Webhook APIs JN0-253 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A developer is troubleshooting a webhook that is receiving requests but the payloads are being rejected by the receiving application. The application logs show 'Invalid signature' errors. The developer has verified that the secret token matches. What is the most likely cause of the signature mismatch?

   • AThe application is computing the HMAC over the parsed JSON object instead of the raw request body.
   • BThe secret token is being URL-encoded by the receiving server.
   • CThe webhook is configured with the wrong event type.
   • DThe Mist portal is using a different HMAC algorithm than the application.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In the Mist portal, which settings are required when configuring a webhook endpoint?

   • AIP address, port, and protocol
   • BUsername, password, and API key
   • CURL, headers, and secret token
   • DOrganization ID, site ID, and webhook name
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator is troubleshooting a webhook that is not delivering events to the endpoint. The endpoint is reachable and returns HTTP 200 when tested with a tool like Postman. What should the administrator check next?

   • ACheck the endpoint's firewall logs to see if requests are being blocked.
   • BVerify that the webhook is enabled and the event types are correctly selected.
   • CEnsure the secret token is correct, as a mismatch would cause Mist to stop sending.
   • DConfirm that the endpoint is using HTTPS, as Mist only sends to HTTPS endpoints.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of the secret token when configuring a webhook in Mist?

   • ATo specify which events the webhook should receive
   • BTo authenticate the webhook receiver to Mist
   • CTo sign the webhook payload so the receiver can verify its authenticity
   • DTo encrypt the webhook payload in transit
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's security team is configuring a webhook from Juniper Mist to their custom incident management system. They want to ensure that the requests received by their system are genuinely from Mist and have not been tampered with. What should they implement on their receiving server?

   • ACheck that the source IP address of the request is within Juniper's public IP range.
   • BValidate the payload's 'timestamp' field to ensure it is within the last five minutes.
   • CVerify the HMAC signature in the 'X-Mist-Signature' header using the secret token configured in Mist.
   • DRequire the webhook request to include a custom header that matches the secret token.
   Reveal Solution Discussion Select an answer first