A hospital is planning to rewrite its on-premise patient registration system. Their current system is HIPAA-compliant as well as ISO 27018-compliant. They need to maintain these same certification levels after the rewrite. Their new app also needs to sync PII (personally identifiable information) data with their Salesforce org.What Heroku Enterprise solutions should an Architect propose?

Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Shield Heroku Connect to sync to Salesforce.

Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Apache Kafka on Heroku to stream from the Salesforce org.

Build the app in the Common Runtime, use a Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Shield Heroku Connect to sync to Salesforce.

Build the app in a Private Space with a Private Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.Which solution should an Architect recommend to meet these requirements?

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Create the application in a Private Space with default options.

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Create the application with Internal Routing enabled, in a Private Space.

Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

A client has data in a production Heroku Postgres database, and needs to quickly get access to a subset of that data for reporting needs.Which two features does Heroku Dataclips provide to enable this? (Choose two.)

JSON export of query results, with CORS support

A simple REST API access to query results

Postgres dump file of query results

Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku?(Choose three.)

An identity provider with built-in support for Heroku

Administrative permissions on the selected identity provider

An identity provider with built-in support for Heroku

An existing Heroku account for each user

At least one valid SSO certificate

Administrative permissions on the selected identity provider

Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data.Which Heroku architecture should an Architect recommend?

A Shield Private Space with a Shield Postgres add-on.

Common Runtime with secure, isolated containers for running the app's code.

A Private Space restricted to a set of trusted IP ranges.

A Shield Private Space with a Shield Postgres add-on.

A Private Space with Internal Routing enabled on the app.

A client wants to add CPU-intensive video processing functionality to their Heroku web application.Which two strategies should an Architect recommend for implementing this functionality? (Choose two.)

Add a new process type for worker dynos that pull video processing jobs from a queue.

Attach a video processing add-on from the Heroku Elements Marketplace to the application.

Add a new process type for worker dynos that pull video processing jobs from a queue.

Attach a video processing add-on from the Heroku Elements Marketplace to the application.

Delegate video processing tasks to the app's staging version to remove load from the production app. D. Divide each video processing task across multiple web dynos to mitigate added CPU load.

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR).What should an Architect advise UC regarding data residency in this scenario?

Heroku support can configure add-ons for specific data residency needs.

Heroku does not control where add-on providers store data.

Heroku support can configure add-ons for specific data residency needs.

Heroku guarantees the physical location of its control surface APIs.

Data residency for add-ons is covered under Salesforce's GDPR compliance.

An app uses a queue of worker dynos to perform complex image processing, but the worker dynos are occasionally running out of memory when performing the processing. All of their dynos are currently standard-1x dynos.What should an Architect recommend in this scenario?

Change the type of dynos to standard-2x.

Break up the image processing across multiple dynos.

Move the app to a Private Space.

Change the type of dynos to standard-2x.

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

Heroku Shield Private Spaces and Heroku Shield Connect

Heroku Private Spaces and Private Space VPN Connections

Heroku Private Spaces and Private Space Peering

Heroku Shield Private Spaces and Internal Routing

Part of a client's design is the ability to easily share between two applications running on Heroku.What should an Architect recommend?

Attach a single storage add-on, such as Heroku Postgres, to both applications.

Create Foreign Data Wrappers to expose the tables from one database to another.

Provision Heroku Connect to sync the data into a custom object in Salesforce.

Provision Apache Kafka on Heroku to easily stream the data between the two apps.

A healthcare services client is requesting an architecture for a set of applications: one is a marketing application, and the other two are of customer service applications that allow for customers to interact with their healthcare records. The marketing application must be able to scale up within seconds in response to traffic spikes. The client wants to be able to deploy each of these applications to the U.S. East Coast and EMEA.Which applications should be deployed into which Heroku runtime?

The marketing application into Private Spaces; customer service applications into Shield Private Spaces

The marketing application into the Common Runtime; customer service applications into Shield Private Spaces

The marketing application into the Common Runtime; customer service applications into Private Spaces

The marketing application into Private Spaces; customer service applications into separate Private Spaces

For which two use cases should an Architect recommend using Heroku Redis? (Choose two.)

Providing long-term data warehousing

Universal Containers experienced an outage with their production Heroku Postgres database due to a fault with the underlying infrastructure. The database was unavailable for an hour. The database is on the Standard-0 plan.Which two actions should an Architect recommend to mitigate such database failures and outages in the future? (Choose two.)

Create a follower database that uses the same plan as the leader.

Migrate the database to a larger Standard-tier plan.

Create a follower database that uses the same plan as the leader.

Migrate the database to a Premium-tier plan.

Migrate the database to a larger Standard-tier plan.

Create a fork of the database that uses the same plan as the leader.

A web application on Heroku wants to surface Salesforce dat a. All users of the web application will:1) Authenticate using SSO with Salesforce.2) Have user records in Salesforce.What architecture should be recommended in order to maintain the Salesforce security model already in place?

Use Heroku Connect to sync the Salesforce data and Salesforce security model to Heroku Postgres.

Have the application query Salesforce data and the security model directly using a cached admin credential.

Use Heroku Connect, with a per-user authentication model, to sync the Salesforce data to Heroku Postgres.

Have the application query Salesforce data directly through the Salesforce APIs as the running user.

A client wants to create a scalable set of microservices that communicate with each other, where multiple microservices have a public REST API.Which architecture strategy allows this on Heroku?

Each microservice is a separate private space. The microservices communicate by using DNS Service Discovery.

Each microservice is a separate Heroku app. The microservices communicate by using Apache Kafka as a message bus.

Each microservice is a separate process type in a single Heroku app. The microservices communicate by using Redis as a message bus.

Each microservice is a separate private space. The microservices communicate by using DNS Service Discovery.

Each microservice is a separate process in a single Heroku app. The microservices communicate by using shared memory.

Universal Containers has a Heroku Private Space with a VPN connection to their on-premise network.They want their remote employees to be able to access their Heroku applications using a VPN connection only.Which solution should an Architect recommend?

Configure a second VPN connection for the Private Space that remote employees can use.

Clone the Heroku applications to a second Private Space, and configure its VPN for remote employees.

Enable remote employees to VPN into the company's on-premise network.

Configure a second VPN connection for the Private Space that remote employees can use.

Add all remote employees to an Enterprise Team, and configure it to connect to the Private Space via SSO.

Universal Containers (UC) has configured SSO for their Heroku Enterprise Team using an identity provider (IdP).When a new employee joins the company, how should their Heroku account be created?

A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.

The employee should create a new Heroku account with the exact email address listed in their IdP record.

No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.

An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

A client wants to use Heroku Connect to sync data bidirectionally between a Salesforce org and a Heroku Postgres database.In this scenario, which two are advantages to setting a custom External Identifier field in the Heroku Connect mapping? (Choose two.)

External IDs prevent the creation of orphaned duplicates in Heroku Postgres.

External IDs are required to enable bidirectional synchronization.

External IDs simplify the mapping of polymorphic relationships in the Salesforce org.

External IDs improve speed when inserting multiple related objects.

External IDs prevent the creation of orphaned duplicates in Heroku Postgres.

External IDs are required to enable bidirectional synchronization.

Universal Containers (UC) recently acquired another company, International Shipping. Each company has its own Salesforce org, and UC wants those orgs to remain separate for the foreseeable future.Given this scenario, which Heroku feature should an Architect recommend to provide additional value to UC following the acquisition?

Heroku Connect can be used to synchronize data directly between the two Salesforce orgs.

Both orgs can be attached to the same Heroku application as an add-on to ensure data residency in the application's region.

Heroku External Objects can expose read-only data from both Salesforce orgs to Heroku Postgres.

A Heroku Postgres database can sync data from both orgs for advanced querying capabilities.

Universal Containers uses Heroku Connect to sync their Salesforce org's data with Heroku Postgres.Periodically, they write a very large set of changes that needs to be fully replicated between these two systems.Which two sets of actions should an Architect propose? (Choose two.)

Make the changes directly in Heroku Postgres. Then allow Heroku Connect to expose them to the Salesforce org using Heroku External Objects.

Make the changes directly in Heroku Postgres. Then allow Heroku Connect to use the Bulk API to sync them to the Salesforce org.

Make the changes directly in Heroku Postgres. Then allow Heroku Connect to expose them to the Salesforce org using Heroku External Objects.

Use Data Loader to write the changes to the Salesforce org. Then allow Heroku Connect to sync them to Heroku Postgres.

Make the changes directly in Heroku Postgres. Then allow Heroku Connect to use the Bulk API to sync them to the Salesforce org.

Pause Heroku Connect then make the changes directly in the Salesforce org. Then allow Heroku Connect to use the Salesforce Bulk API to sync them to Heroku Postgres.

At Universal Containers (UC), a developer named Yuichiro wrote a PHP application that, in production, uses a MySQL database. Yuichiro is onboarding Mary, a new UC developer, who is setting up her development environment. Yuichiro asks Mary to:1) install the related PHP libraries manually so the application will run; 2) use MongoDB, instead of MySQL, in the development environment.According to the Twelve-Factor methodology, which changes should an Architect recommend?

Persist code dependencies in the application's production database. Use the same type of database locally to ensure that the dependencies are accessible.

Explicitly declare code dependencies in the application's environment variables and use the same type of database in both development and production.

Persist code dependencies in the application's production database. Use the same type of database locally to ensure that the dependencies are accessible.

Recursively determine code dependencies on application startup and maintain separate Git branches for the MongoDB- and MySQL- compatible versions of the application.

Explicitly declare code dependencies in the application's source and use the same type of database in both development and production.

A client wants to secure their web application using SSL/TLS. They do not have specific requirements regarding using a particular version of SSL/TLS.Which two Heroku features should an Architect recommend as options? (Choose two.)

Automated Certificate Management

A client wants to perform complex processing on large data sets in Salesforce. The data is confidential, but it does not have advanced compliance requirements.What Heroku Enterprise features should an Architect recommend in this scenario?

Shield Private Spaces and Heroku Shield Connect

Shield Private Spaces and Heroku External Objects

Private Spaces and Heroku Connect

Private Spaces and Heroku External Objects

Shield Private Spaces and Heroku Shield Connect

A Heroku application uses Heroku Connect to integrate with data from a Salesforce org. Since then, several fields from the Salesforce objects that were mapped using Connect have been removed. As a result, the development team will reload the mapping using Heroku Connect.What is an implication of reloading the mapping?

The mapped tables in Heroku Postgres will continue to store the previously synchronized data, and synchronization will restart normally.

The mapped tables in Heroku Postgres will be truncated as part of the reload action. The data in removed fields will be lost, and synchronization will pause until manually restarted.

The mapped tables in Heroku Postgres will continue to store the previously synchronized data, but synchronization will pause until manually restarted.

The mapped tables in Heroku Postgres will be truncated as part of the reload action. The data in removed fields will be lost, and synchronization will restart normally.

Universal Containers has recently experienced a higher volume of traffic on their mobile app hosted on Heroku. When Universal Containers was running 4 standard-2x dynos with 1 GB RAM each, they encountered multiple H12 ("request timeout") errors. The app never consumed more than 800 MB of RAM. They then switched to performance-m dynos, with 2.5 GB RAM, and set autoscaling to a maximum of 2 dynos. However, they still encountered H12 ("request timeout") errors.What remediation should an Architect recommend to alleviate this problem?

Move long-running tasks to worker dynos.

Add a logging add-on from the Elements marketplace.

Upgrade to performance-L dynos with 14 GB RAM.

Replace autoscaling with a manual scaling option of 2.

A customer wants to sync data between their Salesforce org and Heroku Postgres.Which two limitations should an Architect remember when recommending Heroku Connect?(Choose two.)

Heroku Connect can only access fields and objects that its associated Salesforce integration user can access.

Heroku Connect does not provide an API.

Heroku Connect can only access fields and objects that its associated Salesforce integration user can access.

Heroku Connect does not support all Salesforce objects and fields.

Heroku Connect does not provide an API.

Heroku Connect cannot sync custom objects.

A healthcare client is creating a web portal for their customers on Heroku, which is sourced from a Salesforce instance. Some of the Salesforce data they wish to display falls under HIPAA compliance, and their auditors have determined this data must be stored encrypted-at-rest. To satisfy this requirement, they have enabled Platform Encryption on Salesforce.They are investigating Heroku Shield Private Spaces, Shield Dynos, Shield Postgres, and Shield Heroku Connect.How will Shield Heroku Connect interact with the encrypted fields in Salesforce?

Shield Heroku Connect will be able to synchronize data from fields in Salesforce without additional customization, but any writes will need to be encrypted using the Salesforce encryption key first before being written.

Shield Heroku Connect will be able to access only cypher text in the fields from Salesforce. They will need to import the encryption key from Salesforce to decrypt to store in Shield Postgres.

Shield Heroku Connect will be able to synchronize data from fields in Salesforce without additional customization, but any writes will need to be encrypted using the Salesforce encryption key first before being written.

Shield Heroku Connect requires customization on the Salesforce side to decrypt the data before transmitting to Heroku.

Shield Heroku Connect will be able to synchronize data bidirectionally without additional customization.

A financial reporting application, hosted on an on-premise server, uses a native library (wkhtmltopdf) to convert its HTML reports into PDFs. The app is being migrated to Heroku.What option should an Architect recommend to enable the Heroku application to use wkhtmltopdf?

Use a custom buildpack to install wkhtmltopdf using apt.

Ensure that the Heroku app fetches the wkhtmltopdf library from cloud storage on dyno restart.

Install the dependency using sudo apt install wkhtmltopdf from .profile in the project root.

Continue to host wkhtmltopdf on-premise, and build a REST API so the library can be invoked from the Heroku app.

Use a custom buildpack to install wkhtmltopdf using apt.

A client is running an app on 20 Standard-2x dynos. They are noticing highly variable performance when the application is experiencing a heavy load.Which two suggestions should an Architect make in this scenario? (Choose two.)

Configure the app to use Performance dynos.

Add additional Standard-2x dynos.

Configure the app to use Standard-lx dynos.

Configure the app to use Performance dynos.

Install a performance monitoring tool.

Add additional Standard-2x dynos.

Universal Containers (UC) uses Apache Kafka on Heroku to stream shipment inventory data in real time throughout the world. A Kafka topic is used to send messages with updates on the shipping container GPS coordinates as they are in transit. UC is using a Heroku Kafka basic-0 plan. The topic was provisioned with 8 partitions, 1 week of retention, and no compaction. The keys for the events are being assigned by Heroku Kafka, which means that they will be randomly distributed between the partitions.UC has a single-dyno consumer application that persists the data to their Enterprise Data Warehouse (EDW). Recently, they've been noticing data loss in the EDW.What should an Architect with Kafka experience recommend?

Use Heroku Redis to store message receipt information to account for "at-least" once delivery, which will guarantee that messages are never processed more than once. Scale up the consumer dynos to match the number of partitions so that there is one process for each partition.

Enable compaction on the topic to drop older messages, which will drop older messages with the same key.

Upgrade to a larger Apache Kafka for Heroku plan, which has greater data capacity.

Use Heroku Redis to store message receipt information to account for "at-least" once delivery, which will guarantee that messages are never processed more than once. Scale up the consumer dynos to match the number of partitions so that there is one process for each partition.

A client wants to use Heroku Connect to sync data from a Heroku Postgres table to a Salesforce org.The client only needs to sync a specific subset of the rows in the table.How should this be performed?

Place Sharing Rules on the records, and restrict visibility to only those rows that are needed.

Add a mapping filter to the table when setting up the sync, and select appropriate criteria from the list.

Filter the data in the database, and provide an alternative table or view for use in the sync.

Use the Heroku Connect Mapping Query Editor, and add filters to the query.

Place Sharing Rules on the records, and restrict visibility to only those rows that are needed.

A client requires that their web application's logs are accessible only from within the same isolated network as the application itself.Which solution should an Architect recommend in this scenario?

Deploy the application to a Private Space. Connect the Private Space to an on-premise logging system using VPN and specify it as a log drain.

Deploy the application to a Private Space. Provide the Private Space's stable outbound IPs to Heroku's Logplex router to block all logs originating from the Private Space.

Deploy the application to a Shield Private Space with Private Space Logging enabled. Forward logs to a destination within the Shield Private Space.

Deploy the application to a Private Space. Connect the Private Space to an on-premise logging system using VPN and specify it as a log drain.

Deploy the application to a Private Space. Enable Internal Routing to prevent the application's logs from being forwarded outside of the Private Space.

A client has a web application that persists data to a local JSON file. They are migrating the application to Heroku. In order for the application to conform to the Twelve-Factor methodology, what changes should an Architect recommend?

The application should persist the data to a database add-on.

The application should persist the data to a local SQLite database.

The application should use at least 2 dynos to ensure that the JSON file is highly available.

The application should be stateless and therefore not persist data at all.

Which is a characteristic of an add-on that is "available" for applications in Private Spaces but not "installable" in a Private Space?

The add-on will always run in the same region, but not in the same Private Space, as the provisioning application.

The add-on always runs in the same Private Space as the provisioning application.

The traffic between the provisioning app and the add-on will travel across the public Internet.

The add-on will always run in the same region, but not in the same Private Space, as the provisioning application.

The add-on's data will always be stored in the same Private Space as the provisioning application.

A client's Heroku application is publishing messages to an instance of Apache Kafka on Heroku.What does a second Heroku application need to do to consume those messages?

Subscribe to the Kafka partition(s) that the messages are being published to.

Join a consumer group that also includes the publishing application.

Subscribe to the Kafka topic(s) that the messages are being published to.

Convert the publishing application into a stream processor.

A client provisions a Heroku Postgres database in the EU region.Which two services related to Heroku Postgres are located in the U.S.? (Choose two.)

Heroku Postgres Continuous Protection backups

Snapshots created with Heroku PGBackups

Salesforce Certified Heroku Architecture Designer Practice Test 1

Question 1 / 40

Universal Containers needs to write their Heroku application's logs to two destinations: an onpremise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.

What should an Architect recommend in this scenario?

Publish all logs to Apache Kafka on Heroku, and create a separate app that consumes and distributes log messages.

Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations.

Add a logging library to the application source that sends all logs directly to both destinations.

Write all logs to stdout, and configure a separate log drain for each destination.

Comment (0)

Salesforce Certified Heroku Architecture Designer Practice Test 1

Question

Salesforce Certified Heroku Architecture Designer Practice Tests

Practice Tests