Salesforce Salesforce Certifications HEROKU-ARCHITECTURE-DESIGNER Questions & Answers

• Question 101:

  Which two statements describe characteristics of Private Space Logging? (Choose two.)

  A. Log entries are forwarded as HTTPS POST requests.

  B. Log entries are collated and forwarded by Heroku's Logplex router.

  C. Log entries can be forwarded to up to three logging services.

  D. Log entries can be forwarded to only one logging service.

  Correct Answer: AC

• Question 102:

  Which three resources can be found in the Heroku Elements Marketplace? (Choose three.)

  A. Heroku Buttons

  B. Buildpacks

  C. Heroku Stacks

  D. Docker image files

  E. Add-ons

  Correct Answer: ABE

  Reference: https://www.heroku.com/elements

• Question 103:

  A client is planning to deploy an application to Heroku. The client's IT department requires all applications to be hosted from Australia, where their main office is located. Regulators in Australia require keystroke logs of all engineers who create interactive sessions for the application.

  Which should an Architect recommend in this scenario?

  A. Deploy the application to a Private Space in the Sydney region with Private Space Logging enabled.

  B. Deploy the application to the Common Runtime in the Sydney region.

  C. Deploy the application to a Shield Private Space in the Sydney region.

  D. Deploy the application to a Private Space in the Sydney region with Internal Routing enabled.

  Correct Answer: C

  Reference: https://devcenter.heroku.com/articles/security-privacy-compliance

• Question 104:

  Which Heroku runtimes provide keystroke logging?

  A. The Common Runtime, Private Spaces, and Shield Private Spaces

  B. Private Spaces and Shield Private Spaces

  C. Shield Private Spaces only

  D. Keystroke logging is not available on Heroku

  Correct Answer: B

  Reference: https://www.heroku.com/shield https://elements.heroku.com/addons/heroku-private-spaces

• Question 105:

  Universal Containers (UC) has a Heroku application that runs in Virginia, in the U.S., that uses Apache Kafka on Heroku. They have deployed a copy of the app in Asia. Now, both apps need a messaging backbone that will support multi-region distribution.

  What is the least complex architecture that an Architect should recommend?

  A. Deploy a multi-region version of Apache Kafka on Heroku.

  B. Use Heroku's multi-tenant Kafka Basic plan.

  C. The app in Asia should write to the Kafka instance in Virginia.

  D. Provision a second Kafka add-on in Asia. Each instance of the app should sync with each other.

  Correct Answer: B

  Reference: https://devcenter.heroku.com/articles/multi-tenant-kafka-on-heroku

• Question 106:

  Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime. What should an Architect recommend UC do to secure their database to only trusted locations?

  A. Move the database and the app into the Private Space.

  B. Add a Trusted IP range to the Heroku Postgres configuration.

  C. Set up a VPN from the trusted locations to the app.

  D. Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.

  Correct Answer: B

• Question 107:

  Universal Containers (UC) wants to allow its developers to only use certain add-ons. UC enables Add-on Controls for Enterprise Teams and adds the add-ons they wish to allow to the list. There is an existing set of add-ons attached to applications, which are NOT on the list.

  What happens to these add-ons?

  A. They are deleted, and all data is backed up and saved.

  B. They are added to the allowed add-ons list.

  C. They are added to the exception list and not affected.

  D. They are flagged for removal, and the developers are notified.

  Correct Answer: D

  https://devcenter.heroku.com/articles/addon-controls

• Question 108:

  Universal Containers has an application running in the Common Runtime that uses Heroku Redis. The data in Heroku Redis needs to be accessed by a third-party application. Which connection method should an Architect recommend to ensure the security of the data as it moves from Heroku Redis to the third-party application?

  A. Use stunnel to secure the connection between Heroku Redis and the third-party application.

  B. Set up SSL Certificates on Heroku and the third-party application.

  C. Only allow access to Heroku Redis through an SSH connection.

  D. Set up both a VPN and a VPC between Heroku and the third-party application.

  Correct Answer: C

  https://devcenter.heroku.com/articles/securing-heroku-redis

• Question 109:

  A hospital wants to build a mobile app that allows patients to check the status of submitted insurance claims, which the hospital stores in Salesforce Health Cloud. The app's back end will run on Heroku. Which two measures should an Architect recommend to help ensure that the app is compliant with HIPAA? (Choose two.)

  A. Use Heroku Shield Connect to sync claim data from Salesforce to a Heroku Postgres database.

  B. Use only Heroku Shield Postgres databases to store claim data outside of Salesforce Health Cloud.

  C. Ensure that the back-end application's code encrypts all claim data before writing it to a Heroku Postgres database.

  D. Ensure that the mobile app can only run when on the hospital's intranet, which is connected to the back end's Shield Private Space via VPN.

  Correct Answer: AC

• Question 110:

  A client's application needs to run in a European country for data residence purposes. What is a consideration in this scenario?

  A. When a dyno is cycled, its replacement might run in a different region.

  B. European regions are only available for applications running in Private Spaces.

  C. Heroku Postgres backup snapshots and dataclips are always stored in the U.S.

  D. There is no guarantee that a Heroku Postgres database will be created in the same region as the application that provisions it.

  Correct Answer: B

  Reference: https://devcenter.heroku.com/articles/regions