Slack-Dev-201 sample questions

Question 1

You are designing an app for a distributed engineering team that manages critical infrastructure. The app must receive notifications about server outages and allow engineers to acknowledge alerts immediately. The engineering team operates behind a strict corporate firewall that blocks all incoming traffic from the public internet, preventing the use of public endpoints. Which Slack API technology should you implement to satisfy these network security constraints?

Accepted Answer

Socket Mode

Answer

Incoming Webhooks

Answer

Events API with Request URL verification

Answer

Slash Commands with `response_url`

Question 2

A developer is building a 'Help Desk' app where users submit tickets via a Global Shortcut. The modal for ticket submission contains a select menu for 'Category'. When a user selects 'Hardware', the modal needs to dynamically update to show a new input field for 'Asset Tag'. Which API method and interaction flow handles this requirement?

Accepted Answer

The app listens for the `block_actions` payload, acknowledges the request, and calls `views.update` with the new Block Kit definition including the Asset Tag input.

Answer

The app sends a new `views.open` request with the `trigger_id` to stack a new modal on top of the existing one.

Answer

The app listens for the `view_submission` payload and returns a `response_action` of type `update`.

Answer

The app uses the `chat.update` method to modify the modal's content in real-time.

Question 3

During a security audit, a vulnerability is identified in how your Slack app verifies incoming requests. The auditor notes that while you are checking the signature, you are not preventing replay attacks. Which specific header must be validated alongside the signature to mitigate this risk, and what is the standard tolerance window?

Accepted Answer

X-Slack-Request-Timestamp; reject requests older than 5 minutes

Answer

X-OAuth-State; reject requests where the state parameter does not match the session storage

Answer

X-Slack-Retry-Num; reject requests with a retry count higher than 3

Answer

X-Slack-Signature; reject requests if the signature does not match the computed HMAC-SHA256 hash

Question 4

You are developing a Slack app using the Bolt framework for Python. You need to handle a specific Slash Command `/ticket`. Which decorator should you use to register a listener for this command?

Accepted Answer

@app.command("/ticket")

Answer

@app.shortcut("/ticket")

Answer

@app.action("/ticket")

Answer

@app.event("slash_command")

Question 5

A multinational corporation uses Enterprise Grid with over 500 workspaces. An administrator needs to perform a data loss prevention (DLP) scan across all public channels in the organization to identify messages containing credit card numbers. Which API is specifically designed for this compliance use case?

Accepted Answer

Discovery API

Answer

Audit Logs API

Answer

SCIM API

Answer

Admin API

Question 6

You are building a custom integration that needs to provision and deprovision users from an external HR system into Slack. The integration must also manage user group memberships (e.g., adding new hires to 'Engineering' and 'San Francisco' groups). Which API standard and Slack implementation should you use?

Accepted Answer

SCIM API

Answer

Auth API

Answer

Admin API (users.invite)

Answer

Web API (users.identity)

Free Slack-Dev-201 sample questions

You are developing a Slack app using the Bolt framework for Python. You need to handle a specific Slash Command `/ticket`. Which decorator should you use to register a listener for this command?

6 more free samples are waiting