Salesforce Certified Slack Developer Free Sample Questions

Description

Covers building Slack apps and workflows, the Web and Events APIs, user experience design, OAuth and scope security, Enterprise Grid scaling, Bolt and Block Kit tools, and app distribution.

12 free sample questions150 in the full practice test

Try simulator

Slack-Dev-201 Sample Questions

  1. Question 1

    Advanced

    Design Your Workflows: Spotlight on Slack's APIs · Process rate limits throughout the Slack platform

    A financial services firm is developing a custom Slack app to assist traders with real-time stock analysis. The app currently uses the Web API to post market updates every 10 seconds to a high-traffic channel. During peak trading hours, the app frequently receives HTTP 429 Too Many Requests errors. The architectural team needs to redesign the communication flow to respect Slack's rate limits while ensuring traders receive timely updates. Which approach offers the MOST scalable solution?

    Answer and explanation

    Correct answer: A

    The optimal solution for high-frequency updates that hit rate limits is to consolidate information. By using chat.update to refresh a single 'dashboard' message or consolidating multiple updates into a batched message, the app reduces API calls. Crucially, any robust app must implement a queue that pauses requests based on the Retry-After header provided by Slack in 429 responses.

  2. Question 2

    Intermediate

    Design Your Workflows: Spotlight on Slack's APIs · Discriminate between Socket Mode and HTTP-based event delivery

    You are designing an app for a distributed engineering team that manages critical infrastructure. The app must receive notifications about server outages and allow engineers to acknowledge alerts immediately. The engineering team operates behind a strict corporate firewall that blocks all incoming traffic from the public internet, preventing the use of public endpoints. Which Slack API technology should you implement to satisfy these network security constraints?

    Answer and explanation

    Correct answer: D

    Socket Mode allows an app to connect to Slack via a WebSocket connection. This is an outbound connection from the app to Slack, which typically bypasses the need for incoming firewall rules or a public static IP address. It is the standard solution for apps running behind corporate firewalls.

  3. Question 3

    Advanced

    Design the Interactive Flow of Your App · Build a UI for your app's surfaces using Block Kit

    A developer is building a 'Help Desk' app where users submit tickets via a Global Shortcut. The modal for ticket submission contains a select menu for 'Category'. When a user selects 'Hardware', the modal needs to dynamically update to show a new input field for 'Asset Tag'. Which API method and interaction flow handles this requirement?

    Answer and explanation

    Correct answer: D

    Dynamic modal updates are achieved by listening for block_actions events (triggered when the user selects a menu item). The app must respond to this event by calling views.update passing the view_id and the new blocks array that includes the conditional fields.

  4. Question 4

    Intermediate

    Design for Security · Identify the steps you could take to make your app communicate securely in Slack

    During a security audit, a vulnerability is identified in how your Slack app verifies incoming requests. The auditor notes that while you are checking the signature, you are not preventing replay attacks. Which specific header must be validated alongside the signature to mitigate this risk, and what is the standard tolerance window?

    Answer and explanation

    Correct answer: B

    To prevent replay attacks, apps must validate the X-Slack-Request-Timestamp header. If the timestamp is too old (Slack recommends a tolerance of 5 minutes), the request should be ignored, even if the signature matches. This prevents an attacker from capturing a valid request and re-sending it later.

  5. Question 5

    Beginner

    Tools · Recommend when to use the Bolt development framework to build Slack apps

    You are developing a Slack app using the Bolt framework for Python. You need to handle a specific Slash Command /ticket. Which decorator should you use to register a listener for this command?

    Answer and explanation

    Correct answer: D

    In Bolt for Python, the @app.command() decorator is used to listen for slash command events. The argument passed to the decorator is the name of the command (e.g., "/ticket").

  6. Question 6

    Intermediate

    APIs for Managing Your Slack · Recommend when to use the Discovery API for data-loss prevention, compliance archiving or eDiscovery

    A multinational corporation uses Enterprise Grid with over 500 workspaces. An administrator needs to perform a data loss prevention (DLP) scan across all public channels in the organization to identify messages containing credit card numbers. Which API is specifically designed for this compliance use case?

    Answer and explanation

    Correct answer: B

    The Discovery API is purpose-built for eDiscovery and Data Loss Prevention (DLP) solutions. It allows authorized apps to search and retrieve messages and files across an entire Enterprise Grid organization, regardless of channel membership, specifically for compliance purposes.

Register free for 6 more questions

Or unlock all 150 Slack-Dev-201 questions with explanations, timed mode and flashcards.