Question 320
At the Hartwell housing nonprofit after a wider deployment, a deployed code app fails to load a trusted API resource because the browser blocks its domain under CSP. The operations team needs a supportable remediation with evidence for the handover. Which ongoing engineering control would most directly reduce recurrence?
Explanation
Correct Answer
This routine prevents recurrence: audit allowed origins and remove unused hosts periodically. It targets the recurring risk created because content Security Policy prevents an otherwise valid cross-origin load. In the Hartwell housing nonprofit, assess this against the documented content security policy scenario.
Incorrect Answers
That safeguard is appropriate for maintaining application insights code app. It would not primarily prevent the reported failure, for which the relevant control is to audit allowed origins and remove unused hosts periodically. For case R082-PL400-CASE-0080, the decisive context is the 2 deployment setting at the Hartwell housing nonprofit.
This monitoring or review practice targets code app publishing and sharing; the better ongoing protection for this case is to audit allowed origins and remove unused hosts periodically. For case R082-PL400-CASE-0080, the decisive context is the 2 deployment setting at the Hartwell housing nonprofit.
That safeguard is appropriate for maintaining async data refresh. It would not primarily prevent the reported failure, for which the relevant control is to audit allowed origins and remove unused hosts periodically. For case R082-PL400-CASE-0080, the decisive context is the 2 deployment setting at the Hartwell housing nonprofit.