220-1102 Question 412
Single answerCryptominerA help desk technician is troubleshooting a Windows 11 desktop that has become extremely slow over the past two days. Users report that the system fan runs loudly even when only a web browser is open. In Task Manager, the technician sees CPU usage pinned near 95%, but no approved business application should be using that much processing power. Which of the following is the MOST likely explanation?
- A
A cryptominer malware process is consuming system resources to generate cryptocurrency
- B
The workstation is experiencing a failed Windows activation, which causes the CPU to throttle at high utilization
- C
The installed antivirus is performing a full disk encryption job in the background
- D
A faulty monitor driver is causing the CPU to overheat during normal desktop use
Show answer and explanation
Correct answer: A
Explanation
This scenario matches a common indicator of cryptominer malware: abnormally high CPU utilization with heat, fan noise, and reduced performance while the user is doing very little. On the CompTIA A+ Core 2 exam, candidates should recognize cryptomalware/cryptominers as a form of malware that abuses local resources for unauthorized cryptocurrency mining. Standard security best practices include isolating the affected system, running updated anti-malware scans, investigating suspicious processes, removing persistence mechanisms, applying patches, and educating users about malicious downloads and browser-based threats. These actions align with general endpoint security guidance from Microsoft security documentation and common enterprise malware-remediation procedures.
- A. Correct.
Correct. Cryptominer malware commonly runs in the background and uses large amounts of CPU or GPU resources to mine cryptocurrency for an attacker. In real-world support scenarios, technicians often notice symptoms such as consistently high processor usage, excessive heat, loud fans, poor performance, and unexplained slowdowns even when the user is performing light tasks.
- B. Incorrect.
Incorrect. Windows activation issues can limit personalization features or generate warning messages, but they do not normally cause sustained CPU usage near 95%. This option is a plausible distraction because activation problems can affect user experience, but they are not a typical cause of heavy resource consumption.
- C. Incorrect.
Incorrect. Antivirus products may perform scheduled scans, which can temporarily increase CPU or disk activity, but 'full disk encryption job' is not a normal antivirus background task in this context. Encryption activity would also generally be associated with a security or management tool and would be expected, documented, and temporary rather than suspicious unexplained behavior.
- D. Incorrect.
Incorrect. A faulty monitor driver would not typically drive CPU usage to extreme levels during basic desktop activity. Display driver problems are more likely to cause flickering, poor resolution, crashes, or graphical instability rather than the classic symptoms of a cryptominer, such as sustained processing load and overheating.