CCNA Browser and Application Security Questions

Ransomware often enters via email attachments or malicious downloads. User education on safe browsing and email practices is critical to prevention. This tests understanding of the human factor in security and the limitations of technical controls alone.

Content Security Policy (CSP) is a browser security mechanism that can block malicious scripts, reducing XSS impact. This tests advanced knowledge of browser security features. Other options are either unrelated or less effective against XSS.

Windows 10's S mode restricts app installations to the Microsoft Store, which also affects browser extensions. Disabling S mode or using a different browser that supports the extension is the solution.

This is a tech support scam using a social engineering tactic to frighten the user. The correct first step is to close the browser forcefully using Task Manager, then run a security scan. This tests the ability to distinguish between different attack types and appropriate response procedures.

This scenario describes classic symptoms of a browser hijacker, a type of malware that modifies browser settings without user consent. The correct answer is to remove the malicious extensions and reset the browser settings. This reinforces the importance of managing browser extensions and understanding common malware behaviors.

A DNS-based content filter (like OpenDNS or a corporate DNS server) can block malicious domains without requiring client software. This is a scalable solution for network-wide filtering.

PUPs like browser hijackers often come bundled with free software. Using a dedicated PUP removal tool or adware cleaner is more effective than a standard antivirus scan. After removal, resetting the browser ensures all changes are reverted.

On an open Wi-Fi network, an attacker can perform a man-in-the-middle attack to intercept unencrypted HTTP traffic. Without HTTPS, the login credentials are sent in plaintext and can be captured easily. This is a common risk on public Wi-Fi.

DNS filtering is a network-level solution that blocks access to malicious domains without client software. This tests knowledge of different security implementations. Other options are either client-side or not effective for blocking specific sites.

This is a phishing attack, where the attacker creates a fake login page to steal credentials. Users should be trained to verify URLs and never enter credentials from email links.

Group Policy is the correct tool for centrally managing browser settings and restricting extension installations in a Windows domain environment. This question tests knowledge of enterprise-level browser security controls. The other options are either user-level or not effective for enforcement.

SSL certificates are time-sensitive; if the system date is far in the past or future, the browser cannot verify the certificate's validity. Synchronizing the system clock with a time server resolves this issue without needing to install a new certificate.

Pop-ups appearing without a browser suggest adware or a potentially unwanted program (PUP) running as a background process. Using Windows Defender or an anti-malware scanner is the correct approach. This tests understanding of adware behavior and removal tools.

This is a social engineering attack where the user was tricked into installing malicious software. No technical vulnerability was exploited; the user's trust was manipulated.

This scenario describes classic symptoms of a browser hijacker, a type of malware that modifies browser settings without permission. The correct action is to scan and remove the malicious software using an anti-malware tool, as simply resetting settings or clearing caches may not remove the underlying infection.

Outdated plugins like Flash Player are common attack vectors because they contain known vulnerabilities that malware can exploit. Keeping software updated is a fundamental browser security practice.

The absence of HTTPS and the lookalike page strongly indicate a phishing attempt. Phishing sites often mimic legitimate sites to steal credentials, and the lack of encryption is a red flag. Users should never enter credentials on non-HTTPS pages, especially from email links.

Configuring the browser to prompt for download location and then blocking downloads via Group Policy or registry is effective. The simplest approach is to disable downloads entirely in the browser settings or use a kiosk mode that restricts functionality.

Group Policy is the correct tool in Windows environments to enforce restrictions on browser extensions across multiple computers. This prevents users from adding potentially malicious or unapproved extensions, enhancing security.

This warning typically indicates a certificate issue, such as an expired or invalid SSL certificate on the banking site itself. It is not a problem with the user's browser or computer.

Kiosk mode locks the browser to a specific site or set of sites, hides the address bar, and disables settings access. This is ideal for public terminals. Other options like private browsing or parental controls do not provide the same level of restriction.

Using a VPN encrypts all traffic between the remote user and the internal network, including the unencrypted HTTP traffic from the legacy app. This provides a secure tunnel without requiring changes to the application itself. SSL/TLS termination could also work but requires a reverse proxy setup.

Modern browsers use sandboxing to isolate web applications from the operating system and other tabs. This security feature prevents malicious code from affecting the system, and it is often enabled by default but can be configured via browser settings or group policies.

If a credential-stealing extension was active, passwords may have been captured. The correct step is to force password changes for all accounts used in that browser. This tests understanding of post-infection remediation and the scope of data theft.

This scenario describes a browser hijacker, which is often not detected by standard antivirus scans. Resetting the browser removes unwanted extensions, toolbars, and reverts the homepage and search engine settings, solving the problem without reinstalling the OS or replacing hardware.

Group Policy in Windows allows administrators to centrally manage browser settings, including preventing extension installations. This is the standard enterprise approach for enforcing security policies across multiple computers.

A certificate error for a different domain indicates a possible man-in-the-middle attack or DNS hijacking. The correct action is to investigate the network and not proceed to the site. This tests understanding of SSL/TLS certificate warnings and their security implications.

Some legitimate software installers include options to change browser settings, and users may inadvertently agree. This is a common cause of homepage changes that are not malware-related.

Windows Defender Application Guard is designed to isolate untrusted downloads and prevent execution until scanned. This tests knowledge of Windows security features for browser and file safety. The other options are either not relevant or less effective.