CertificationAnswers

We help you to get prepared and pass your Marketing online Certification exams

EN FR ES DE IT PT RU PL NL TR JA CZ CN KO UK ID

Integrating With HubSpot I: Foundations Exam Answers

Integrating With HubSpot I: Foundations Exam Answers

Integrating With HubSpot I: Foundations Exam Answers

HubSpot is a powerful development platform that offers APIs and other tools to help you integrate with and extend HubSpot’s CRM and its different Hubs. Creating quality integrations with HubSpot requires some familiarity with HubSpot’s CRM, its different Hubs, and its API endpoints. In this certification course, we’ll establish a foundation to help you begin integrating with and extending HubSpot.

  • There are 60 questions.
  • The exam takes about 1 hour to complete.
  • You must answer 45 questions correctly to pass.
  • You must wait 12 hours between attempts.
  • You have 3 hours to complete the exam.

Exam URL: https://academy.hubspot.com/courses/integrating-with-hubspot-foundations

 

 

Question:

 

  1. What is the key difference between a one-to-one integration and a one-to-many integration?
  2. What is a commonality of one-to-one and one-to-many integrations?
  3. Which of the following statements about private apps is NOT true?
  4. A customer wants to help their sales team generate new deals through email, which is their primary form of communication with potential customers. They’re evaluating whether they should build a custom solution. What’s the first question you should answer to help them determine next steps?
  5. What does the acronym CRUD stand for?
  6. Select all that apply. What are the different HubSpot account types that developers can use?
  7. Which of the following is NOT a feature of a test account?
  8. True or false? Most HubSpot API endpoints are public and can be accessed using client-side JavaScript.
  9. Which of the following is a good use case for using the Webhooks API?
  10. Fill in the blank: CREATE is to POST as UPDATE is to ____.
  11. When starting a new development project, what’s the biggest benefit to visiting the HubSpot Marketplace as your first step?
  12. True or false? Developers can add associations to custom objects and standard CRM objects.
  13. A customer wants to update a custom object’s associations to be associated with the company object. How should they go about it doing this from the UI, without making a call to the API?
  14. Why are the standard CRM objects closely aligned?
  15. What is the importance of an entity relationship diagram?
  16. What is the importance of an object type’s unique ID?
  17. How many company records can an individual engagement object, such as an email, be associated with?
  18. When making an API call to a standard object, what query parameter must you append to get connected contact records?
  19. True or false? You would have to make another call to the contacts endpoint to get more information on the contacts associated with a company.
  20. Which of the following is a drawback to how API calls return associated contacts object data?
  21. True or false? In most situations, you’ll want to create a one-way bridge to dictate the flow of information between your integrations.
  22. What does delegated authorization mean?
  23. Which of the following is an example of how you interact with OAuth on a daily basis?
  24. True or false? The OAuth endpoint expects the form/urlencoded format instead of JSON.
  25. What is the purpose of an .env file?
  26. What must you first obtain and then add to your OAuth flow (once the authorization expires)?
  27. When working with a private app, you receive the error 403. How would you go about rectifying this error?
  28. When expiring your private app access tokens, how much of a time buffer can you set before the private app token is rotated?
  29. Select all that apply. Which of the following are the different ways you can filter the private app API call logs?
  30. You want to build a private app that can create new custom objects. What scope would you need to give this private app access to?
  31. What are the two things you need to pass along to the axios .get method?
  32. How can you find the API version number for the call you’re using?
  33. True or false? Most HubSpot APIs require you to use either OAuth or private app for authentication.
  34. What is the main purpose of an API rate limit?
  35. What is the main benefit of the HubSpot developer changelog?
  36. Fill in the blank: Apps using OAuth are subject to a limit of ____ requests every 10 seconds.
  37. Which API has a special limit of four requests per second per authentication token?
  38. What is the maximum number of private apps you can create in one account?
  39. Which of the following is NOT a benefit of using a Batch API endpoint?
  40. A customer wants a ticket’s data called on a certain web page to also be available in other parts of the integration. What could you do to ensure you’re not making too many of the same calls to the API?
  41. How does a webhook differ from a traditional API call?
  42. True or false? You can list an integration that receives error responses 7% of the time.
  43. What is the best strategy to avoid receiving 400-level errors?
  44. Which of the following resources would be best to use if you wanted to crowdsource a development question you have?
  45. Why is it best practice to add a delay between automatic, repeated API calls?
  46. What is the key difference between 400- and 500-level errors?
  47. True or false? You can use the dev docs to make test calls to the API.
  48. When would you likely receive a 477 error?
  49. Where would you submit a question regarding a JavaScript error you received within the HubSpot developer Slack?
  50. Fill in the blank: For an integration, the single required parameter is _____.
  51. Why is it recommended to use Axios when making HTTP requests?
  52. True or false? Using a try/catch is recommended in case the API call fails.
  53. What is the difference between a 200 response and a 201 response?
  54. Select all that apply. What are some of the query parameters for standard CRM objects.
  55. What is the purpose of a pug template?
  56. A bike repair shop customer wants to make it easier for their repair technicians to alert customers when a job has been completed. Their repair technicians are busy and don’t have time to send individual messages to their customers. Which of the following is the fastest, easiest potential solution you could offer?
  57. True or false? You must build a Node app to test API calls.
  58. Fill in the blank: const headers = { Authorization: `Bearer ${private_app_token} ‘Content-Type: ______ }
  59. Which of the following is the correct API endpoint for calling the Companies API?
  60. Which of the following is a key reason you should use node packages when building a basic Node app?
  61. What is the purpose of using OAuth in a one-to-many integration?
  62. What is NOT a key benefit of the HubSpot APIs being RESTful APIs?
  63. What HTTP method would you use if you wanted to read the tickets data from a HubSpot account?
  64. Select all that apply. Which of the following is a difference in the way developers and users interact with the CRM?
  65. Select all that apply. What is the purpose of having a pipeline view for deals and tickets?
  66. True or false? A timeline event can be associated with zero contacts.
  67. Where can you find pre-built Postman collections to view and test API calls?
  68. Fill in the blank: There can be many timeline events associated with a contact, but a timeline event cannot be associated with ____ contacts.
  69. Which of the following is NOT a benefit of using OAuth as your authentication flow?
  70. What must the user do to authenticate with OAuth?
  71. Fill in the blank: HubSpot API rate limits vary by authentication method and _____.
  72. What is the key benefit of using a webhook call in a workflow?
  73. What type of HTTP method is a batch API call?
  74. Which of the following is NOT a benefit of using the dev docs?
  75. Fill in the blank: HubSpot API errors are structured to be ______, but it’ll also be helpful for you to recognize some common error response codes when troubleshooting.
  76. A customer has a lot of inbox conversations coming in each day for their service reps. Their reps can sometimes miss questions because of how full it gets. They mainly work in Slack and would prefer if they could answer their customers’ questions without leaving that app. What part of the dev docs could help you create this connection point?
  77. What is NOT one of the benefits of the HubSpot developer community?
  78. How can you set up the idProperty to use a unique parameter, such as an email address, other than the contact record’s ID number?
  79. Which of the following is needed to call a custom property in your integration?
  80. What is the main purpose of a developer account?
  81. A customer wants to create an internal integration that’ll assign a contact directly to a chosen workflow. What type of integration would this be and what type of authentication method would you use?
  82. True or false? You must have a Professional or higher HubSpot account to purchase the API Add-on.
  83. Select all that apply. What are the benefits of having an app monitoring tool in your HubSpot account?
  84. What is the most common cause of a 404 error?
  85. Select all that apply. Which of the following topics can be found on the API-side of the dev docs?
  86. When creating a new object record, how is the new data sent along?
  87. Select all that apply. Which of the following is a benefit of using a promise when working with APIs in a Node App?
  88. In the HubSpot UI, where can you find the other objects associated to an individual contact record?
  89. What account permission level is required to create private apps?
  90. What is the main difference between the dev docs and the knowledge base (KB)?
  91. Which of the following is NOT a way to keep your access token safe?

 

 

 

 

What is the purpose of an .env file?

By

What is the purpose of an .env file?

 

  • To keep secret keys outside of source code, which often live in online code repositories
  • To set how the environment of the integration is structured
  • To configure automated actions in online code repositories
  • To host your JSON configurables

 

Explanation: The correct answer is To keep secret keys outside of source code, which often live in online code repositories. An .env file, short for ’environment’ file, is commonly used in software development to store configuration variables and sensitive information such as API keys, database credentials, or access tokens. The primary purpose of using an .env file is to keep these sensitive keys and configuration details separate from the source code. This practice helps mitigate security risks, especially when collaborating on projects or when source code is stored in online repositories like GitHub or Bitbucket, where it could be publicly accessible. By storing sensitive information in an .env file, developers can ensure that critical data remains private and is not inadvertently exposed in version-controlled code. Additionally, using an .env file allows for easy configuration management across different environments (e.g., development, testing, production) without modifying the source code itself. While the other options touch upon aspects of environment configuration or automated actions, they do not specifically address the primary purpose of an .env file, which is to securely manage and protect sensitive keys and configuration variables within software projects, making them less relevant to the core functionality of an .env file.

Which of the following is an example of how you interact with OAuth on a daily basis?

By

Which of the following is an example of how you interact with OAuth on a daily basis?

  • You sign into Facebook by tapping a message in your Facebook mobile app.
  • You sign into a shopping site with your Google login information.
  • You sign into your email by receiving a 6-digit code through text message.
  • You scan a QR code from your WhatsApp mobile app to log into WhatsApp on your computer.

 

Explanation: The correct answer is You sign into a shopping site with your Google login information. OAuth (Open Authorization) is a widely-used authentication protocol that allows users to grant third-party applications limited access to their resources without sharing their credentials directly. When you sign into a shopping site using your Google login information, you are leveraging OAuth in action. The shopping site, acting as the client application, redirects you to Google’s authentication server, where you input your credentials. Google then prompts you to authorize the shopping site to access certain information or perform actions on your behalf. Once you grant permission, Google issues an access token to the shopping site, allowing it to authenticate you and access the requested resources, such as your name and email address, without exposing your Google password to the site. This process enhances security by minimizing the exposure of sensitive credentials while still enabling seamless and convenient access to various services and applications. The other options describe different authentication methods, such as traditional username/password login, two-factor authentication via text message, or QR code scanning, but they do not directly involve OAuth-based interactions between third-party applications and authentication providers like Google, making them less relevant examples in the context of OAuth usage in daily activities.

What must the user do to authenticate with OAuth?

By

What must the user do to authenticate with OAuth?

  • Use a refresh token every few hours, so their app re-establishes a connection with their HubSpot account.
  • Submit a temporary authorization code for the integration to access their HubSpot account.
  • The user is given an access token they must use whenever they make an API call.
  • None of the above. The user only has to read the first authorization screen and permit or deny the integration from accessing their HubSpot account. The rest happens in the backend.

 

Explanation: The correct answer, ‘None of the above. The user only has to read the first authorization screen and permit or deny the integration from accessing their HubSpot account. The rest happens in the backend,’ accurately outlines the OAuth authentication process. When authenticating with OAuth, users are presented with an authorization screen where they can review the permissions requested by the integration and decide whether to grant or deny access to their account. Once the user provides consent, the integration receives an authorization code, which it exchanges for an access token and optionally a refresh token. The access token is then used by the integration to make API calls on behalf of the user, eliminating the need for the user to manually manage tokens or submit temporary codes. This process enhances security by ensuring that users have control over which integrations can access their data and simplifies the authentication flow by abstracting token management away from the user interface, making the experience more seamless and user-friendly.

What does delegated authorization mean?

By

What does delegated authorization mean?

 

  • It delegates the kind of authorization the user can use with the app, giving them the ability to update it as needed.
  • It creates a three-way bond between a user and two different apps, allowing apps to interact with each other and give the user a seamless experience.
  • It splits authorization between read and write, so that some users can only read and others can only write.
  • It creates a one-way bridge between a user and two different apps, so only the user can interact with both, but the two apps can’t interact with each other.

 

Explanation: The correct answer is It creates a three-way bond between a user and two different apps, allowing apps to interact with each other and give the user a seamless experience. Delegated authorization, also known as delegated authentication or OAuth delegation, refers to a process where a user grants permission to one application to act on their behalf with another application or service. In this context, it creates a three-way relationship involving the user and two separate applications, typically through the OAuth protocol. The user authorizes one application (the client) to access resources or perform actions on their behalf, and this authorization is delegated to another application (the resource server) through a secure authentication mechanism. This allows the two applications to interact with each other seamlessly, exchanging data or performing actions as if initiated directly by the user. Delegated authorization is commonly used in scenarios where multiple applications need to collaborate or share resources while maintaining security and user privacy. By delegating authorization between applications, users can enjoy a cohesive and integrated experience across different platforms or services without the need to manage separate credentials or authentication processes for each application. The other options describe variations of authorization mechanisms, such as user-defined authorization levels or one-way interactions between users and applications, but they do not accurately capture the concept of delegated authorization involving multiple applications interacting on behalf of the user, making them less relevant to the definition provided.

Which of the following is NOT a benefit of using OAuth as your authentication flow?

By

Which of the following is NOT a benefit of using OAuth as your authentication flow?

  • It adds more complexity to the integration’s authentication.
  • It allows an application to be portable.
  • It can be created inside of single HubSpot accounts.
  • It allows you to list your integration on the App Marketplace.

 

Explanation: The selected answer, ‘It can be created inside of single HubSpot accounts,’ is correct because it accurately identifies a characteristic that is not a benefit of using OAuth as an authentication flow. OAuth is an open standard for access delegation, commonly used for enabling secure and controlled access to resources without sharing passwords. While OAuth offers several benefits, such as enhanced security, delegated access control, and interoperability with third-party applications, it does not inherently allow the creation of integrations inside single HubSpot accounts. In fact, OAuth primarily facilitates the authorization process between different entities, such as the integration provider and the HubSpot platform, by securely exchanging tokens to grant access permissions. Integrations themselves are typically created and managed separately from the authentication flow and may involve additional steps, such as registering the integration, defining its functionality, and configuring access permissions. Therefore, understanding that OAuth primarily addresses authentication and access control aspects, rather than integration creation within single accounts, is essential for effectively leveraging OAuth in integration development and ensuring secure and compliant access to HubSpot resources.

True or false? In most situations, you’ll want to create a one-way bridge to dictate the flow of information between your integrations.

By

True or false? In most situations, you’ll want to create a one-way bridge to dictate the flow of information between your integrations.

 

 

Explanation: The selected answer, ‘False,’ is correct as it accurately refutes the assertion that in most situations, creating a one-way bridge to dictate the flow of information between integrations is desirable. In reality, the nature of data exchange between integrations can vary significantly based on the specific requirements and use cases of the integration scenario. While one-way bridges, which facilitate unidirectional data flow from one integration to another, may be suitable for certain scenarios where data sharing occurs predominantly in one direction, such as data replication or backup processes, they may not be optimal for all integration scenarios. In many cases, bidirectional or multi-directional data synchronization may be necessary to ensure that updates made in one integration are reflected in the other and vice versa, fostering a more interconnected and synchronized ecosystem of applications and data sources. By enabling bidirectional data flow, organizations can achieve real-time data consistency, enhance collaboration across systems, and optimize business processes that rely on accurate and up-to-date information exchange. Therefore, while one-way bridges may be suitable for specific use cases, it’s essential for developers and architects to assess the requirements of each integration scenario carefully and implement the most appropriate data synchronization approach to meet the needs of the organization effectively.