A macOS user reports that their web browser constantly redirects search queries to an unfamiliar landing page. Additionally, the user cannot change their home page settings because the browser indicates the settings are 'Managed by your organization,' despite the computer not being joined to a central domain. A technician identifies that a rogue browser extension was forcibly installed using elevated administrative policies. Which TWO of the following steps should the technician take to fully resolve this browser security issue? (Select TWO.)
- Remove the unauthorized policy preference files from the system directory to release administrative control over browser settings.Answer
- Uninstall the malicious browser extension and reset browser preferences to default.Answer
- CClear all browser temporary web files, cookies, and browsing history.
- DLaunch Credential Manager from the Control Panel to clear saved web authentication tokens.
Answer
To resolve the issue, the technician must remove the unauthorized policy preference files from the system directory to release administrative control over browser settings, and then uninstall the malicious browser extension and reset browser preferences to default.
Browser hijackers sometimes deploy administrative policy template files into system directories (such as Chrome policy directories or Registry policies) to force-install extensions and lock down browser settings. Removing these unauthorized policy preference files unlocks browser controls, allowing the technician to successfully remove the malicious extension and reset the browser configuration to default.
Step-by-Step Solution
Key Concept
Remediating browser hijackers enforced through operating system policies and malicious extensions