When does the On-Demand scan take CPU & IO samples?

• A. After the first minute
• B. During the last 30 seconds
• C. During the first 30 seconds
• D. Throughout the scan

Answer: (C)

The On-Demand scan is designed to capture its resource impact in a short, early window—specifically during the first 30 seconds after the scan begins. This early sampling catches the initial workload as files are opened, signatures loaded, and various scan tasks kick off, which is when the CPU and IO demand is typically highest. Sampling this early provides a quick, representative view of the scan’s footprint without adding ongoing measurement overhead that could slow the scan or skew data. Other options would either miss the initial peak or impose extra overhead by sampling throughout the entire scan.