220-1102 Question 80
Single answerPerformanceA user reports that their Windows 11 laptop has become very slow during normal office work. Applications take a long time to open, the fan runs constantly, and typing in documents is delayed. In Task Manager, CPU utilization stays between 95% and 100% even when no business applications are actively being used. On the Processes tab, you see that multiple browser tabs are open, but one process named "Antimalware Service Executable" is consistently using the most CPU. The system recently began a scheduled full malware scan. What is the BEST next step to improve performance while maintaining security?
- A
End the Antimalware Service Executable process in Task Manager to immediately free CPU resources
- B
Disable Microsoft Defender real-time protection permanently so scans no longer affect performance
- C
Verify the scan is legitimate and reschedule the full scan for off-hours while allowing it to complete or run later
- D
Increase the size of the page file because high CPU usage is usually caused by insufficient virtual memory
Show answer and explanation
Correct answer: C
Explanation
This question tests practical performance troubleshooting in Windows. CompTIA A+ Core 2 expects technicians to use tools such as Task Manager to identify whether a slowdown is caused by CPU, memory, disk, or startup/application issues. Here, the system slowdown is tied to sustained CPU usage from Antimalware Service Executable, which is associated with Microsoft Defender. A legitimate full scan can temporarily degrade performance, especially on lower-powered systems. Best practice is not to kill security processes or disable protection permanently, but to confirm the activity is expected and adjust scan timing through normal administrative settings so scans occur during off-hours. This aligns with Microsoft's guidance to manage Microsoft Defender scan scheduling and with general troubleshooting methodology: identify the bottleneck, verify whether the process is legitimate, and apply the least disruptive fix that preserves security.
- A. Incorrect.
This is incorrect. Although ending a high-CPU process may seem like a quick fix, terminating Antimalware Service Executable is not an appropriate long-term solution and may not be allowed or may restart automatically. More importantly, stopping an active security scan without evaluating why it is running reduces protection and does not address the root cause of the performance complaint.
- B. Incorrect.
This is incorrect. Permanently disabling Microsoft Defender real-time protection creates a security risk and is not considered best practice. While it could reduce some system overhead, it exposes the device to malware and is not an appropriate troubleshooting step for a business system unless directed by policy and replaced by another managed security solution.
- C. Correct.
This is correct. A full antimalware scan can legitimately consume significant CPU resources and cause temporary system slowdown. The best action is to confirm the process is a legitimate security task and then adjust the scan schedule so it runs during non-business hours. This improves user experience without weakening endpoint protection. This reflects standard performance troubleshooting: identify the resource-consuming process, determine whether it is expected, and optimize scheduling rather than disabling security controls.
- D. Incorrect.
This is incorrect. Page file adjustments are related primarily to memory pressure, not sustained CPU saturation from a specific active process. In this scenario, Task Manager already identifies the direct source of the performance issue as a security scan consuming CPU. Increasing virtual memory would not meaningfully address the immediate cause.