Pass the Salesforce Architect Exams Heroku-Architect Questions and answers with CertsForce

Viewing page 3 out of 5 pages
Viewing questions 21-30 out of questions
Questions # 21:

When creating a Private Space, what is a valid reason to specify a region other than the default region?

Options:

A.

Private Spaces restrict inbound traffic to the current region.


B.

Heroku pricing varies by region.


C.

Running an applicationcloser to its intended users can reduce latency.


D.

Available compute resources vary by region.


Expert Solution
Questions # 22:

Which 2 architectures are enabled by using a single Private Space and the Internal Routing feature?

Options:

A.

A microservices architecture that also uses DNS ServiceDiscovery to facilitate communication


B.

Multiple public-facing web apps with different sets of trusted inbound IP ranges


C.

A single public-facing web app that performs network-isolated communication with multiple non-public-facing web apps.


D.

Network-isolated communication between applications in the Private Space and applications in the Common Runtime


Expert Solution
Questions # 23:

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC.

Which Heroku feature should an Architect recommend to create the connection?

Options:

A.

Internal Routing


B.

Private Space Peering


C.

Private Space VPNconnections


D.

Heroku Connect


Expert Solution
Questions # 24:

Universal Containers wants to set up communication between multiple public-facing Heroku web applications hosted on the Common Runtime. Which solution should an Architect recommend?

Options:

A.

Movethe application to a Private Space, and enable Internal Routing for them


B.

Bind all of the Heroku applications to the same port


C.

Configure a worker process type for each application that listens for incoming remote procedure calls.


D.

Send requests to each application's URL using HTTP/HTTPS.


Expert Solution
Questions # 25:

A financial reporting application, hosted on an on-premise server, uses a native library (wkhtmltopdf) to convert its HTML reports into PDFs. The app is being migrated to Heroku.

What option should an Architect recommend to enable the Heroku application to use wkhtmltopdf?

Options:

A.

Ensure that the Heroku app fetches the wkhtmltopdf library from cloud storage on dyno restart.


B.

Install the dependency using sudo apt install wkhtmltopdf from .profile in the project root.


C.

Continue to host wkhtmltopdf on-premise, and build a REST API so the library can be invoked from the Heroku app.


D.

Use a custom buildpack to install wkhtmltopdf using apt.


Expert Solution
Questions # 26:

A hospital wants to build a mobile app that allows patients to check the status of submitted insurance claims, which the hospital stores in Salesforce Health Cloud. The app's back end will run on Heroku.

Which two measures should an Architect recommend to help ensure that the app is compliant with HIPAA? (Choose two.)

Options:

A.

Use Heroku Shield Connect to sync claim data from Salesforce to a Heroku Postgres database.


B.

Use only Heroku Shield Postgres databases to store claim data outside of Salesforce Health Cloud.


C.

Ensure that the back-end application's codeencrypts all claim data before writing it to a Heroku Postgres database.


D.

Ensure that the mobile app can only run when on the hospital's intranet, which is connected to the back end's Shield Private Space via VPN.


Expert Solution
Questions # 27:

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.

What should an Architect recommend UC do to secure their database to only trusted locations?

Options:

A.

Move the database and the app into the Private Space.


B.

Add a Trusted IP range tothe Heroku Postgres configuration.


C.

Set up a VPN from the trusted locations to the app.


D.

Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.


Expert Solution
Questions # 28:

A client requires that their web application's logs are accessible only from within the same isolatednetwork as the application itself.

Which solution should an Architect recommend in this scenario?

Options:

A.

Deploy the application to a Private Space. Provide the Private Space's stable outbound IPs to Heroku's Logplex router to block all logs originating fromthe Private Space.


B.

Deploy the application to a Shield Private Space with Private Space Logging enabled. Forward logs to a destination within the Shield Private Space.


C.

Deploy the application to a Private Space. Connect the Private Space to an on-premise logging system using VPN and specify it as a log drain.


D.

Deploy the application to a Private Space. Enable Internal Routing to prevent the application's logs from being forwarded outside of the Private Space.


Expert Solution
Questions # 29:

A clientwants to use Heroku Connect to sync data bidirectionally between a Salesforce org and a Heroku Postgres database.

In this scenario, which two are advantages to setting a custom External Identifier field in the Heroku Connect mapping? (Choose two.)

Options:

A.

External IDs simplify the mapping of polymorphic relationships in the Salesforce org.


B.

External IDs improve speed when inserting multiple related objects.


C.

External IDs prevent the creation of orphaned duplicates in Heroku Postgres.


D.

External IDs are required to enable bidirectional synchronization.


Expert Solution
Questions # 30:

A client is planning to deploy an application to Heroku. The client's IT department requires all applications to be hosted from Australia, where their main office is located. Regulators in Australia require keystroke logs ofall engineers who create interactive sessions for the application.

Which should an Architect recommend in this scenario?

Options:

A.

Deploy the application to a Private Space in the Sydney region with Private Space Logging enabled.


B.

Deploy the application to the Common Runtime in the Sydney region.


C.

Deploy the application to a Shield Private Space in the Sydney region.


D.

Deploy the application to a Private Space in the Sydney region with Internal Routing enabled.


Expert Solution
Viewing page 3 out of 5 pages
Viewing questions 21-30 out of questions