According to the Graph API, the notification endpoint must be able to respond to validation requests, and if validation fails, 400 error requests are returned.
See this link for more details:
Hope this helps.
If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.