Page | 1
WGU D385 FINAL EXAM BRAND NEW
ACTUAL EXAM WITH ANSWERS.
Which value of the X-Frame-Options directive allows a page to be
displayed in a frame of another page? - correct answer --
SAMEORIGIN
Which value for the X-Frame-Options directive will not allow any
page to be displayed in a frame of another page? - correct answer
-- DENY
Which setting can be used to configure the value of Access-
Control-Allow-Origin? - correct answer --
CORS_ORIGIN_WHITELIST
Which setting allows the browser to send cookies? - correct
answer -- CORS-ALLOW-CREDENTIALS
, Page | 2
SameSite Directive setting NONE - correct answer -- browser will
echo the session ID cookie without any conditions back to the
server
- cannot be the default
SameSite Directive setting "strict" - correct answer -- browser will
only echo the session ID cookie for same site requests
SameSite Directive setting "Lax" - correct answer -- browser will
echo the session ID cookie for the same site and cross-site top-
level navigation requests that use safe HTTP methods like GET
- DEFAULT
Which referrer policy enforces sending nothing if the protocol is
downgraded from HTTPS to HTTP? - correct answer -- strict-
origin
Which referrer policy allows for unconditionally sending the
referrer address for every request? - correct answer -- unsafe-url
WGU D385 FINAL EXAM BRAND NEW
ACTUAL EXAM WITH ANSWERS.
Which value of the X-Frame-Options directive allows a page to be
displayed in a frame of another page? - correct answer --
SAMEORIGIN
Which value for the X-Frame-Options directive will not allow any
page to be displayed in a frame of another page? - correct answer
-- DENY
Which setting can be used to configure the value of Access-
Control-Allow-Origin? - correct answer --
CORS_ORIGIN_WHITELIST
Which setting allows the browser to send cookies? - correct
answer -- CORS-ALLOW-CREDENTIALS
, Page | 2
SameSite Directive setting NONE - correct answer -- browser will
echo the session ID cookie without any conditions back to the
server
- cannot be the default
SameSite Directive setting "strict" - correct answer -- browser will
only echo the session ID cookie for same site requests
SameSite Directive setting "Lax" - correct answer -- browser will
echo the session ID cookie for the same site and cross-site top-
level navigation requests that use safe HTTP methods like GET
- DEFAULT
Which referrer policy enforces sending nothing if the protocol is
downgraded from HTTPS to HTTP? - correct answer -- strict-
origin
Which referrer policy allows for unconditionally sending the
referrer address for every request? - correct answer -- unsafe-url