2. Describe Common Usage Patterns Related to Webhooks 200-901 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A network automation script receives a webhook notification from a network device. The payload is a JSON object. Which fields would the script most likely need to examine to determine what event occurred and when?

   • AThe 'source_ip' and 'destination_ip' fields only.
   • BThe 'event_type' and 'timestamp' fields in the JSON payload.
   • CThe 'retry_count' and 'delivery_id' fields.
   • DThe 'webhook_id' and 'secret' fields.
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   A webhook receiver is parsing a JSON payload from a network device. The receiver needs to determine what type of event occurred and when it happened. Which two fields in the payload should the receiver use?

   • Asignature and secret
   • BretryCount and deliveryId
   • CresourceId and sourceIp
   • DeventType and timestamp
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does a client typically register a webhook URL with an API provider?

   • ABy adding a DNS record that points to the provider's server
   • BBy sending a POST request to the provider's webhook registration endpoint with the URL and event subscriptions
   • CBy sending an email to the provider's support team
   • DBy configuring the provider's firewall to allow inbound traffic
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is integrating a webhook from a third-party service that sends sensitive customer data. The company's security policy requires that all data in transit be encrypted and that the receiver authenticate the sender. The third-party service only supports HTTP (not HTTPS) for webhooks. What is the best way to meet the security policy?

   • AAccept the HTTP webhook and rely on the payload's 'source_ip' field for authentication.
   • BUse a VPN tunnel between the company and the third-party service.
   • CUse a reverse proxy that terminates the HTTP webhook and forwards it to the receiver over HTTPS, and implement signature verification at the receiver.
   • DAsk the third-party service to send the data via email instead.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is idempotency important when handling webhook retries?

   • AIt allows the provider to send the webhook to multiple URLs simultaneously
   • BIt encrypts the webhook payload to protect sensitive data
   • CIt ensures that processing the same event multiple times does not cause duplicate side effects
   • DIt reduces the number of retries needed by making the delivery faster
   Reveal Solution Discussion Select an answer first