An IT security specialist is analyzing a corporate workstation where web requests across all installed browsers (Google Chrome, Microsoft Edge, and Mozilla Firefox) are consistently redirected to an unauthorized external portal. Command-line `nslookup` queries resolve domain names to correct IP addresses, but browser network traffic is being forcibly routed through a rogue local proxy address. Additionally, an unwanted browser toolbar automatically reinstalling itself upon system reboot is traced to a compromised group policy registry key. Which of the following remediation actions should the specialist take to resolve these browser security issues? (Select TWO.)
- Inspect and remove unauthorized proxy server configurations within the operating system network settings.Answer
- Delete unauthorized browser policy registry keys and extension force-install policies from the local machine management hives.Answer
- CClear the browser cache, cookies, and temporary internet files from each affected web browser.
- DUse the Indexing Options applet in Control Panel to rebuild the system search index database.
Answer
The specialist should remove unauthorized OS network proxy configurations and delete malicious browser policy registry keys to stop proxy redirection and persistent extension re-installation.
The correct remediation actions require addressing both the network redirection vector and the persistence mechanism. System proxy settings intercept and route all browser traffic to rogue servers even when local DNS resolution is intact. Removing these unauthorized proxy settings restores clean traffic flow. Additionally, rogue browser extensions managed via Windows Registry policies (such as policy forced-install lists) will continuously reinstall toolbars until the malicious policy keys are deleted.
Step-by-Step Solution
Key Concept
Browser Redirect and Remediation Techniques