An IT analyst is investigating a compromised Windows 11 workstation. The user reports that persistent pop-up advertisements appear in the operating system notification center even after closing the web browser. Additionally, attempts to reach internal company web applications are automatically redirected to an external IP address. A full antimalware scan reports zero active malware threats. Which TWO of the following remediation steps should the analyst take to resolve these issues? (Select TWO.)
- Revoke notification permissions for unrecognized domains and unregister associated background service workers in browser settingsAnswer
- Inspect and reset manual proxy server configurations established within system network settingsAnswer
- CDelete temporary internet cache files and clear browser browsing history
- DAccess Credential Manager in Control Panel to clear web credentials and restore default Windows accounts
Answer
The technician must revoke notification permissions and unregister background service workers in the browser settings, and inspect and reset manual proxy server configurations in system network settings.
The combination of revoking site notification permissions (which unregisters background push notification workers) and clearing unauthorized system proxy settings directly addresses both root causes: background pop-ups in the OS notification center and traffic redirection to rogue IP addresses.
Step-by-Step Solution
Key Concept
Browser notification permissions, background service workers, and proxy redirection troubleshooting