Question

You have developed a Web-based application that makes calls to backend API. Which of the following headers are required by Web browsers to be set up in each API method which has CORS enabled? (Select TWO)

A. Access-Control-Allow-Headers

B. Access-Control-Allow-CORS

C. Access-Control-Expose-Headers

D. Access-Control-Expose-Origin

E. Access-Control-Allow-Origin.

Answer 1

Correct Answer - A, E.

To support CORS, API resource needs to implement an OPTIONS method to respond to the OPTIONS preflight request with the following headers.

Access-Control-Allow-Headers.

Access-Control-Allow-Origin.

Access-Control-Allow-Methods.

Option B, C & Dare incorrect as both these headers are not required to be included as a part of the OPTIONS method.