A: One can try to fetch from an origin different from the API server in the browser console (or from a different domain). If CORS is not enabled properly, the browser logs a CORS error and blocks the request. Then enable CORS (or adjust origin whitelist) and test again to see that request succeeds.
