2. Describe Common Usage Patterns Related to Webhooks 200-901 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is a webhook in the context of API integrations?

   • AAn HTTP callback that delivers data to a specified URL when an event occurs
   • BA method for authenticating API requests using tokens
   • CA method for a client to periodically check an API for updates
   • DA protocol for establishing a persistent two-way communication channel
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which fields are typically included in a webhook payload?

   • AUsername, password, and API key
   • BHTTP method, URL, and status code
   • CSource IP, destination IP, and port number
   • DEvent type, timestamp, and resource data
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company's webhook receiver is publicly accessible and processes sensitive data. The receiver currently uses HTTPS but does not verify the webhook signature. An attacker has started sending fake webhooks to the receiver, causing unauthorized actions. The team wants to prevent this without disrupting legitimate webhooks. What should they do?

   • AImplement signature verification using the shared secret provided by the legitimate webhook sender, and reject requests with invalid signatures.
   • BBlock all webhook requests from unknown IP addresses.
   • CChange the webhook URL to a non-public IP address.
   • DDisable HTTPS and use a custom header with a static token.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A network automation engineer is setting up a webhook receiver for a Cisco DNA Center event notification. The engineer wants to ensure that the received POST requests are genuinely from Cisco DNA Center and have not been tampered with. Which configuration should the engineer implement?

   • ARely on the presence of the 'eventType' field in the JSON payload to confirm authenticity.
   • BVerify the HMAC signature in the webhook payload using the shared secret token configured in Cisco DNA Center.
   • CUse HTTP instead of HTTPS to simplify the receiver and avoid certificate management.
   • DCheck that the source IP address of the webhook request is within Cisco's public IP range.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which advantage does a webhook provide over polling?

   • AIt allows the client to control the frequency of data updates
   • BIt guarantees delivery of every event without any retries
   • CIt eliminates the need for a public endpoint on the client side
   • DIt reduces unnecessary network traffic by sending data only when an event occurs
   Reveal Solution Discussion Select an answer first