220-1102 Browser and Application Security Practice Test 2 — 15 Questions

Question 1

A technician is configuring a kiosk computer that will be used by the public to access a specific website. The technician wants to prevent users from navigating to other sites or changing browser settings. Which browser feature should be enabled?

Accepted Answer

Enable kiosk mode.. Kiosk mode locks the browser to a specific site or set of sites, hides the address bar, and disables settings access. This is ideal for public terminals. Other options like private browsing or parental controls do not provide the same level of restriction.

Answer

Enable private browsing mode.

Answer

Enable parental controls.

Answer

Disable the address bar via group policy.

Question 2

A technician is tasked with securing a legacy web application that only supports HTTP, not HTTPS. The application is critical for internal operations but must be accessible remotely. What is the best way to secure the traffic without modifying the application?

Accepted Answer

Use a VPN to access the internal network.. Using a VPN encrypts all traffic between the remote user and the internal network, including the unencrypted HTTP traffic from the legacy app. This provides a secure tunnel without requiring changes to the application itself. SSL/TLS termination could also work but requires a reverse proxy setup.

Answer

Install a self-signed SSL certificate on the server.

Answer

Enable HTTP Strict Transport Security (HSTS) on the server.

Answer

Configure the browser to use a proxy server.

Question 3

During a software deployment, a technician needs to ensure that a new web application can run in a sandboxed environment to prevent it from accessing other system resources. Which browser feature should be configured?

Accepted Answer

Enable browser sandboxing.. Modern browsers use sandboxing to isolate web applications from the operating system and other tabs. This security feature prevents malicious code from affecting the system, and it is often enabled by default but can be configured via browser settings or group policies.

Answer

Enable pop-up blocker.

Answer

Enable private browsing mode.

Answer

Disable JavaScript.

Question 4

A user reports that their browser frequently redirects to a search page they never set, and they see unfamiliar toolbars. After running a malware scan that found nothing, what should the technician do next to resolve the issue?

Accepted Answer

Reset the browser settings to default.. This scenario describes a browser hijacker, which is often not detected by standard antivirus scans. Resetting the browser removes unwanted extensions, toolbars, and reverts the homepage and search engine settings, solving the problem without reinstalling the OS or replacing hardware.

Answer

Replace the network cable.

Answer

Update the network adapter driver.

Answer

Reinstall the operating system.

Question 5

A small business owner wants to ensure that employees cannot install browser extensions or add-ons without administrator approval. Which method should the technician use to enforce this restriction across all company computers?

Accepted Answer

Use Group Policy to disable extension installation.. Group Policy in Windows allows administrators to centrally manage browser settings, including preventing extension installations. This is the standard enterprise approach for enforcing security policies across multiple computers.

Answer

Configure each browser's settings manually on every computer.

Answer

Install a third-party firewall to block extension downloads.

Answer

Set the browser to private browsing mode.

Question 6

A technician is troubleshooting a computer that has been infected with ransomware. The ransomware encrypted files and left a note demanding payment. After removing the malware, what is the most important step to prevent future infections?

Accepted Answer

Implement a strict backup policy and educate users on phishing. Ransomware often enters via email attachments or malicious downloads. User education on safe browsing and email practices is critical to prevention. This tests understanding of the human factor in security and the limitations of technical controls alone.

Answer

Reinstall the operating system

Answer

Update all software to the latest versions

Answer

Disable all browser plugins

Question 7

A company uses a web application for internal communication. A security audit reveals that the application is vulnerable to cross-site scripting (XSS). Which browser security feature can help mitigate the risk for users while the application is being patched?

Accepted Answer

Implement Content Security Policy (CSP) headers on the web server. Content Security Policy (CSP) is a browser security mechanism that can block malicious scripts, reducing XSS impact. This tests advanced knowledge of browser security features. Other options are either unrelated or less effective against XSS.

Answer

Enable pop-up blocker

Answer

Configure the browser to use a proxy server

Answer

Disable JavaScript in the browser

Question 8

A user calls the help desk saying that every time they click a link in an email, their browser opens a page that says 'Your computer is infected! Call this number.' They are unable to close the page normally. What type of attack is this, and what is the first step you should take?

Accepted Answer

Tech support scam; force close the browser using Task Manager, then run a security scan. This is a tech support scam using a social engineering tactic to frighten the user. The correct first step is to close the browser forcefully using Task Manager, then run a security scan. This tests the ability to distinguish between different attack types and appropriate response procedures.

Answer

Phishing attack; immediately change the user's email password

Answer

Browser hijacker; run a full antivirus scan immediately

Answer

Drive-by download; disconnect the computer from the network

Question 9

A user reports that their browser frequently redirects to a different search engine, and a new toolbar has appeared. After checking the browser settings, you find the homepage has been changed and there are unknown extensions enabled. What is the most likely cause of this issue?

Accepted Answer

A browser hijacker installed via a malicious extension. This scenario describes classic symptoms of a browser hijacker, a type of malware that modifies browser settings without user consent. The correct answer is to remove the malicious extensions and reset the browser settings. This reinforces the importance of managing browser extensions and understanding common malware behaviors.

Answer

A corrupted browser cache

Answer

An outdated browser version

Answer

A misconfigured proxy server

Question 10

A company policy requires that all web traffic be filtered to block known malicious sites. You need to implement this on the network without installing software on each client. What should you configure?

Accepted Answer

Configure a DNS filtering service on the router or DNS server. DNS filtering is a network-level solution that blocks access to malicious domains without client software. This tests knowledge of different security implementations. Other options are either client-side or not effective for blocking specific sites.

Answer

Enable Windows Defender Firewall on each workstation

Answer

Install a browser extension on all computers

Answer

Set the browser security level to high

Question 11

A small business owner wants to ensure that employees cannot install unauthorized browser extensions on company-managed Windows 10 computers. Which method should you use to enforce this restriction?

Accepted Answer

Configure Group Policy to block extension installation. Group Policy is the correct tool for centrally managing browser settings and restricting extension installations in a Windows domain environment. This question tests knowledge of enterprise-level browser security controls. The other options are either user-level or not effective for enforcement.

Answer

Enable private browsing mode in each browser

Answer

Set the browser homepage to a company-approved site

Answer

Install an ad-blocker extension

Question 12

During a security audit, you discover that a user's browser has multiple pop-up windows appearing, even when no websites are open. The user denies installing any software. Which tool should you use to identify and remove the underlying cause?

Accepted Answer

Run a full scan with Windows Defender or another anti-malware tool. Pop-ups appearing without a browser suggest adware or a potentially unwanted program (PUP) running as a background process. Using Windows Defender or an anti-malware scanner is the correct approach. This tests understanding of adware behavior and removal tools.

Answer

Reset the browser settings to default

Answer

Disable JavaScript in the browser

Answer

Clear the browser cache and cookies

Question 13

A user's browser is infected with a malicious extension that steals credentials. The extension was installed via a drive-by download from a compromised website. After removing the extension, what additional step should you take to ensure the credentials are not compromised?

Accepted Answer

Change all passwords that were entered while the extension was active. If a credential-stealing extension was active, passwords may have been captured. The correct step is to force password changes for all accounts used in that browser. This tests understanding of post-infection remediation and the scope of data theft.

Answer

Clear the browser cache and cookies

Answer

Run a full antivirus scan

Answer

Reset the browser settings to default

Question 14

A user reports that their browser displays a warning saying 'Your connection is not private' when visiting a frequently used banking site. After checking, you see the certificate error is for a different domain. What is the most likely cause?

Accepted Answer

A malicious proxy or DNS hijacking is redirecting traffic to a fake site. A certificate error for a different domain indicates a possible man-in-the-middle attack or DNS hijacking. The correct action is to investigate the network and not proceed to the site. This tests understanding of SSL/TLS certificate warnings and their security implications.

Answer

The user's system date and time are incorrect

Answer

The website's SSL certificate has expired

Answer

The browser needs to be updated to the latest version

Question 15

You are configuring a new Windows 10 computer for a user who frequently downloads files from the internet. To reduce the risk of malware, you want to block the execution of downloaded files from the internet until they are scanned by antivirus. Which Windows feature should you enable?

Accepted Answer

Windows Defender Application Guard. Windows Defender Application Guard is designed to isolate untrusted downloads and prevent execution until scanned. This tests knowledge of Windows security features for browser and file safety. The other options are either not relevant or less effective.

Answer

Windows Defender Firewall

Answer

BitLocker Drive Encryption

Answer

User Account Control (UAC)