Marketing wants to embed the Copilot Studio web chat on https://www.contoso.com but not allow arbitrary third-party sites to host it. What security configuration matters for the web channel?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Allowed domains are the guest list for who may embed your chat widget — contoso.com is invited; random phishing sites are not.
Full explanation below image
Full Explanation
Web channel embedding should restrict host origins to reduce clickjacking/unauthorized hosting risks and brand abuse.
Option A is correct.
Options B–D weaken security.
Exam tip: Publish + web channel + domain allow list + appropriate auth for the audience.