2. Describe Common Usage Patterns Related to Webhooks 200-901 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A network automation team is deciding between using webhooks or polling to integrate a network controller with an inventory system. The inventory system needs to be updated as soon as a new device is added to the controller. The team wants to minimize unnecessary network traffic. Which approach should they choose?

   • AManually update the inventory system when a new device is added.
   • BConfigure the controller to send a webhook POST to the inventory system whenever a device is added.
   • CHave the inventory system poll the controller's API every 5 minutes for new devices.
   • DUse a nightly batch job to export the device list and import it into the inventory system.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team is configuring a webhook receiver for a network monitoring system. The receiver is publicly accessible. They want to ensure that the webhook payloads are not tampered with during transit and that the sender is authenticated. Which combination of measures should they implement?

   • AUse HTTPS for the webhook URL and verify a digital signature in the HTTP headers using a shared secret.
   • BUse HTTPS but do not verify signatures because HTTPS is sufficient for security.
   • CUse a shared secret in the URL query string and HTTP to simplify configuration.
   • DUse HTTP and rely on the payload's 'source_ip' field to authenticate the sender.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement best describes the purpose of a webhook?

   • ATo provide a standard format for exchanging data between systems
   • BTo allow a server to push real-time data to a client application when an event occurs
   • CTo enable a client to pull data from a server at regular intervals
   • DTo establish a secure tunnel for data transfer between two networks
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses a cloud-based configuration management tool that supports webhooks. The tool must notify an internal change-management system when a configuration change is approved. The change-management system is only accessible from the corporate network. What is the best way to register the webhook URL?

   • ARegister the internal IP address of the change-management system directly.
   • BRegister a public URL that uses a VPN tunnel or reverse proxy to reach the internal system.
   • CUse a webhook relay service that stores events and lets the internal system poll for them.
   • DChange the change-management system to be publicly accessible without authentication.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A webhook provider has a retry policy that sends failed deliveries up to 5 times with exponential backoff. The receiver is sometimes slow to respond, causing timeouts. The receiver processes events that are not idempotent, so duplicate deliveries cause problems. What is the best way to handle this situation?

   • AAsk the provider to disable retries.
   • BIncrease the timeout on the receiver to allow more time for processing.
   • CUse a queue to buffer incoming webhooks and process them asynchronously.
   • DMake the receiver idempotent by tracking processed event IDs, and ensure it responds quickly enough to avoid timeouts.
   Reveal Solution Discussion Select an answer first