Pass the Salesforce Salesforce Developer Slack-Dev-201 Questions and answers with CertsForce

The Slack CLI is Slack's official command-line development tool for creating, running, and managing Slack app projects. It supports the standard local development workflow used in Slack's current quickstarts, including creating a project from a template, authenticating with a development workspace, running the app locally, and opening app configuration. The command-line workflow is integrated with supported Slack SDKs and Bolt starter projects, so developers can move from scaffolding to testing without manually assembling the entire project structure. The alternatives listed are not Slack's official app-development command-line tool: there is no standard npm create-slack or pip slack-init workflow, and Bolt Studio is not the CLI product. Therefore, A correctly identifies Slack CLI as the official tool for command-line app development.

The `plain_text_input` element is specifically intended to collect free-form textual information from users. Slack allows the element to accept either single-line or multiline text and commonly places it inside an `input` block when constructing a modal form. The application receives the entered value when the modal generates a `view_submission` payload, allowing the backend to validate and process the submitted information. A button initiates an action rather than collecting text. A `static_select` element presents predefined choices, while an overflow menu provides a compact collection of predefined actions or selections. Neither alternative allows unrestricted textual entry. Slack's Block Kit element reference explicitly identifies the plain-text input element as the component for entering free-form data. Therefore, B is the correct element for collecting textual input inside a modal.

Slack applications declare their requested OAuth permissions through application configuration. These permissions can be configured in the app settings under OAuth & Permissions or represented declaratively in an app manifest. Within a manifest, scopes reside under `oauth_config.scopes`, with separate fields for bot and user scopes. Slack's current platform also supports optional scopes through `bot_optional` and `user_optional`. The scopes determine what actions and data the application's tokens may access after authorization. Browser cookies do not define Slack app permissions, and the Slack CLI's local configuration is not the authoritative location for declaring the application's OAuth scope requirements. Scopes absolutely can—and normally should—be determined before installation so users and administrators can review the requested permissions during OAuth authorization. Therefore, A is correct.

Option D accurately reflects Slack Connect behavior. Slack's official developer guidance explicitly states that messages sent through an incoming webhook into a Slack Connect channel are visible to all members of that shared channel, including users participating from external organizations. Option A is incorrect because the Events API can deliver events generated by external users participating in Slack Connect channels. Developers must therefore design applications to recognize that the actor may belong to another workspace. Option B is also incorrect: Slack specifically documents that shared channels do not cause duplicate event callbacks merely because the channel spans multiple workspaces. Developers should instead inspect authorization information in event payloads to determine where the application has authorization. Option C is overly broad. Incoming webhooks can send direct messages only under specific installation-team constraints; they cannot simply DM every external participant in a shared channel. Slack Connect therefore changes assumptions about workspace ownership, user identities, channel membership, and application authorization. Applications must distinguish the workspace where the app is installed from external workspaces represented in the shared conversation. This question belongs to Apps in the Slack Platform, particularly Slack Connect architecture and app behavior in externally shared channels.

Workflow Builder is intentionally designed as a no-code automation environment, so ordinary workspace members can create workflows without being software developers. Slack currently states that, by default, all regular members can access Workflow Builder and create workflows, although owners and administrators can restrict who has permission to do so. In Enterprise organizations, Org Owners and Org Admins can similarly establish organization-level policies governing workflow creation. Workflow Builder therefore enables business users to automate routine processes using triggers, forms, Slack actions, connector steps, and other visual components. It is not restricted to Slack employees, certified developers, or Enterprise Grid owners. The important qualification in option B is “with the appropriate permissions,” because administrative policies can narrow the default access. Therefore, B is the correct answer.

Message shortcuts operate in the contextual action menu of an existing Slack message. Slack's official shortcut documentation specifies that message shortcuts appear in the context menus of non-ephemeral messages. Therefore, an ephemeral message cannot serve as the source message for a message shortcut, making B correct. This restriction follows from the underlying interaction model. Message shortcuts preserve context from the source message so an application can perform an action based on that message—for example, creating a ticket, escalating an incident, or sending content to an external system. Ephemeral messages have restricted visibility and lifecycle behavior and are excluded from this shortcut surface. Option D is incorrect because every shortcut invocation must be acknowledged promptly, regardless of how many shortcuts the app defines. Current Slack UX guidance requires shortcut requests to be acknowledged with an HTTP 200 response within three seconds. Option C is not a general rule; follow-up notification mechanics depend on the interaction payload and workflow. A's fixed limit of three message shortcuts is not the applicable platform rule represented here. This belongs to Design the Interactive Flow of Your App, particularly message shortcuts and contextual interactions.

admin.conversations.rename belongs to Slack's Admin API and is available for Enterprise organizations. Current Slack documentation requires a user token containing the appropriate administrative scope—in this case admin.conversations:write. The application must be installed at the Enterprise-organization level rather than merely in one individual workspace. An Org Admin is therefore the appropriate role among the listed choices. Slack currently allows an Enterprise Org Admin or Org Owner, subject to applicable Channel Management permissions, to install an app requesting relevant Admin API scopes. Because Org Owner is not presented as an option, B is the correct selection. A Workspace Admin's authority ordinarily applies to a specific workspace and does not provide organization-level authorization for Admin API operations that span an Enterprise organization. Compliance Admin and Audit Log-related roles address different governance or monitoring responsibilities and do not provide the channel-management authorization required here. Current Slack documentation additionally emphasizes that the installing Org Admin or Owner must possess the applicable Channel Management permissions, including access to the relevant public/private channel types. This maps directly to APIs for Managing Your Slack, particularly Admin APIs, Enterprise-level OAuth installation, administrative scopes, and organization-wide channel management.

Slack's current Agent quickstart guides developers through creating an AI-powered Slack agent. The official quickstart uses a sample support agent named Casey and demonstrates building the application with the Slack CLI and Bolt frameworks while integrating supported AI agent frameworks such as the Claude Agent SDK, OpenAI Agents SDK, or Pydantic AI. The resulting agent can interact through direct messages, app mentions, App Home, modals, reactions, and threaded responses. Developers begin by installing the Slack CLI, authenticating with a workspace, and creating the agent project using the provided sample template. This is application-development guidance for Slack's AI agent platform, not billing, workspace theming, or Block Kit Builder extensions. Therefore, B precisely matches the purpose of the Agent quickstart.

`users.info` is the Slack Web API method for retrieving information about a specific workspace member. The application supplies the user's Slack ID through the `user` argument and must use a token containing the `users:read` scope. A successful response returns a user object containing properties such as the member's ID, name, profile attributes, timezone information, account state, and other available fields. If the application requires the user's email address, Slack additionally requires the `users:read.email` scope. Developers can also request locale information by setting `include_locale=true`. `user.get`, `profile.lookup`, and `team.userInfo` are not the supported Web API methods for this operation. Slack's current method reference explicitly describes `users.info` as obtaining information about a user. Therefore, A is correct.

A Slack application distributed across multiple independent workspaces must implement an OAuth installation flow. Slack explicitly states that enabling installation on other workspaces allows the application to generate access tokens for each workspace and applicable user authorization. Bolt's current OAuth documentation likewise explains that each app installation issues unique access tokens and installation information that the application must store securely and retrieve when processing requests. This is fundamentally different from a single-workspace application, which can receive one access token through direct installation without implementing the full distributed OAuth flow. Independent workspaces do not normally share one universal token. Organization-wide Enterprise installations are a distinct model and can use an organization-level authorization, but that does not invalidate the standard multi-workspace distribution behavior tested here. Therefore, A is correct.