Which statement is true about webhook URL authentication?

According to IBM Instana's integration documentation, webhook notifications support Basic Authentication by embedding the username and password into the URL as part of the standard format (https://user:password@hostname/path). The exact extract from IBM states: "For webhooks requiring basic authentication, username and password must be specified by prepending these values to the webhook hostname in the URL." This approach is supported by most HTTP libraries and ensures ease of integration with third-party endpoints. Instana also allows other advanced authentication mechanisms for webhooks, but this is the documented approach for standard Basic Auth scenarios. Additional header configuration (B) is possible but not required for basic authentication, and option D is incorrect as Basic Auth is explicitly supported (and documented). Limiting to only the Authorization header (C) oversimplifies the supported authentication workflows.