Question: If your app receives data from a third-party API, which HTTP response header must the server specify to allow exceptions to the same-origin policy?

1. Security-Mode
2. Access-Control-Allow-Origin
3. Different-Origin
4. Same-Origin

Answer: The correct answer of the above question is Option B:Access-Control-Allow-Origin