Salesforce Heroku Architecture Designer Exam - Mock 1

Universal Containers needs to write their Heroku application's logs to two destinations: an on_x0002_premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint. What should an Architect recommend in this scenario?

• Publish all logs to Apache Kafka on Heroku, and create a separate app that consumes and distributes log messages

• Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations

• Add a logging library to the application source that sends all logs directly to both destinations

• Write all logs to stdout, and configure a separate log drain for each destination.

A hospital is planning to rewrite its on-premise patient registration system. Their current system is HIPAA- compliant as well as ISO 27018-compliant. They need to maintain these same certification levels after the rewrite. Their new app also needs to sync PII (personally identifiable information) data with their Salesforce org. What Heroku Enterprise solutions should an Architect propose?

• Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Apache Kafka on Heroku to stream from the Salesforce org.

• Build the app in the Common Runtime, use a Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

• Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Shield Heroku Connect to sync to Salesforce.

• Build the app in a Private Space with a Private Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet. Which solution should an Architect recommend to meet these requirements?

• Create the application in a Private Space with default options

• Create the application in a Private Space and restrict the application's set of trusted IP ranges.

• Create the application with Internal Routing enabled, in a Private Space.

• Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

A client has data in a production Heroku Postgres database, and needs to quickly get access to a subset of that data for reporting needs. Which two features does Heroku Dataclips provide to enable this? (Choose two.)

• JSON export of query results, with CORS support

• CSV export of query results

• A simple REST API access to query results

• Postgres dump file of query results

Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku? (Choose three.)

• An identity provider with built-in support for Heroku

• A Heroku Enterprise Team

• An existing Heroku account for each user

• At least one valid SSO certificate

• Administrative permissions on the selected identity provider

Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data. Which Heroku architecture should an Architect recommend?

• Common Runtime with secure, isolated containers for running the app's code.

• A Private Space restricted to a set of trusted IP ranges.

• A Shield Private Space with a Shield Postgres add-on.

• A Private Space with Internal Routing enabled on the app.

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC. Which Heroku feature should an Architect recommend to create the connection?

• Internal Routing

• Private Space Peering

• Private Space VPN connections

• Heroku Connect

A client wants to add CPU-intensive video processing functionality to their Heroku web application. Which two strategies should an Architect recommend for implementing this functionality? (Choose two.)

• Add a new process type for worker dynos that pull video processing jobs from a queue.

• Attach a video processing add-on from the Heroku Elements Marketplace to the application.

• Delegate video processing tasks to the app's staging version to remove load from the production app.

• Divide each video processing task across multiple web dynos to mitigate added CPU load.

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR). What should an Architect advise UC regarding data residency in this scenario?

• Heroku does not control where add-on providers store data.

• Heroku support can configure add-ons for specific data residency needs.

• Heroku guarantees the physical location of its control surface APIs.

• Data residency for add-ons is covered under Salesforce's GDPR compliance.

An app uses a queue of worker dynos to perform complex image processing, but the worker dynos are occasionally running out of memory when performing the processing. All of their dynos are currently standard- 1x dynos. What should an Architect recommend in this scenario?

• Add additional worker dynos.

• Break up the image processing across multiple dynos.

• Move the app to a Private Space.

• Change the type of dynos to standard-2x.