Salesforce Salesforce Certifications HEROKU-ARCHITECTURE-DESIGNER Questions & Answers

• Question 141:

  A web application on Heroku wants to surface Salesforce data. All users of the web application will:

  1) Authenticate using SSO with Salesforce.

  2) Have user records in Salesforce.

  What architecture should be recommended in order to maintain the Salesforce security model already in place?

  A. Use Heroku Connect to sync the Salesforce data and Salesforce security model to Heroku Postgres.

  B. Have the application query Salesforce data and the security model directly using a cached admin credential.

  C. Use Heroku Connect, with a per-user authentication model, to sync the Salesforce data to Heroku Postgres.

  D. Have the application query Salesforce data directly through the Salesforce APIs as the running user.

  Correct Answer: A

• Question 142:

  A healthcare services client is requesting an architecture for a set of applications: one is a marketing application, and the other two are of customer service applications that allow for customers to interact with their healthcare records. The marketing application must be able to scale up within seconds in response to traffic spikes. The client wants to be able to deploy each of these applications to the U.S. East Coast and EMEA.

  Which applications should be deployed into which Heroku runtime?

  A. The marketing application into Private Spaces; customer service applications into Shield Private Spaces

  B. The marketing application into the Common Runtime; customer service applications into Shield Private Spaces

  C. The marketing application into the Common Runtime; customer service applications into Private Spaces

  D. The marketing application into Private Spaces; customer service applications into separate Private Spaces

  Correct Answer: A

• Question 143:

  A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).

  Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

  A. Heroku Shield Private Spaces and Heroku Shield Connect

  B. Heroku Private Spaces and Private Space VPN Connections

  C. Heroku Private Spaces and Private Space Peering

  D. Heroku Shield Private Spaces and Internal Routing

  Correct Answer: A

• Question 144:

  Part of a client's design is the ability to easily share between two applications running on Heroku. What should an Architect recommend?

  A. Attach a single storage add-on, such as Heroku Postgres, to both applications.

  B. Create Foreign Data Wrappers to expose the tables from one database to another.

  C. Provision Heroku Connect to sync the data into a custom object in Salesforce.

  D. Provision Apache Kafka on Heroku to easily stream the data between the two apps.

  Correct Answer: A

• Question 145:

  An app uses a queue of worker dynos to perform complex image processing, but the worker dynos are occasionally running out of memory when performing the processing. All of their dynos are currently standard-1x dynos. What should an Architect recommend in this scenario?

  A. Add additional worker dynos.

  B. Break up the image processing across multiple dynos.

  C. Move the app to a Private Space.

  D. Change the type of dynos to standard-2x.

  Correct Answer: D

  Reference: https://devcenter.heroku.com/articles/scaling

• Question 146:

  A client wants to add CPU-intensive video processing functionality to their Heroku web application. Which two strategies should an Architect recommend for implementing this functionality? (Choose two.)

  A. Add a new process type for worker dynos that pull video processing jobs from a queue.

  B. Attach a video processing add-on from the Heroku Elements Marketplace to the application.

  C. Delegate video processing tasks to the app's staging version to remove load from the production app.

  D. Divide each video processing task across multiple web dynos to mitigate added CPU load.

  Correct Answer: AB

  Reference: https://devcenter.heroku.com/articles/how-heroku-works

• Question 147:

  Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR). What should an Architect advise UC regarding data residency in this scenario?

  A. Heroku does not control where add-on providers store data.

  B. Heroku support can configure add-ons for specific data residency needs.

  C. Heroku guarantees the physical location of its control surface APIs.

  D. Data residency for add-ons is covered under Salesforce's GDPR compliance.

  Correct Answer: B

• Question 148:

  A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC. Which Heroku feature should an Architect recommend to create the connection?

  A. Internal Routing

  B. Private Space Peering

  C. Private Space VPN connections

  D. Heroku Connect

  Correct Answer: C

  Reference: https://blog.heroku.com/private-spaces-vpn

• Question 149:

  Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data. Which Heroku architecture should an Architect recommend?

  A. Common Runtime with secure, isolated containers for running the app's code.

  B. A Private Space restricted to a set of trusted IP ranges.

  C. A Shield Private Space with a Shield Postgres add-on.

  D. A Private Space with Internal Routing enabled on the app.

  Correct Answer: C

  Reference: https://www.heroku.com/managed-data-services

• Question 150:

  Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku? (Choose three.)

  A. An identity provider with built-in support for Heroku

  B. A Heroku Enterprise Team

  C. An existing Heroku account for each user

  D. At least one valid SSO certificate

  E. Administrative permissions on the selected identity provider

  Correct Answer: ABE

  Reference: https://devcenter.heroku.com/articles/using-sso-services-with-heroku#sso-setup-for-other-saml-2-0-compliant-idps