MENU
Which HTTP header is used by the CORS (Cross-origin resource sharing) standard to control access to resources on a server?
Suggested Answer: C
Get Premium CAP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
CA
Carmen
10 months ago
None of the above seems unlikely, but who knows?
OC
Ocie
11 months ago
Wait, is it really that one? I thought there were more options.
BR
Brent
11 months ago
Yeah, Access-Control-Allow-Headers is the right one.
MI
Mirta
11 months ago
I thought it was Access-Control-Request-Method.
CH
Chu
11 months ago
It's definitely Access-Control-Allow-Headers!
FE
Felix
12 months ago
I remember something about CORS headers, but I can't recall if any of these options are the main one used for access control.
FE
Felicitas
12 months ago
I'm not entirely sure, but I think "Access-Control-Request-Method" is more about what methods are allowed, not controlling access directly.
JO
Johnna
12 months ago
I feel like I saw a question about CORS headers in practice tests, and "Access-Control-Allow-Headers" sounds familiar.
LI
Lizbeth
1 year ago
I think the header we're looking for is related to permissions, but I can't remember if it's "Allow" or "Request."
DE
Dean
1 year ago
I remember learning about CORS in my web development class, so I think I've got a good handle on this. The correct answer is definitely C, Access-Control-Allow-Headers. That's the header used to control which headers are allowed in cross-origin requests.
LO
Louis
1 year ago
This seems like a tricky one. I'm not super familiar with the CORS standard, so I'm not totally confident in my answer. I'll just take a guess and go with B, Access-Control-Request-Headers.
FL
Florinda
1 year ago
Okay, I think I've got this. The Access-Control-Request-Headers header is used to indicate which headers will be sent in the actual request, while the Access-Control-Allow-Headers header is used by the server to specify which headers are allowed. So the correct answer must be C.
KI
Kiley
1 year ago
Hmm, I'm a bit confused on this one. I know CORS has to do with controlling access to resources, but I'm not totally sure which specific header is used for that. I'll have to think about it a bit more.
JE
Jenelle
1 year ago
I'm pretty sure the answer is Access-Control-Allow-Headers, since that's the header used to specify which headers are allowed to be sent in a cross-origin request.
PA
Pa
1 year ago
I've seen the Access-Control-Allow-Headers header used in CORS before, so I'm going to go with C on this one.
GE
German
1 year ago
Okay, let me think this through. The question is asking about a CORS header, so it's likely one of the Access-Control-* headers. I'm going to go with B, Access-Control-Request-Headers.
AR
Armanda
1 year ago
Hmm, I'm a bit confused on this one. I know CORS has to do with controlling access to resources, but I'm not sure which specific header is used for that.
MY
My
1 year ago
I'm pretty sure this has to do with the Access-Control-Allow-Headers header, which is used to specify which headers are allowed to be sent in a cross-origin request.
DE
Deandrea
1 year ago
I've got a strategy for this - I'll focus on understanding the key differences between what a code audit can and can't determine.
TA
Tammy
1 year ago
Whoa, this is a tricky one. I'll need to really focus and make sure I understand the differences between the options before selecting the answer.
BE
Bernardo
1 year ago
This looks like a security-related question, so I'll need to think about the different ways Citrix can protect against PII disclosure. I'm not totally sure, but I'll give it my best shot.
BI
Billi
1 year ago
I'm a bit confused by the options. I'm not sure if the firewall zone, firmware, or NTP are directly related to the synchronization errors. I'll have to think this through carefully.
WI
Wilda
1 year ago
My money's on A) Access-Control-Request-Method. Who needs sleep when you have caffeine and CORS trivia, am I right?
TR
Trinidad
1 year ago
Actually, it's D) None of the above.
LI
Linwood
1 year ago
I agree with you, A) Access-Control-Request-Method is the correct answer.
RE
Reita
1 year ago
I'm pretty sure it's C) Access-Control-Allow-Headers.
NO
Norah
1 year ago
I think it's B) Access-Control-Request-Headers.
AN
Annice
1 year ago
B) Access-Control-Request-Headers. Wait, is that right? I'm just guessing at this point.
DE
Deeanna
1 year ago
C) Access-Control-Allow-Headers
IR
Iraida
1 year ago
B) Access-Control-Request-Headers
EL
Elouise
1 year ago
A) Access-Control-Request-Method
DA
Dalene
1 year ago
C) Access-Control-Allow-Headers. I can't believe I remembered that from the training materials!
LI
Lisha
1 year ago
C) Access-Control-Allow-Headers
LY
Lynsey
1 year ago
B) Access-Control-Request-Headers
FL
Fletcher
1 year ago
A) Access-Control-Request-Method
BR
Brandee
1 year ago
I'm going with D. None of the above. That's too easy, there's gotta be a catch!
JU
Judy
1 year ago
User4: I'm going with D. None of the above. That's too easy, there's gotta be a catch!
KI
King
1 year ago
User3: I agree with User1, A) Access-Control-Request-Method sounds right
LE
Leontine
1 year ago
User2: I'm not sure, I'll go with B) Access-Control-Request-Headers
AM
Amber
1 year ago
User1: I think it's A) Access-Control-Request-Method
FR
Frank
1 year ago
Access-Control-Allow-Headers, of course! That's the header that defines which headers are allowed in the actual request.
ME
Mertie
2 years ago
Hmm, I see your point. Let's discuss it further.
AN
Anabel
2 years ago
I disagree, I believe the correct answer is B) Access-Control-Request-Headers.
ME
Mertie
2 years ago
I think the answer is A) Access-Control-Request-Method.