Examkin

Question

Difficulty: HardWeb Browser Security and Pop-Up/Redirect Troubleshooting

An enterprise employee reports receiving continuous, realistic Windows system pop-up alerts warning of severe virus infections and prompting them to call an unauthorized helpline. The technician observes that these pop-ups originate from the desktop Notification Center even when no web browser windows are actively open. A detailed review of running processes, startup items, and scheduled tasks reveals no malicious executables. Which of the following troubleshooting actions should the technician perform to permanently stop these pop-up alerts?

  1. Revoke notification permissions and unregister background service workers for untrusted domains in the browser privacy settings.Answer
  2. B
    Clear temporary web caching files and browsing cookies while keeping saved site configuration profiles intact.
  3. C
    Initiate an operating system rollback using a System Restore point to eliminate persistent rootkit infections.
  4. D
    Open Internet Options from the Windows Control Panel and reset WinSOCK protocol catalog bindings.

Answer

Revoke notification permissions and unregister background service workers for untrusted domains in the browser privacy settings.
The correct action is to revoke notification permissions and unregister background service workers within the browser settings. Modern browsers support Web Push APIs, allowing malicious websites to trick users into accepting notifications that present as native system pop-ups even when the browser is closed. Removing the site permissions stops the pop-ups immediately.

Step-by-Step Solution

1
Analyze the symptom indicators and delivery vector.
Identified that notifications appear in the OS Notification Center while no malicious processes exist in Task Manager, pointing to browser Web Push Notifications and Service Workers.
HTML5 Web Push APIs and Service Workers allow approved websites to push native OS notifications even when the browser interface is not visible.
2
Access the browser's Site Settings / Content Permissions controls.
Located the list of allowed domains under Notification Permissions and active Service Workers.
Users often inadvertently click 'Allow' on deceptive website prompts asking for notification permissions.
3
Remove unauthorized domains and reset permission defaults.
Rogue domains are blocked from sending notification payloads and their service workers are deleted.
Removing permission revokes the push subscription token, permanently preventing further desktop pop-up alerts.

Key Concept

Web Push Notification & Service Worker Permission Management
Rate this question

Topics

Web Browser Security and Pop-Up/Redirect Troubleshooting

More questions from this topic