UUS Practice Tests⌕ Search
IT Certifications · Slack-Dev-201

Salesforce Slack Developer Exam Practice Test

Slack app development brings together authorization, workspace installation, message composition, and API-driven interactions. This practice page focuses on implementing apps that work across Slack workspaces: requesting only needed OAuth scopes, storing installation credentials safely, choosing Block Kit for structured messages, and using Web API methods for conversations, reactions, and message operations.

Exam overview

Exam providerSalesforce
Exam codeSlack-Dev-201
CategoryIT Certifications

About the Salesforce Slack Developer Exam

Developers must match each Slack operation to its API behavior and authorization context. That includes understanding bot-token scopes, handling workspace-specific installation tokens, opening or resuming direct-message conversations, and using message timestamps to identify messages in later operations. Block Kit supports structured layouts and interactive elements across Slack surfaces; its JSON structure can be defined and validated before delivery. App design also involves deciding whether an integration is single-workspace or distributable to multiple workspaces, protecting credentials for each installation, and using an official SDK where it helps manage API requests and responses. These skills support practical tasks such as sending a user-authorized direct message, adding a reaction after an action, and composing messages that remain usable across clients.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

When configuring OAuth for a Slack app, what is the best practice for requesting permissions?

  1. ARequest every available scope so future features need no changes
  2. BRequest only scopes needed for the app’s current functionality
  3. CAvoid scopes and use a user’s browser session instead
  4. DRequest admin scopes for all apps, regardless of use case
Show answerCorrect answer: B

Least privilege reduces the impact of mistakes or compromised credentials and makes the requested access easier for workspace administrators and users to evaluate.

Question 2

A Slack app is distributed to multiple workspaces. What should it do with each workspace’s installation credentials?

  1. AStore each installation’s credentials securely and associate them with that workspace
  2. BUse one shared token for every workspace
  3. CPlace tokens in publicly accessible client-side code
  4. DDiscard tokens after installation and rely on workspace names
Show answerCorrect answer: A

A distributed app may have separate credentials for different installations. Tokens should be stored securely and mapped to the corresponding workspace or installation, with access restricted to trusted server-side components.

Question 3

A developer is designing a message layout that should adapt to different client surfaces and support interactive components. Which Slack message format is the standard choice?

  1. ABlock Kit
  2. BCSV attachment
  3. COAuth response body
  4. DPlain-text event envelope
Show answerCorrect answer: A

Block Kit is Slack’s framework for composing rich, structured message layouts and interactive components across supported Slack surfaces. The other choices are data formats or protocol payloads, not message-layout frameworks.

Question 4

An app uses a Slack Web API method whose response contains a timestamp field for a message. What is a suitable use for that timestamp in later API operations?

  1. AIdentify the particular message within its conversation
  2. BAuthenticate the app to a different workspace
  3. CDetermine the app’s granted OAuth scopes
  4. DChoose which user can install the app
Show answerCorrect answer: A

Slack message timestamps are commonly used with a conversation identifier to refer to a particular message in operations such as retrieving or managing it. A timestamp is not an authentication credential or a record of OAuth permissions.

Question 5

A Slack app wants to send a direct message to a user after obtaining the user’s permission. Which API method is designed to open or resume a direct-message conversation?

  1. Aconversations.open
  2. Bchat.scheduleMessage
  3. Cusers.list
  4. Dconversations.history
Show answerCorrect answer: A

The conversations.open method opens or resumes a one-to-one or multi-person direct-message conversation and returns its conversation identifier. Other methods retrieve users or message history, or schedule a message in an existing conversation.

Question 6

A developer wants to define a reusable set of message blocks and validate its structure before sending it to Slack. Which format should the developer work with?

  1. AJSON
  2. BCSV
  3. CXML
  4. DYAML only
Show answerCorrect answer: A

Slack message layouts and Block Kit payloads are represented as JSON. A developer can construct and validate the JSON structure before submitting it through an API or interaction flow.

Question 7

A Slack app uses a bot token to call a Web API method. What does the app generally need in order for the method to succeed?

  1. AThe token must have the needed scope, and the app must have access to the relevant resource
  2. BThe token must be a user token, regardless of the method
  3. CThe app must be installed in every workspace on Slack
  4. DThe request must include a browser session cookie
Show answerCorrect answer: A

A valid token alone is not sufficient: the associated authorization must include the required scope, and the app must have access to the target resource, such as being present in a channel where required.

How to use this practice test

The free US Practice Tests bank contains 50 practice questions, with up to 20 random questions in a session. Answer a session to see results, then use missed or uncertain items to revisit OAuth scopes, token handling, Web API methods, Block Kit structure, and workspace installation choices.

Preparation tips

  • For each API scenario, identify the token type and required OAuth scope before selecting an operation.
  • Compare single-workspace installation with multi-workspace distribution, and plan separate protected credentials for each installation.
  • Practice reading Block Kit JSON and recognizing blocks, interactive components, and structural validation needs.
  • Trace message operations from the returned timestamp to later API calls, and distinguish opening a direct-message conversation from sending a message.
  • Review how Slack SDKs handle requests and responses, while confirming that the app still requests appropriate permissions.
Official sourceOfficial exam page ↗