Examkin

Question

Difficulty: MediumWeb Browser Security and Pop-Up/Redirect Troubleshooting

A desktop support technician is troubleshooting a workstation where the web browser continuously redirects to a suspicious search portal upon launch. The technician suspects that a rogue browser extension was installed alongside a recent software download. Place the following remediation steps in the correct sequence to resolve this browser security issue.

  1. 1Isolate the computer from the local network and terminate all running web browser processes.
  2. 2Access the browser extensions menu and remove all unrecognized or malicious add-ons.
  3. 3Restore the browser home page, new tab settings, and default search engine to corporate defaults.
  4. 4Clear the browser temporary files, cache, cookies, and site data.
  5. 5Execute a full anti-malware scan and verify hosts file integrity.

Answer

The correct order of steps is: 1) Isolate the computer from the local network and terminate all running web browser processes, 2) Access the browser extensions menu and remove all unrecognized or malicious add-ons, 3) Restore the browser home page, new tab settings, and default search engine to corporate defaults, 4) Clear the browser temporary files, cache, cookies, and site data, and 5) Execute a full anti-malware scan and verify hosts file integrity.
Proper remediation of browser hijacking requires isolating the system, eliminating the malicious extension, resetting altered browser configurations, purging cached redirect scripts, and conducting a full system scan to verify endpoint health.

Step-by-Step Solution

1
Isolate the system and end browser tasks
Network communication to malicious servers is halted and running scripts are closed.
Prevents further data exfiltration or additional payload downloads.
2
Remove unauthorized browser extensions
The core component enforcing the redirect is uninstalled.
Root cause of the browser hijacking must be eliminated before settings can be permanently restored.
3
Reset browser search engine and home page settings
Default startup pages and search defaults return to legitimate corporate URLs.
Ensures the browser no longer attempts to navigate to the hijacker's domain.
4
Clear cache, cookies, and browsing data
Stored malicious session cookies and redirection scripts are deleted.
Removes residual tracking data and prevents cached redirects from triggering.
5
Run full anti-malware scan and verify hosts file
System-level clean state is confirmed.
Verifies that no secondary malware infections or modified hosts file entries remain on the endpoint.

Key Concept

Browser Hijacker Remediation Sequence
Rate this question

Topics

Web Browser Security and Pop-Up/Redirect Troubleshooting

More questions from this topic