Marketing wants to embed the Copilot Studio web chat on https://www.contoso.com but not allow arbitrary third-party sites to host it. What security configuration matters for the web channel?
Select an answer to reveal the explanation.
Short Explanation
Allowed domains are the guest list for who can embed your chat control. You invite contoso.com, and you keep random phishing sites out.
Full Explanation
Restrict web channel embedding to allowed domains so only approved origins can host the chat, reducing clickjacking, unauthorized hosting, and brand abuse. Disabling HTTPS, exposing secrets in page comments, or allowing every domain all weaken security. Exam tip: Publish + web channel + domain allow list + appropriate auth for the audience.