CompTIA CySA+ CS0-003 Practice Question

Evaluating the history of executed processes and comparing it with established baselines of normal operation is fundamental in determining if unexpected or malicious processes are responsible for the elevated resource usage. It helps to identify unusual activities, such as an ongoing attack or unauthorized applications, which might not be detected by traditional antivirus scans. Additionally, updating antivirus software, while a standard security procedure, would not necessarily provide immediate insight into the recent surge in resource usage. Modifying system resource allocations may alleviate the symptoms but will not address the root cause, and inspecting for physical breaches assumes that the event has a physical component, which may not be the case for increased system resource utilization.