QuestionQ21

Manage Chrome browser security

An organization has recently seen an increase in account takeovers and suspicious activity. During its investigation, a security team finds that employees are being compromised by infostealer malware designed specifically to target Chrome browser cookies. The malware is distributed through phishing emails and compromised websites, and can steal session cookies, sign-in credentials, and other sensitive data stored in the browser.

Which measure can an administrator use through Chrome Enterprise Core to reduce the risks from cookie theft?

  • A Block the use of third party cookies
  • B Require Enhanced Safe Browsing and enable Application Bound Encryption
  • C Invalidate user’s sign-in cookies and token by resetting the sign-in cookies from the Google Admin console
  • D Disallow Chrome Sync and Require Incognito mode
Explanation

Application Bound Encryption binds encryption keys used for Chrome’s locally stored data to the Chrome browser on Windows, reducing the ability of unknown or hostile applications to retrieve the keys and decrypt protected browser data. Enhanced Safe Browsing checks URLs against updated unsafe-resource lists, helping block phishing and sites that host malware.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!