An enterprise architect has requested the Salesforce integration architect to review the following (see diagram and description) and provide recommendations after carefully considering all constraints of the enterprise systems and Salesforce Platform limits.
About 3,000 phone sales agents use a Salesforce Lightning user interface (UI) concurrently to check eligibility of a customer for a qualifying offer.
There are multiple eligibility systems that provide this service and are hosted externally.
Their current response times could take up to 90 seconds to process and return.
These eligibility systems are accessed through APIs orchestrated via ESB (MuleSoft).
All requests from Salesforce traverse the customer's API Gateway layer, which imposes a timeout constraint of 9 seconds.

Which recommendation should the integration architect make?
Answer : C
In this architectural scenario, the Integration Architect must navigate two critical technical 'bottlenecks': the 9-second API Gateway timeout and the 90-second backend processing time. Since the backend takes significantly longer than the gateway allows for a synchronous connection, a standard Request-Reply pattern will fail. Furthermore, having 3,000 concurrent agents perform synchronous callouts would risk hitting Salesforce's concurrent long-running request limits.
The most scalable and user-friendly solution is to implement an Asynchronous Request-Reply pattern using Platform Events and the empAPI.
When an agent clicks 'Check Eligibility,' Salesforce sends an initial asynchronous request to the ESB (MuleSoft). The ESB immediately acknowledges receipt with a 202 Accepted status, freeing up the Salesforce UI thread and avoiding the API Gateway's 9-second timeout. Once the backend eligibility system completes its 90-second process, MuleSoft acts as a client to Salesforce, performing a Remote Call-In to publish a specific Platform Event containing the result and the original Request ID.
On the frontend, the Lightning UI uses the empAPI (Enterprise Messaging Platform API) to subscribe to the streaming channel for that Platform Event. Because the empAPI uses CometD technology to maintain a single long-lived connection, it can efficiently push the response to the agent's screen the moment it arrives, without requiring the agent to manually refresh or click a 'Check Update' button (as suggested in Option B). This provides a 'real-time' feel despite the long backend latency.
Option A is non-viable because synchronous polling would exacerbate the load on the API Gateway and likely lead to governance limit issues within Salesforce. By using Platform Events and empAPI, the architect ensures the solution remains within Salesforce's execution limits while providing a seamless, automated experience for a high-volume call center environment.
Northern Trail Outfitters uses a custom Java application to display code coverage and test results for all of its enterprise applications and plans to include Salesforce as well. Which Salesforce API should an integration architect use to meet the requirement?
Answer : C
For developer-centric tools that need to access fine-grained technical data like code coverage and test results, the Tooling API is the correct architectural choice.
While the Metadata API (Option B) is used to deploy or retrieve code, it does not provide real-time query access to the underlying metrics of a test run. The Tooling API, however, exposes specialized objects such as ApexCodeCoverage, ApexCodeCoverageAggregate, and ApexTestResult. These objects allow the Java application to query exactly which lines of code were executed during a test and the overall percentage of coverage for the organization.
The Analytics REST API (Option A) is designed for querying and interacting with Einstein Analytics (CRM Analytics) datasets and dashboards, which is irrelevant to software development lifecycle (SDLC) metrics. By using the Tooling API, the Java application can perform RESTful queries to gather comprehensive data on test successes, failures, and coverage gaps. This allows NTO to integrate Salesforce into its existing enterprise-wide quality dashboard, ensuring a unified view of code health across all platforms.
Northern Trail Outfitters (NTO) has recently changed its Corporate Security Guidelines. The guidelines require that all cloud applications pass through a secure firewall before accessing on-premise resources. NTO is evaluating middleware solutions to integrate cloud applications with on-premise resources and services. Which consideration should an integration architect evaluate before choosing a middleware solution?12
Answer : A
In modern enterprise architecture, securing the boundary between cloud environments like Salesforce and on-premise data centers is a critical responsibility of the Integration Architect. When Corporate Security Guidelines mandate that all traffic must pass through a secure firewall, the architecture must support a Demilitarized Zone (DMZ) or 'Perimeter Network' strategy.
An API Gateway or a specialized middleware connector acts as the 'front door' for these on-premise resources. The architect must evaluate whether the chosen middleware solution supports a distributed deployment model where the gateway component can reside within the DMZ. This setup allows the organization to terminate external (cloud) connections in a hardened environment before the traffic is inspected and proxied to the internal, trusted network.
While supporting OAuth (Option C) is essential for modern authentication, it does not satisfy the specific network-level firewall requirement described. Similarly, ODBC connections (Option B) are low-level database protocols that usually operate deep within the internal network and would typically be considered a security risk if exposed directly to a firewall.
By ensuring the middleware has an architecturally compatible gateway for the DMZ, the architect provides a solution that allows for deep packet inspection, IP whitelisting, and rate limiting at the edge of the corporate network. This approach aligns with the 'Defense in Depth' principle, ensuring that Salesforce can securely communicate with legacy systems (like SAP or internal databases) without exposing those systems directly to the public internet, thereby satisfying the new Corporate Security Guidelines.
Northern Trail Outfitters is planning to perform nightly batch loads into Salesforce from an external system with a custom Java application using the Bulk API. The CIO is curious about monitoring recommendations for the jobs from the technical architect. Which recommendation should help meet the requirements?
Answer : A
For high-volume data loads using the Bulk API, monitoring should be performed programmatically by the orchestrating client---in this case, the custom Java application. The Bulk API is asynchronous, meaning that when you submit a job, Salesforce acknowledges the request and processes it in the background.
The Java application must actively track the state of its own jobs. Using the `getBatchInfo` (or `getJobInfo` in Bulk API 2.0) method allows the application to retrieve the real-time status of each batch. The application can check for statuses such as `Queued`, `InProgress`, `Completed`, or `Failed`. Once a batch is marked as `Completed`, the application can then call `getBatchResult` to retrieve a list of successes and failures for individual records.
Option B is architecturally unsound because Bulk API operations are designed to bypass most synchronous Apex logic to ensure performance; furthermore, creating custom records for every error in a 'nightly batch load' would likely hit other platform limits (like storage or CPU) and defeat the purpose of using the Bulk API. Option C is ineffective for Bulk API monitoring, as debug logs do not capture the background processing of bulk batches and would quickly hit the log size limits.
By recommending Option A, the architect ensures that the Java application maintains full control over the integration lifecycle. The application can log errors locally, implement automated retries for transient failures, and provide the CIO with accurate, high-level reporting on the success rate of the nightly loads without placing unnecessary overhead on the Salesforce platform.
---
Universal Containers (UC) is a leading provider of management training globally. UC embarked on a Salesforce transformation journey to allow students to register for courses in the Salesforce Community. UC has a learning system that masters all courses and student registration. UC requested a near real-time feed of student registration from Salesforce to the learning system. The integration architect recommends using Salesforce Platform Events. Which API should be used for the Salesforce pl1atform event solution?
Answer : C
Salesforc30e Platform Events are built on top of a highly scalable, event-driven messaging architecture designed to enable real-time communication between apps. To consume these events from outside Salesforce---such as from a legacy learning system---clients must use the Streaming API.
The Streaming API is the technical foundation for receiving event notifications in a Publish/Subscribe model. It utilizes the CometD protocol or the newer gRPC-based Pub/Sub API to maintain a persistent connection between the external client and Salesforce. When a student registers for a course in the Salesforce Community, a Platform Event is 'published' to the event bus. The learning system, acting as a 'subscriber,' remains connected via the Streaming API and receives the event message instantly without needing to poll Salesforce for updates.
This architecture is ideal for 'near real-time' requirements because it eliminates the overhead of traditional point-to-point integrations. While the REST and SOAP APIs (Options A and B) can be used to publish events into Salesforce, they are not designed to receive unsolicited notifications from the platform. By using the Streaming API, the integration architect ensures the solution is both responsive and efficient, as Salesforce only pushes data when a relevant event occurs. Furthermore, because Platform Events provide a retention window, the Streaming API allows the learning system to use a Replay ID to catch up on any registration events missed during a brief network outage.
Northern Trail Outfitters needs to use Shield Platform Encryption to encrypt social security numbers in order to meet a business requirement. Which action should an integration architect take prior to the implementation of Shield Platform Encryption?
Answer : B
An integration architect has received a request to prevent employees that leave the company from accessing data in Salesforce after they are deactivated in the company's HR system. What should the integration architect determine before recommending a solution?
Answer : A