An enterprise administrator notices that a workstation's web browser consistently routes requests for common financial portals to an unverified third-party IP address, causing invalid SSL certificate warnings. System scans confirm no malicious browser extensions or add-ons are installed. Which of the following configuration files or settings should the technician inspect FIRST to resolve this redirection issue?
- The local hosts file located in %systemroot%\system32\drivers\etc to check for unauthorized static IP mappingsCevap
- BThe browser cache, cookies, and browsing history to clear stored web redirection tokens
- CThe Internet Options applet in Control Panel to reset all security zones back to default settings
- DThe threat intelligence reporting database in Windows Security to reclassify the destination IP as a phishing vector
Cevap
The local hosts file located in %systemroot%\system32\drivers\etc to check for unauthorized static IP mappings
Inspecting the local hosts file (%systemroot%\system32\drivers\etc\hosts) is the correct first action. When web browsers redirect traffic to IP addresses that trigger certificate errors without any rogue extensions present, the local hosts file has likely been altered by malware to override standard DNS lookups for specific URLs.
Adım Adım Çözüm
Anahtar Kavram
Browser Security and Hosts File Redirection Remediation