Salesforce Certified Heroku Architect (Plat-Arch-206) Exam Questions Instant Access

Question 1

A customer's IT department will not allow VPN access through their on-premise gateway. Users need to be able to access trusted Heroku applications only when they are in the office. These applications are deployed to a Heroku Private Space.

Which two Private Spaces features should an Architect recommend to enable on-premise users to gain the access they need? (Choosetwo.)

AStable outbound IP addresses

BVPC peering

CInternal routing

DTrusted IP ranges

Answer : A, D

Question 2

Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku? (Choose three.)

AAn identity provider with built-in support for Heroku

BA Heroku Enterprise Team

CAn existing Heroku account for each user

DAt leastone valid SSO certificate

EAdministrative permissions on the selected identity provider

Answer : A, B, E

- https://devcenter.heroku.com/articles/using-sso-services-with-heroku#prerequisites- for-sso-with-heroku

Question 3

Which two features of the Heroku platform require Private Spaces? Choose 2 answers.

AAutomated Certificate Management

BApache Kafka on Heroku

CInternal Routing

DTrusted IP ranges

Answer : B, D

https://devcenter.heroku.eom/articles/private-spaces#trusted-ip-ranges

Question 4

A company currently uses, and will continue to use, the MulesoftAnypoint Platform integration throughout their architecture. They want to use Heroku Connect to help them integrate Heroku apps with Salesforce apps. What is a benefit of introducing Heroku Connect in this environment?

AHeroku Connect provides Salesforce a bidirectional synchronization between Platform Events on Salesforce and Apache Kafka on Heroku

BHerokuConnect provides Mulesoft an endpoint that is easily consumable by a back-end integration tool

CHeroku Connect provides Salesforce a declarative bidirectional synchronization with Postgres and data proxy capability via Heroku Connect External Objects.

DHeroku Connect has a Microsoft connector for access to Heroku Postgres Heroku Redis, and Apache Kafka on Heroku

Answer : C

Question 5

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.

Which solution should an Architect recommend to meet these requirements?

ACreate the application in a Private Space with default options.

BCreate the application in a Private Space and restrict the application's set of trusted IP ranges.

CCreate the application with Internal Routing enabled, in a Private Space.

DCreate the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Answer : B

Question 6

A client has 3 Heroku applications: App 1, App 2, App 3. They would like to restrict external web traffic to App 3 only. Which two Heroku features should an Architect recommend to enable this architecture?

AVPC Peering

BTrusted IP ranges

CPrivate Spaces

DInternal Routing

Answer : B

Question 7

An app has two web dynos, Dyno A and Dyno B. The app receives a request, which is routed to Dyno

AA second request is sent from the same client. Which Dyno is the request routed to?

AThe request is routed to Dyno A if it has finished handling the first request

BThe request is routed randomly to Dyno A orDyno B

CThe request is definetly routed to Dyno A.

DThe request is definetly routed to Dyno B.

Answer : B

- https://devcenter.heroku.com/articles/internal-routing