Download Full Version Slack-Dev-201 Salesforce Exam

A and C are the two choices that best align with the current official Slack design guidance. Slack emphasizes concise, easily processed content. Applications should communicate clearly and minimize unnecessary cognitive load so users can understand information quickly rather than reading lengthy or overly complex interfaces. This supports the principle represented by option A. Slack's Block Kit design guidance also recommends simplifying suitable information with pictures. For example, faces may communicate user identity more efficiently than lists of names, and maps can sometimes communicate location more effectively than text. Images must still be accessible through appropriate alt_text; the recommendation is not to remove essential textual meaning indiscriminately. Option B is incorrect under current official guidance. Slack explicitly states that shortcut names should start with a verb, not a noun. Option D conflicts with Slack's recommendation to avoid excessive notifications, while option E is directly contrary to the guidance to reduce complexity by progressively revealing controls and information. The supplied document marks A and B, but B conflicts with Slack's published developer guidance and therefore should not be retained as the verified answer. This question belongs under Design a Great User Experience.

Slack's documented macOS and Linux installation method uses the official shell installer hosted on Slack's downloads domain. The command `curl -fsSL | bash` retrieves the installer securely and runs it through Bash, installing the Slack CLI and making the `slack` command available for development. Slack's current CLI installation documentation presents this command as the supported installation path for macOS and Linux. The alternatives do not represent the official installation command in the Slack Developer documentation: Slack CLI is not installed through the listed npm or pip commands, and `brew install slack` does not correspond to Slack's documented CLI installer. Therefore, option B is the verified installation command for the environments named in the question.

Slack distinguishes between a development application installed only in its associated workspace and an application intended for installation across multiple workspaces. For a single-workspace application, Slack allows installation directly through the application's configuration without requiring the developer to implement a complete OAuth installation flow. Once an application is distributed to other workspaces, however, each installation must be explicitly authorized. Slack therefore requires the application to implement the OAuth 2.0 authorization-code flow and store the resulting installation information, including the applicable access tokens. OAuth is not required merely because an application has slash commands or a bot user. Those features require appropriate scopes and application configuration, but they do not independently dictate multi-workspace OAuth installation. OAuth is also not simply an optional additional security layer; it is Slack's authorization mechanism for obtaining workspace-specific authorization during distributed installation. The application typically sends the installer to Slack's authorization endpoint, receives a temporary authorization code through its configured redirect URI, exchanges that code through oauth.v2.access, and securely stores the resulting installation credentials. Therefore, C is correct and maps directly to Distribute Your App, particularly multi-workspace installation and OAuth-based authorization.

The Audit Logs API is designed to provide security and administrative visibility into activities occurring across an Enterprise organization. Option B contains two valid examples of such activity: file downloads and changes involving Slack applications. Slack's Audit Logs API includes audit actions such as file_downloaded, allowing security teams or SIEM platforms to investigate potentially suspicious download behavior. It also records application lifecycle and authorization activity. Supported actions include app_installed and app_scopes_expanded, the latter indicating that an application has been granted additional OAuth access. The API is primarily read-only monitoring infrastructure. It retrieves audit events and supports filtering by properties such as action, actor, entity, and time range. Therefore, option D is incorrect because the API itself does not control whether applications are approved; administrative APIs and workspace/org controls perform those actions. The Audit Logs API is also not a general message-content surveillance API for detecting arbitrary keywords, making C incorrect. Subscription billing and plan-user accounting are likewise outside its intended purpose. This aligns directly with APIs for Managing Your Slack, specifically Enterprise security monitoring and administrative event visibility through the Audit Logs API.