220-1102 Question 573
Single answerBrowser feature managementA help desk technician is troubleshooting a user's issue in a managed Windows environment. The user reports that a company web application loads, but the sign-in page never completes after they enter their password. The application vendor states the site requires pop-ups for the authentication window and third-party cookies for the identity provider. The user says the problem occurs only in their browser and not in a coworker's browser on the same network. Which action should the technician take FIRST to resolve the issue while following the principle of least privilege?
- A
Add the site to the browser's allowed list for pop-ups and third-party cookies
- B
Clear the entire browser cache, history, and saved passwords
- C
Reset the browser to default settings
- D
Disable all browser security features for the session
Show answer and explanation
Correct answer: A
Explanation
This question tests practical browser feature management in a support scenario. When a web application requires specific browser capabilities such as pop-ups or third-party cookies, the best first step is to configure those features for the relevant site only. This aligns with least privilege and common enterprise support practices. Broad actions such as clearing all browser data, resetting the browser, or disabling security settings may be useful in other troubleshooting situations, but they are not the best first response when the root cause is already strongly indicated. Browser vendors such as Microsoft, Google, and Mozilla document site-specific controls for pop-ups, cookies, and permissions, and enterprise support best practices favor targeted exceptions over global security reductions.
- A. Correct.
Correct. The scenario identifies two specific browser features that the application requires: pop-ups and third-party cookies. The least-privilege approach is to allow only the needed features for the affected site rather than broadly reducing browser security. Modern browsers support site-specific permissions and exceptions for pop-ups, and many also allow cookie exceptions or adjusted privacy settings for particular sites.
- B. Incorrect.
Incorrect. Clearing cache and history can help with corrupted web content, and clearing saved credentials may help with sign-in issues, but the vendor has already identified feature requirements that directly explain the behavior. This option is broader than necessary and may disrupt the user's saved data without addressing the root cause.
- C. Incorrect.
Incorrect. Resetting the browser may remove problematic settings or extensions, but it is a more disruptive step that affects all browsing data and customizations. Since the issue is tied to known required browser features for a single application, a targeted configuration change should be attempted first.
- D. Incorrect.
Incorrect. Disabling all browser security features is not appropriate and violates least-privilege and security best practices. The issue involves enabling only specific browser features required by the application, not turning off protections globally.