Free Salesforce Slack-Dev-201 Practice Exam with Questions & Answers | Set: 2

Slack's current architecture guidance explicitly favors HTTP Request URLs for production applications when Socket Mode is not required. WebSockets are stateful, which makes them more complex to scale horizontally and more susceptible to connection interruptions, network partitions, and transient disconnections. Slack describes Socket Mode as particularly convenient for local development, on-premises integrations, environments behind firewalls, or applications unable to receive inbound HTTP traffic. For maximum application-connectivity reliability, Slack recommends HTTP for production applications and advises developers to continue using HTTP request URLs when their deployment does not specifically require Socket Mode. Socket Mode also does not replace the Web API; applications commonly receive events over Socket Mode and then invoke Web API methods to perform actions. Therefore, B accurately reflects Slack's present production-scale guidance.

Slack app manifests are officially expressed in JSON or YAML. Both formats represent the same structured application configuration and can define metadata, application features, OAuth configuration, event subscriptions, interactivity settings, and other supported manifest properties. Slack's manifest documentation explicitly states that manifests are reusable configurations expressed in JSON or YAML and can be authored through an application's configuration page. Slack's Deno SDK also supports defining compatible manifest information programmatically in TypeScript, but among the supplied answers, JSON or YAML is unequivocally correct for standard app manifests. XML, INI, and Markdown are not the documented manifest serialization formats. Using JSON or YAML also makes manifests practical for source-control workflows, code review, automated deployment, and reuse across related application configurations. Therefore, A is the verified answer.

Slack's standard Bolt quickstart supports starter projects for Python and JavaScript. The Slack CLI workflow lets a developer create a sample application using Bolt for Python or Bolt for JavaScript and then run that project in a development workspace. Both frameworks provide higher-level abstractions for common Slack application patterns, including event listeners, interactive actions, Web API clients, acknowledgments, and context-aware utilities. Slack also maintains Bolt for Java as an official framework, but the particular starter-template choice described by the standard quickstart is Python or JavaScript. Ruby, Go, C#, PHP, Rust, and Swift are not the two out-of-the-box starter choices represented in this question. Therefore, B correctly identifies Python and JavaScript as the standard Bolt starter-template languages in the Slack CLI quickstart.

`api.slack.com/apps` is Slack's web-based application dashboard for viewing and managing registered Slack applications. After signing in, developers can select an app and configure application features, OAuth permissions, event subscriptions, interactivity, distribution, collaborators, credentials, manifests, and related settings. The page remains active and presents the developer's “Your Apps” interface. `slack.com/billing` is associated with account and subscription matters rather than application configuration. `docs.slack.dev/tools` provides developer documentation and does not function as the management dashboard, while `app.slack.com/downloads` is unrelated to app configuration. Although Slack has progressively moved developer documentation from the older API documentation structure to `docs.slack.dev`, the app-management dashboard at `api.slack.com/apps` remains the correct web interface identified by this question. Therefore, A is correct.

Slack's Direct Install URL is specifically intended to eliminate the extra step of routing prospective installers through the application's own landing page before starting OAuth. Current Slack Marketplace documentation states that when Slack sends an HTTP GET request to the configured Direct Install URL, that endpoint must respond with an HTTP 302 redirect to a fully qualified Slack OAuth authorization URL. For modern Slack applications, the redirect target follows the OAuth v2 authorization pattern: https://slack.com/oauth/v2/authorize. The URL includes the application's client ID and appropriate OAuth scope information. Slack then presents the authorization interface to the installing user. After consent, the normal OAuth authorization-code process continues through the application's configured redirect URI. Option B represents the conventional landing-page installation flow that Direct Install exists specifically to bypass. Option C confuses installation behavior with Slack's three-second acknowledgment requirement for interactive requests and Events API deliveries. A slack:// deep link is not the required Direct Install target. Therefore, D is precisely supported by current Slack Marketplace documentation. The question's older phrase Slack App Directory should now be read as Slack Marketplace. This maps directly to Distribute Your App.

The Home tab is the correct surface because Slack defines App Home as a persistent, private, one-to-one workspace between an individual user and an application. Unlike transient messages or task-focused modals, the Home tab can present personalized information that users repeatedly return to and can be updated dynamically through the views.publish method. For an interview-management application, the Home tab can display upcoming interviews, completed interview sessions, outstanding feedback tasks, candidate summaries, and interactive controls such as buttons for opening feedback forms or managing assignments. Slack specifically identifies dashboards, personalized user data, application settings, and persistent workflow entry points as appropriate Home-tab use cases. A modal is better for a focused temporary interaction, such as submitting one interview evaluation, rather than maintaining the overall interview-management dashboard. Shortcuts are invocation mechanisms rather than persistent information surfaces. Messages are useful for notifications and conversational workflows but do not provide the same stable, personalized workspace. Therefore, the application's principal summary and management interface should be implemented through App Home, with modals or messages used as complementary surfaces when appropriate. This maps directly to Design a Great User Experience, particularly selecting the correct Slack surface based on persistence and workflow requirements.

The Events API enables Slack applications to react to activities occurring within Slack. An application subscribes to specific event types, and Slack delivers corresponding event payloads when those activities occur. Examples include messages being posted, reactions being added, members joining channels, files being created, and application mentions. The events available to an application are constrained by its OAuth scopes and the conversations or resources it is authorized to access. Slack can deliver Events API payloads through a public HTTP Request URL or through Socket Mode. After receiving an event, the application typically acknowledges delivery and asynchronously performs any associated business logic, such as calling `chat.postMessage`. The Events API does not manage billing, construct Block Kit layouts, or configure OAuth permissions. Therefore, B correctly describes its primary function.

Slack recommends transmitting OAuth access tokens through the HTTP `Authorization` header using the Bearer authentication scheme. A typical request therefore includes a header such as `Authorization: Bearer xoxb-...`, where an `xoxb-` value represents a bot token. When using JSON request bodies for write methods, Slack explicitly requires the token to be transmitted as a bearer token in this header. Keeping credentials in headers also avoids exposing sensitive tokens through URLs, browser history, intermediary logs, or query-string processing. Slack does permit token transmission as an encoded POST body parameter in some cases, but the Authorization header is the preferred mechanism. `X-Slack-Token`, browser cookies, and the `Referer` header are not the documented authentication mechanisms for ordinary Slack Web API calls. Therefore, A is the verified answer.

The required inputs map directly to three Block Kit element types. First, a datetime picker allows a user to select both a date and a time and therefore provides substantially more suitable information for an absence period than a time-only picker. Slack defines the datetimepicker element specifically for selecting a date and a time of day. Second, descriptive information is unstructured text, making a plain-text input the appropriate component. Plain-text input elements can collect single-line or multiline free-form information inside an input block. Third, the manager should be represented as a Slack user identity rather than an arbitrary number. Slack provides the users_select element, which automatically populates the selectable options using users visible in the current workspace. The resulting value is a Slack user ID, providing a stable identifier suitable for subsequent API calls and workflow processing. Options A and D incorrectly use a number input for the manager. Option C uses the correct user selector but supplies only a time picker, which cannot capture the required calendar component. This directly tests Design the Interactive Flow of Your App, specifically constructing modal interfaces using appropriate Block Kit elements.

Slack modals are opened through the `views.open` Web API method using Bolt's built-in API client. After a shortcut, slash command, button click, or another qualifying interaction, Slack supplies a `trigger_id`. The application acknowledges the incoming interaction and promptly exchanges that trigger through `views.open` together with a valid modal view payload. In Bolt for JavaScript, this is commonly represented through the client's `views.open` interface; Bolt for Python exposes the corresponding `client.views_open()` method. The important platform primitive is therefore `views.open`, regardless of the language-specific SDK naming convention. A `trigger_id` must be used quickly because it has a short validity period. Neither `app.modal()` nor `app.popup()` nor `client.modal.show()` is Slack's documented method for opening modal views. Therefore, B is the correct answer.