cause. Sending memory dump files to an analysis tool is more appropriate for memory-related issues, and monitoring incoming/outgoing network traffic though useful, might not immediately highlight the cause of the processor spike.