Which two Heroku features require Heroku Enterprise Teams? (Choose two.)

Fire-grained app access controls

A client runs an application on a background worker dyno. The application allows its users to request personalized information as a PDF. At peak usage, the app processes millions of requests at once. The resulting number of requests has caused a bottleneck that is impacting its performance.Which two solutions can an Architect recommend to resolve the bottleneck and improve performance? (Choose two.)

Increase the number of workers to consume the job faster.

Move the application to a Private Space.

Increase the number of workers to consume the job faster.

Move the application to a Private Space.

Add Heroku Redis as a job queue.

Add a CDN add-on from the Elements marketplace.

A client's application needs to run in a European country for data residence purposes.What is a consideration in this scenario?

European regions are only available for applications running in Private Spaces.

When a dyno is cycled, its replacement might run in a different region.

European regions are only available for applications running in Private Spaces.

Heroku Postgres backup snapshots and dataclips are always stored in the U.S.

There is no guarantee that a Heroku Postgres database will be created in the same region as the application that provisions it.

Universal Containers wants to limit the total cost of their Heroku usage while they're getting started on the platform. To accomplish this, they are considering replacing certain add-ons with comparable open-source components, but the development team doesn't want to lose access to certain features that the add-ons provide.Which option should an Architect recommend for reducing add-on costs without affecting feature availability?

Remove data store add-ons from the staging and development versions of the applications.

Remove aliases for high-cost add-ons.

Share a single instance of a compatible paid add-on across multiple applications.

Remove data store add-ons from the staging and development versions of the applications.

A hospital wants to build a mobile app that allows patients to check the status of submitted insurance claims, which the hospital stores in Salesforce Health Cloud. The app's back end will run on Heroku.Which two measures should an Architect recommend to help ensure that the app is compliant with HIPAA? (Choose two.)

Use Heroku Shield Connect to sync claim data from Salesforce to a Heroku Postgres database.

Ensure that the back-end application's code encrypts all claim data before writing it to a Heroku Postgres database.

Use Heroku Shield Connect to sync claim data from Salesforce to a Heroku Postgres database.

Use only Heroku Shield Postgres databases to store claim data outside of Salesforce Health Cloud.

Ensure that the back-end application's code encrypts all claim data before writing it to a Heroku Postgres database.

Ensure that the mobile app can only run when on the hospital's intranet, which is connected to the back end's Shield Private Space via VPN.

Universal Containers (UC) has a Heroku application that runs in Virginia, in the U.S., that uses Apache Kafka on Heroku. They have deployed a copy of the app in Asi a. Now, both apps need a messaging backbone that will support multi-region distribution.What is the least complex architecture that an Architect should recommend?

Use Heroku's multi-tenant Kafka Basic plan.

Deploy a multi-region version of Apache Kafka on Heroku.

Use Heroku's multi-tenant Kafka Basic plan.

The app in Asia should write to the Kafka instance in Virginia.

Provision a second Kafka add-on in Asia. Each instance of the app should sync with each other.

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.What should an Architect recommend UC do to secure their database to only trusted locations?

Add a Trusted IP range to the Heroku Postgres configuration.

Move the database and the app into the Private Space.

Add a Trusted IP range to the Heroku Postgres configuration.

Set up a VPN from the trusted locations to the app.

Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.

Universal Containers (UC) wants to allow its developers to only use certain add-ons. UC enables Addon Controls for Enterprise Teams and adds the add-ons they wish to allow to the list. There is an existing set of add-ons attached to applications, which are NOT on the list.What happens to these add-ons?

They are flagged for removal, and the developers are notified.

They are deleted, and all data is backed up and saved.

They are added to the allowed add-ons list.

They are added to the exception list and not affected.

They are flagged for removal, and the developers are notified.

Universal Containers has an application running in the Common Runtime that uses Heroku Redis. The data in Heroku Redis needs to be accessed by a third-party application.Which connection method should an Architect recommend to ensure the security of the data as it moves from Heroku Redis to the third-party application?

Only allow access to Heroku Redis through an SSH connection.

Use stunnel to secure the connection between Heroku Redis and the third-party application.

Set up SSL Certificates on Heroku and the third-party application.

Only allow access to Heroku Redis through an SSH connection.

Set up both a VPN and a VPC between Heroku and the third-party application.

Which Heroku runtimes provide keystroke logging?

Private Spaces and Shield Private Spaces

The Common Runtime, Private Spaces, and Shield Private Spaces

Private Spaces and Shield Private Spaces

Keystroke logging is not available on Heroku

A client is planning to deploy an application to Heroku. The client's IT department requires all applications to be hosted from Australia, where their main office is located. Regulators in Australia require keystroke logs of all engineers who create interactive sessions for the application.Which should an Architect recommend in this scenario?

Deploy the application to a Shield Private Space in the Sydney region.

Deploy the application to a Private Space in the Sydney region with Private Space Logging enabled.

Deploy the application to the Common Runtime in the Sydney region.

Deploy the application to a Shield Private Space in the Sydney region.

Deploy the application to a Private Space in the Sydney region with Internal Routing enabled.

Which two statements describe characteristics of Private Space Logging? (Choose two.)

Log entries are forwarded as HTTPS POST requests.

Log entries can be forwarded to up to three logging services.

Log entries are forwarded as HTTPS POST requests.

Log entries are collated and forwarded by Heroku's Logplex router.

Log entries can be forwarded to up to three logging services.

Log entries can be forwarded to only one logging service.

A client wants to migrate their on-premise application to Heroku. The application maintains a local, in-memory cache for its data store to improve performance.What should an Architect advise the client about running the application on Heroku?

The application should declare its in-memory cache as a separate process type to preserve it across deploys.

All of the application's web dynos will share a single in-memory cache.

The application should replicate its in-memory cache to a local disk to preserve it across deploys.

The application's in-memory cache might be cleared at any time.

Which two conventions of the Heroku platform reflect the Twelve-Factor methodology's recommendation to "execute the app as one or more stateless processes?" (Choose two.)

Heroku apps define process types in a Procfile.

A Heroku app's config vars are deleted on deploys and app restarts.

Log messages from each of an app's dynos are kept separate from each other.

Heroku apps define process types in a Procfile.

A Heroku app's config vars are deleted on deploys and app restarts.

Dynos have an ephemeral filesystem.

A client's Heroku web application displays data that is fetched from a back-end file storage system.The client now wants this data to be viewable, but not editable, from their Salesforce org.Which recommendation should an Architect make in this scenario?

Replicate the files to tables in a Heroku Postgres database, and use Heroku Connect to synchronize the tables to the Salesforce org.

Store all file URLs in a Heroku Postgres table, and use Heroku Connect to synchronize the table to the Salesforce org.

Replicate the files to tables in a Heroku Postgres database, and use Heroku External Objects to expose the tables to the Salesforce org.

Replicate the files to the application's local filesystem, and use worker dynos to periodically sync them to the Salesforce org.

When creating a Private Space, what is a valid reason to specify a region other than the default region?

Running an application closer to its intended users can reduce latency.

Private Spaces restrict inbound traffic to the current region.

Heroku pricing varies by region.

Running an application closer to its intended users can reduce latency.

Available compute resources vary by region.

Universal Containers (UC) is opening offices in Japan and Germany. This will allow them to serve new customers in Asia and in Europe. UC is concerned about application latency for their new customers, especially because the app serves large amounts of dynamic content.Which Heroku Enterprise feature should an Architect recommend to alleviate this concern?

Create Salesforce orgs in each region and use Heroku Connect to link them.

Deploy instances of their applications into Private Spaces in Tokyo and Frankfurt.

Deploy a globally-distributed CDN in front of the application.

Create a Heroku Pipeline to mirror the app and its data in each region.

A customer's Heroku Redis instance regularly reaches its storage limit. Besides upgrading to a bigger plan, what solution should an Architect recommend for this scenario?

Explore a different key eviction scheme.

Create a fork of the primary Heroku Redis instance.

Migrate the data to a Heroku Postgres database

Failover to ephemeral filesystem for the running dyno

A client has an existing Heroku Connect integration. They would like to extend the integration to ad Attachments (which are related binary files) from a mapped Salesforce object. What advice should an Architect provide?

Heroku Connect does not support binary files: therefore migration must be done using another method

A file storage system needs to be added to the Heroku Connect mapping to sync binary files.

Heroku Connect does not support binary files: therefore migration must be done using another method

A column of type Binary String must be added manually to the Heroku Postgres table and amend Attachments before binary transfer can be enabled.

An additional object mapping must be added for the Attachments table in Heroku Connect.

Universal Containers is preparing to deploy a high-volume production web application to the Heroku Common Runtime. Which two best practices should an Architect recommend for large-scale load testing of the application? Choose 2 answers.

Open a ticket with Heroku support for approval.

Ensure that the application runs on Performance-tier dynos

Open a ticket with Heroku support for approval.

Move the apps into a Private Space to provide an isolated test environment

Disable autoscaling to prevent application startup overhead from skewing results

Ensure that the application runs on Performance-tier dynos

To satisfy the requirements of an upcoming compliance audit, a client must provide a record of all interactive commands run against a production application in the last six months. Which Heroku feature should an Architect recommend to help with this use case?

Heroku Shield keystroke logging

SSH tunneling using Heroku Exec

Universal Containers has 3 Heroku apps in its microservices and requires that logs for all of the apps be stored in the same location for analysis and alerting purposes. How would they achieve this?

Set up the 3 apps as producers for Apache Kafka on Heroku and save their logs to Kafka

Send logs from each app to their own Heroku redis Store, and then combine all logs in a fourth master store.

Set up the 3 apps as producers for Apache Kafka on Heroku and save their logs to Kafka

Set up a file on the filesystem and share it with all the apps

Install a logging add-on for one app and attach it to the other two apps

Universal Containers runs an application in a Private Space in the Frankfurt region. The majority of the application's users (based in Asia) are reporting issues related to high latency. What should an Architect recommend to remediate this issue cost-effectively?

Create a new Private Space in the Tokyo Region, and deploy the application to the region. Delete the existing Private Space.

Add the Tokyo region to the existing Private Space. Update the application's configuration to move it to Tokyo region.

Deploy the application to the Common Runtime and select Tokyo as the region. Delete the existing Private Space.

Create an additional Private Space in the Tokyo region. Deploy an additional instance of the application to the region.

Create a new Private Space in the Tokyo Region, and deploy the application to the region. Delete the existing Private Space.

What are two features of a Shield Private Space that has Private Space Logging enabled? Choose 2 answers.

Applications in the shield Private Space do not forward logs to Heroku's Logplex router.

All applications in the Shield Private Space forward their logs to the same destination.

Logs must be forwarded to a destination either within the Shield Private Space or within a VPN that includes the Shield Private Space.

Applications in the shield Private Space do not forward logs to Heroku's Logplex router.

Applications in the Shield Private Space forward logs to a separate, high-compliance instance of Heroku's Logplex router

All applications in the Shield Private Space forward their logs to the same destination.

Universal Containers needs to integrate three separate apps: a Salesforce app, an app developed to Heroku, and a custom-built app hosted on-premise. Each app needs to send and receive data from any of the other apps. Which two integration options should an Architect recommend that can connect all three systems in a fire-and-forget pattern? Choose 2 answers.

Publish and subscribe to Salesforce platform events

Publish and subscribe to topics on Apache Kafka on Heroku

Publish and subscribe to Salesforce platform events

Use Heroku External Objects as a data proxy

Use Heroku Connect to synchronize all systems with Heroku Postgres

Publish and subscribe to topics on Apache Kafka on Heroku

Universal Containers has a Heroku app that uses Heroku Connect to sync data with their Salesforce org. The app makes frequemt updates to the same records over short period of time, and sync speeds have begun to worsen. An Architect recommends using Heroku Connect's Merged Writes algorithm to improve sync speeds. What are 2 implications of using the Merged Writes algorithm in this scenario?

Relationships such as circular dependencies are known to cause issues.

The Merged Writes algorithm does not support using the Salesforce Bulk API.

Relationships such as circular dependencies are known to cause issues.

The Merged Writes algorithm does not support using Salesforce SOAP API

The Merged Writes algorithm is more likely to approach Salesforce API rate limits.

The Merged Writes algorithm does not support using the Salesforce Bulk API.

A client is building a collection of Heroku applications that will be audited regularly. To comply with the audit, it must be guaranteed that the applications all forward thei logs to the same, single destination. Which solution meets this requirements?

Deploy all the applications to the same Shiekld Private Space with Private Space Logging enabled

Deploy all of the applications to the Common Runtime, and attach the same ininstance of a logging add-on to all of them.

Deploy all the applications to the same Shiekld Private Space with Private Space Logging enabled

Deploy all the applications to the Common runtime, and add the same log drain URL to all of them.

Deploy all the applications to the same Private Space with Logplrx disabled.

Universal Containers wants to set up communication between multiple public-facing Heroku web applications hosted on the Common Runtime. Which solution should an Architect recommend?

Move the application to a Private Space, and enable Internal Routing for them

Bind all of the Heroku applications to the same port

Configure a worker process type for each application that listens for incoming remote procedure calls.

Send requests to each application's URL using HTTP/HTTPS.

A customer needs to test a database schema migration. Which approach should an Architect recommend?

Fork the production database, and run the migration and tests against the fork

Detach the Heroku Postgres add-on. and run the migration and tests against the database.

Create a follower database, and run the migration and test against the follower database

Place the app into maintenance mode, and then perform the tests

Dataclips allows a user to choose which datastore to query. Which type of datastore is supported?

Any datastore, provided that you have the connection URL

Any datastore connected via Heroku Connect

According to the Twelve-Factor methodology, which best practice helps minimize the gap between development and production?

Using the same backing services in all of an application's environments.

Configuring application logging to write stdout.

Executing long-running tasks as background processes.

Writing processes that are fast to start up and gracefully shut down

A client has a Heroku app that uses Apache Kafka on Heroku. They want to refactor the app into 2 distinct apps that will both continue to use Kafka (because they probably don't have so much to do in their life). Based on this refactoring, what should an Architect recommend?

Attach the existing Kafka add-on to both apps

Ensure that the apps consume mutually excliusive sets of Kafka topics

Attach the existing Kafka add-on to both apps

Designate one app as a producer and the other as a consumer

Attach the existing Kafka add-on to one app and attach a new Kafka add-on to the other app

Which 2 users can remove an application from a Heroku Enterprise Team?

An administrator of the Enterprise Team

A user with the "manage" permission for the app

An administrator of the Enterprise Team

A user with the "manage" permission for the app

A user with the "deploy" permission for the app

A user with the "operate" permission for the app

An app has two web dynos, Dyno A and Dyno B. The app receives a request, which is routed to Dyno

The request is routed to Dyno A if it has finished handling the first request

A second request is sent from the same client. Which Dyno is the request routed to?

The request is routed to Dyno A if it has finished handling the first request

The request is routed randomly to Dyno A or Dyno B

The request is definetly routed to Dyno A.

The request is definetly routed to Dyno B.

Which two features of the Heroku platform require Private Spaces? Choose 2 answers.

Automated Certificate Management

Universal Containers (UC) has an on-permise application for reporting damage to their shipments.They want to migrate the application to Heroku. The damage reporting process includes uploading one or more pictures to the application which temporarily stores them on the local system. After the report is submitted, a case is created in UC's Salesforce org for processing, amd the images are deleted from the file system. The application's configuration is read from environment variables that are specified in the system user's profile. The application writes its logs to rotating files using an open-source library. Which two recommendations should an Architect make to ensure that the application runs correctly on Heroku? Choose 2 answers.

Load the application's configuration from its source code instead of using environment tables

WritP Inns tn stdmit instead nf writinn thpm tn the flip svstpm

Load the application's configuration from its source code instead of using environment tables

Use an external object storage service for temporary image uploads

Run the application in a Private Space to enable communication with UC's Salesforce org

WritP Inns tn stdmit instead nf writinn thpm tn the flip svstpm

A client wants to create a set of applications that all communicate with each other. Only one of the applications should be accessible from the public internet. This application will act as an API gateway and route requests to the interbak applications using HTTPS. Which architecture should an Architect recommend?

Create all of the apps in a Private Space Create the internal apps with Internal Routing enabled.Create the gateway app as a web app

Create all of the apps in a Private Space. Configure the Private Space's trusted IP ranges to only permit requests from within the Private Space

Create the API gateway application in the Common Runtime. Create all of the internal apps in a Private Space.

Create all of the apps in the Common Runtime. Ensure that the internal apps do not define a web process type.

Create all of the apps in a Private Space Create the internal apps with Internal Routing enabled.Create the gateway app as a web app

Salesforce Certified Heroku Architecture Designer Practice Test 2

Universal Containers is developing a new application that has a lightweight Node.js front end. They will also be using a Java-based API, which combines data with Salesforce customer dat a. All of the data, and the API, is highly confidential.

What should an Architect suggest to enforce security?

Become a Premium Member for full access

Unlock Premium Member

Salesforce Certified Heroku Architecture Designer Practice Test 2

Question

Salesforce Certified Heroku Architecture Designer Practice Tests

Practice Tests