200-901 Understanding and Using APIs Practice Question
A developer is using the Webex API to create a webhook that triggers when a new message is posted in a room. What information is typically included in the webhook payload sent by Webex to the callback URL?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The resource type, event type, and relevant IDs (e.g., message ID, room ID)
Webhook payloads contain event details such as resource, event type, and relevant data like message ID and room ID. The full message content is not included; the application must fetch it via API.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The full message content and all room members
Why it's wrong here
The payload contains identifiers and metadata for the new message, not the full message body plus every room member; retrieving members needs a separate memberships API call. It is tempting because the event concerns a room message, but the payload is deliberately minimal to keep delivery lightweight.
- ✗
The OAuth token for the bot
Why it's wrong here
Webex never places OAuth tokens in webhook payloads; the developer's app holds and refreshes its own token to call the API. The payload carries event identifiers instead. It is tempting because the bot must authenticate to fetch message details, but authentication happens outbound, not inside the delivered notification.
- ✓
The resource type, event type, and relevant IDs (e.g., message ID, room ID)
Why this is correct
Webex webhook payloads carry the resource type, event type and identifying fields such as message ID and room ID, letting the callback URL locate the affected resource. The payload is a notification only, so the developer fetches full message details separately.
- ✗
The complete list of webhooks configured on the account
Why it's wrong here
Webhook payloads carry event data about the triggering resource, such as the message ID, room ID, person ID and timestamps, not account-wide webhook configuration. Listing configured webhooks requires a separate GET to the webhooks endpoint, which is what makes this option tempting when auditing integrations.
Go deeper
Related to this question
About these practice questions
One of 975 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.