Salesforce Certified Heroku Architect (Plat-Arch-206) Exam Questions Instant Access

Question 1

Which is a characteristic of an add-on that is "available" for applications in Private Spaces but not "installable" in a Private Space?

AThe add-on always runs in the samePrivate Space as the provisioning application.

BThe traffic between the provisioning app and the add-on will travel across the public Internet.

CThe add-on will always run in the same region, but not in the same Private Space, as the provisioning application.

DThe add-on's data will always be stored in the same Private Space as the provisioning application.

Answer : C

Question 2

A customer's Heroku Redis instance regularly reaches its storage limit. Besides upgrading to a bigger plan, what solution should an Architect recommend for this scenario?

AExplore a different key eviction scheme.

BCreate a fork of the primary Heroku Redis instance.

CMigrate the data to a Heroku Postgres database

DFailover to ephemeral filesystem for the running dyno

Answer : A

https://devcenter.herokuxom/articles/using-sso-services-with-heroku#prerequisites-for-sso-with-heroku

Question 3

Universal Containers is developing a Salesforce app thatinvokes a Heroku app's web service, which asynchronously generates customer invoices. The Heroku app is deployed to a Private Space. When an invoice is ready, the Heroku app sends a POST request to the Salesforce REST API. Which two options should an Architect recommend to ensure that neither the Salesforce nor the Heroku app is accessible from the public internet? Choose 2 answers.

ARestrict the Private Space's trusted IP range to Salesforce IP addresses

BRestrict the Private Space's trusted IP range to Universal Containers' VPN

CRestrict the Salesforce connected app's login IP ranges to Universal Containers' VPN

DRestrict the Salesforce connected app's login IP ranges to the stable outbound IP addresses of the Private Space

Answer : A, D

- This is no VPN connection and a trusted IP range is used to limit the trusted outside application's IP address And there is document related to this use case:https://devcenterheroku.com/articles/establish-trust-private-space-and-salesforce#salesforce-heroku-apps

Question 4

Which two logs and logging recommendations are prescribed by the Twelve-Factor app methodology? Choose 2 answers.

AApps should not concernthemselves with routing or storing logs

BLogs from all processes and backing services should be aggregated together.

CLogs should be written to a shared file system for scalability.

DApps should only keep a limited, rolling buffer of logs available

Answer : A, B

- https://devcenter heroku com/articles/internal-routing

Question 5

Universal Containers has an application running in the Common Runtime that uses Heroku Redis. The data in Heroku Redis needs to be accessed by a third-party application.

Whichconnection method should an Architect recommend to ensure the security of the data as it moves from Heroku Redis to the third-party application?

AUse stunnel to secure the connection between Heroku Redis and the third-party application.

BSet up SSL Certificates on Heroku and the third-party application.

COnly allow access to Heroku Redis through an SSH connection.

DSet up both a VPN and a VPC between Heroku and the third-party application.

Answer : C

- https://devcenter.heroku.com/articles/securing-heroku-redis

Question 6

When creating a Private Space, what is a valid reason to specify a region other than the default region?

APrivate Spaces restrict inbound traffic to the current region.

BHeroku pricing varies by region.

CRunning an applicationcloser to its intended users can reduce latency.

DAvailable compute resources vary by region.

Answer : C

Question 7

In the hierarchy of cloud services, PaaS generally provides more out of the box than:

ASoftware as a service (SaaS)

BInfrastructure as a service (laaS) and on-premises Infrastructure

CSalesforce Marketing Cloud

DVisualforce pages

Answer : B