CompTIA Server+ (SK0-005)TroubleshootingMedium
A server administrator receives an alert that a server's CPU utilization is consistently at 95-100%, even during off-peak hours. The server hosts a critical database application. After checking running processes, the administrator identifies multiple instances of an unknown process consuming significant CPU resources. Which of the following is the MOST appropriate immediate action?
- ATerminate the unknown processes and investigate their origin.
- BRun a full antivirus scan on the server immediately.
- CIncrease the server's CPU allocation or add more CPU cores.
- DReboot the server to clear the CPU load.
Show answer & explanationAnswer & explanation
Correct answer: A. Terminate the unknown processes and investigate their origin.
Identifying unknown processes consuming high CPU indicates a potential compromise or a rogue application. Terminating these processes immediately stops the resource drain and allows for further investigation without necessarily taking the entire server offline, which a reboot would do.
Why the other options are wrong
- B. While an antivirus scan is important, terminating the rogue processes should be done first to free up resources and prevent further malicious activity.
- C. Increasing CPU allocation is a hardware solution and does not address the root cause of rogue processes.
- D. Rebooting might temporarily resolve the issue but won't address the root cause, and the processes might restart.
High CPU Utilization Troubleshooting
High CPU utilization indicates that the processor is overworked, potentially due to legitimate workloads, inefficient software, or malicious processes.
- Identify the processes consuming CPU resources.
- Check for unexpected or unknown processes.
- Malicious software (malware, cryptominers) can cause high CPU.
Memory trick: CPU's hot, processes plot, find the culprit, make it stop!