Examkin

Question

Difficulty: MediumWeb Browser Security and Pop-Up/Redirect Troubleshooting

A corporate workstation running Windows 11 experiences malicious web search redirects and untrusted SSL certificate warnings across all installed web browsers (Google Chrome, Microsoft Edge, and Mozilla Firefox). A technician notices that all HTTP and HTTPS traffic is being routed through an unfamiliar local IP address on port 8080 regardless of which browser is opened. Which of the following actions should the technician perform FIRST to stop the system-wide traffic redirection?

  1. A
    Disable and remove unknown browser extensions from each individual browser.
  2. Inspect and reset the system proxy server settings in Windows Network & Internet settings.Answer
  3. C
    Open Credential Manager in Control Panel and delete stored web credentials.
  4. D
    Reconfigure the default gateway IP address in the local router interface.

Answer

Inspect and reset the system proxy server settings in Windows Network & Internet settings.
The correct answer is to inspect and reset the system proxy server settings in Windows Network & Internet settings. Windows utilizes central WinINet proxy settings that apply across multiple browsers (including Chrome, Edge, and Firefox). When malware configures a unauthorized manual proxy or automatic proxy script, all outbound browser connections are redirected through a rogue intermediary server, producing certificate errors and search redirects across all browsers simultaneously.

Step-by-Step Solution

1
Analyze the symptoms
The issue affects all installed browsers on the OS simultaneously and routes traffic through a specific local IP/port combination, pointing to a central system-level setting rather than individual browser add-ons.
Windows applications (including Chrome, Edge, and Firefox by default) rely on the operating system's system-wide proxy configurations (WinINet settings).
2
Identify the remediation entry point
Navigate to Settings > Network & Internet > Proxy (or Internet Options > Connections > LAN Settings).
This area controls whether automatic proxy setup scripts (PAC files) or manual proxy servers are enabled globally for client network applications.
3
Disable unauthorized proxy parameters
System traffic immediately resumes direct connection paths to standard network gateways, clearing certificate warnings caused by rogue proxy interception.
Removing the proxy server entry breaks the redirection vector used by the adware/malware.

Key Concept

System-Wide Web Proxy Configuration and Browser Security Remediation
Rate this question

Topics

Web Browser Security and Pop-Up/Redirect Troubleshooting

More questions from this topic