Salesforce heroku architecture designer practice test

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform
(GCP).
Which combination of Heroku features should an Architect recommend to secure the connection
between Heroku and GCP?

• A. Heroku Shield Private Spaces and Heroku Shield Connect
• B. Heroku Private Spaces and Private Space VPN Connections
• C. Heroku Private Spaces and Private Space Peering
• D. Heroku Shield Private Spaces and Internal Routing

Part of a client's design is the ability to easily share between two applications running on Heroku.
What should an Architect recommend?

• A. Attach a single storage add-on, such as Heroku Postgres, to both applications.
• B. Create Foreign Data Wrappers to expose the tables from one database to another.
• C. Provision Heroku Connect to sync the data into a custom object in Salesforce.
• D. Provision Apache Kafka on Heroku to easily stream the data between the two apps.

A healthcare services client is requesting an architecture for a set of applications: one is a marketing
application, and the other two are of customer service applications that allow for customers to
interact with their healthcare records. The marketing application must be able to scale up within
seconds in response to traffic spikes. The client wants to be able to deploy each of these applications
to the U.S. East Coast and EMEA.
Which applications should be deployed into which Heroku runtime?

• A. The marketing application into Private Spaces; customer service applications into Shield Private Spaces
• B. The marketing application into the Common Runtime; customer service applications into Shield Private Spaces
• C. The marketing application into the Common Runtime; customer service applications into Private Spaces
• D. The marketing application into Private Spaces; customer service applications into separate Private Spaces

For which two use cases should an Architect recommend using Heroku Redis? (Choose two.)

• A. Providing long-term data warehousing
• B. Adding jobs to a queue
• C. Providing a data cache layer
• D. Querying relational data

Universal Containers experienced an outage with their production Heroku Postgres database due to a
fault with the underlying infrastructure. The database was unavailable for an hour. The database is on
the Standard-0 plan.
Which two actions should an Architect recommend to mitigate such database failures and outages in
the future? (Choose two.)

• A. Create a follower database that uses the same plan as the leader.
• B. Migrate the database to a Premium-tier plan.
• C. Migrate the database to a larger Standard-tier plan.
• D. Create a fork of the database that uses the same plan as the leader.

A web application on Heroku wants to surface Salesforce dat
a. All users of the web application will:
1) Authenticate using SSO with Salesforce.
2) Have user records in Salesforce.
What architecture should be recommended in order to maintain the Salesforce security model
already in place?

• A. Use Heroku Connect to sync the Salesforce data and Salesforce security model to Heroku Postgres.
• B. Have the application query Salesforce data and the security model directly using a cached admin credential.
• C. Use Heroku Connect, with a per-user authentication model, to sync the Salesforce data to Heroku Postgres.
• D. Have the application query Salesforce data directly through the Salesforce APIs as the running user.

A client wants to create a scalable set of microservices that communicate with each other, where
multiple microservices have a public REST API.
Which architecture strategy allows this on Heroku?

• A. Each microservice is a separate Heroku app. The microservices communicate by using Apache Kafka as a message bus.
• B. Each microservice is a separate process type in a single Heroku app. The microservices communicate by using Redis as a message bus.
• C. Each microservice is a separate private space. The microservices communicate by using DNS Service Discovery.
• D. Each microservice is a separate process in a single Heroku app. The microservices communicate by using shared memory.

Universal Containers has a Heroku Private Space with a VPN connection to their on-premise network.
They want their remote employees to be able to access their Heroku applications using a VPN
connection only.
Which solution should an Architect recommend?

• A. Clone the Heroku applications to a second Private Space, and configure its VPN for remote employees.
• B. Enable remote employees to VPN into the company's on-premise network.
• C. Configure a second VPN connection for the Private Space that remote employees can use.
• D. Add all remote employees to an Enterprise Team, and configure it to connect to the Private Space via SSO.

Universal Containers (UC) has configured SSO for their Heroku Enterprise Team using an identity
provider (IdP).
When a new employee joins the company, how should their Heroku account be created?

• A. A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.
• B. The employee should create a new Heroku account with the exact email address listed in their IdP record.
• C. No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.
• D. An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

A client wants to use Heroku Connect to sync data bidirectionally between a Salesforce org and a
Heroku Postgres database.
In this scenario, which two are advantages to setting a custom External Identifier field in the Heroku
Connect mapping? (Choose two.)

• A. External IDs simplify the mapping of polymorphic relationships in the Salesforce org.
• B. External IDs improve speed when inserting multiple related objects.
• C. External IDs prevent the creation of orphaned duplicates in Heroku Postgres.
• D. External IDs are required to enable bidirectional synchronization.