What should the X-FRAME-OPTIONS HTTP header be set to on the web server?

An AEM forms architect must secure an AEM implementation against "clickjacking."

What should the X-FRAME-OPTIONS HTTP header be set to on the web server?
A . ALLOW-FROM
B . DENY
C . SAMEORIGIN
D . NULL

View Answer

Answer: D