An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed: Which of the following tuning recommendations should the…

The correct answer is C. Configure an Access-Control-Allow-Origin header to authorized domains. Cross-Domain Misconfiguration suggests that there might be an issue related to how the web application handles cross-origin requests. Configuring an Access-Control-Allow-Origin header allows the server to specify which domains are permitted to access its resources, thereby…

Submitted by fatima_kr· Mar 6, 2026Vulnerability Management

Question

An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed:

Which of the following tuning recommendations should the security analyst share?

Exhibit

Options

ASet an HttpOnly flag to force communication by HTTPS
BBlock requests without an X-Frame-Options header
CConfigure an Access-Control-Allow-Origin header to authorized domains
DDisable the cross-origin resource sharing header

How the community answered

(22 responses)

A
5% (1)
B
5% (1)
C
82% (18)
D
9% (2)

Explanation

Cross-Domain Misconfiguration suggests that there might be an issue related to how the web application handles cross-origin requests. Configuring an Access-Control-Allow-Origin header allows the server to specify which domains are permitted to access its resources, thereby controlling access to resources from different By configuring the Access-Control-Allow-Origin header to authorize specific domains, the organization can mitigate the risk of unauthorized cross-origin access and prevent potential security vulnerabilities associated with cross-domain interactions..

Topics

#Web application security#CORS#Security headers#Vulnerability remediation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice