Salesforce Certified Slack Developer Practice Exam

A developer is building a Slack app with the Bolt framework that must listen for messages containing specific keywords and respond automatically. Which Bolt listener fits?

1. A slash command that users must explicitly invoke
2. The app.message() listener with a string or regex pattern, which fires when matching messages are posted in channels where the app is present
3. A scheduled job that polls for new messages every minute
4. A webhook endpoint that receives every workspace message

A developer needs an interactive message with buttons, a dropdown, and a date picker so users can submit an expense report directly in Slack. Which UI approach fits?

1. A custom HTML page opened in a browser tab
2. Rich text formatting with bold and italic for visual structure
3. Block Kit with interactive components (buttons, static_select, datepicker) composed into a message layout, with an action handler to process the input
4. Plain text messages linking to an external form

An app must open a form (modal) when a user clicks a button in a message, collect several fields, and receive the submission. Which method opens the modal?

1. chat.postMessage with a form attachment
2. dialog.open with a dialog payload
3. views.open with a modal view payload of input blocks, using the trigger_id from the button’s interaction payload
4. A redirect to an external web form

When a user types /ticket create, the app should open a ticket-creation modal. What must the developer configure and implement?

1. A Workflow Builder step for the slash command
2. Register the slash command with a request URL, implement a handler that receives the command payload, extract the trigger_id, and call views.open to show the modal
3. Register the slash command in the app manifest only, with no handler
4. A bot that monitors all messages for the /ticket text

An app previously posted a status message and now needs to change it in place from ‘Pending’ to ‘Approved’ with updated formatting. Which method fits?

1. Edit the message via the Slack UI on behalf of the user
2. Delete the original message and post a new one
3. Post a new message in a thread under the original
4. Call chat.update with the original channel and timestamp (ts), supplying the updated Block Kit payload

A developer must verify that incoming requests genuinely originate from Slack and not a malicious source. Which mechanism is correct?

1. Validate the user’s OAuth token on every request
2. Check only that the request comes from a Slack IP range
3. Trust all incoming requests without verification
4. Verify the request signature using the signing secret — compute an HMAC-SHA256 of the timestamp and body and compare it to the X-Slack-Signature header

A developer wants their app’s functionality to appear as a reusable step in Workflow Builder so non-developers can add it to their workflows. What must they implement?

1. A webhook that Workflow Builder calls directly
2. A custom function defined in the app manifest with typed input/output parameters, implemented as a function handler that processes inputs and returns outputs when invoked
3. A slash command that Workflow Builder references
4. A bot that responds to Workflow Builder trigger messages

An app calls the Web API in a burst and starts receiving HTTP 429 responses. What is the correct way to handle this?

1. Retry immediately in a tight loop until the calls succeed
2. Respect the Retry-After header on 429 responses, back off, and design calls to stay within the method’s rate-limit tier
3. Switch to a second bot token to double the request budget
4. Ignore the 429s because Slack will queue the calls automatically

A developer must distribute an app to external organizations; it needs to read channels and user profiles and post messages. Which OAuth scopes and distribution approach fit?

1. Use a single workspace app token for all organizations
2. Give other organizations the source code to self-host
3. Share the app’s bot token directly with each organization
4. Configure OAuth 2.0 with granular scopes (channels:read, users:read, chat:write), implement the OAuth installation flow, and submit to the Slack Marketplace for public distribution

A button click must be acknowledged within Slack’s 3-second timeout, but the real processing takes 30 seconds. How should the developer handle this?

1. Immediately acknowledge within 3 seconds, then use the response_url or chat.update to deliver the final result asynchronously once processing completes
2. Tell users to wait and hope the connection does not time out
3. Queue the interaction and respond the next time the user sends a message
4. Increase Slack’s timeout limit to 60 seconds