Certified Heroku Architecture Designer sample questions

Question 1

A client is running an app on 20 Standard-2x dynos. They are noticing highly variable performance when the application is experiencing a heavy load.

Which two suggestions should an Architect make in this scenario? (Choose two.)

Accepted Answer

Configure the app to use Performance dynos.

Accepted Answer

Add additional Standard-2x dynos.

Answer

Configure the app to use Standard-lx dynos.

Answer

Install a performance monitoring tool.

Question 2

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC.

Which Heroku feature should an Architect recommend to create the connection?

Accepted Answer

Private Space VPN connections

Answer

Internal Routing

Answer

Private Space Peering

Answer

Heroku Connect

Question 3

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).

Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

Accepted Answer

Heroku Shield Private Spaces and Heroku Shield Connect

Answer

Heroku Private Spaces and Private Space VPN Connections

Answer

Heroku Private Spaces and Private Space Peering

Answer

Heroku Shield Private Spaces and Internal Routing

Question 4

Universal Containers (UC) has configured SSO fortheir Heroku Enterprise Team using an identity provider (IdP).

When a new employee joins the company, how should their Heroku account be created?

Accepted Answer

A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.

Answer

The employee should create a new Heroku account with the exact email address listed in their IdP record.

Answer

No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.

Answer

An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Question 5

Universal Containers needs to write their Heroku application's logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.

What should an Architect recommend in this scenario?

Accepted Answer

Write all logs to stdout, and configure a separate log drain for each destination.

Answer

Publish all logs to Apache Kafka on Heroku, and create a separate app that consumes and distributes log messages.

Answer

Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations.

Answer

Add a logging library to the application source that sends all logs directly to both destinations.

Question 6

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR).

What should an Architect advise UC regarding data residency in this scenario?

Accepted Answer

Heroku support can configure add-ons for specific data residency needs.

Answer

Heroku does not control where add-on providers store data.

Answer

Heroku guarantees the physical location of its control surface APIs.

Answer

Data residency for add-ons is covered under Salesforce's GDPR compliance.

Question 7

Which Heroku runtimes provide keystroke logging?

Accepted Answer

Private Spaces and Shield Private Spaces

Answer

The Common Runtime, Private Spaces, and Shield Private Spaces

Answer

Shield Private Spaces only

Answer

Keystroke logging is not available on Heroku

Question 8

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.

Which solution should an Architect recommend to meet these requirements?

Accepted Answer

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Answer

Create the application in a Private Space with default options.

Answer

Create the application with Internal Routing enabled, in a Private Space.

Answer

Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Question 9

A healthcare services client is requesting an architecture for a set of applications: one is a marketing application, and the other two are of customer service applications that allow for customers to interact with their healthcare records. The marketing application must be able to scale up within seconds in response to traffic spikes. The client wants to be able to deploy each of these applications to the U.S. East Coast and EMEA.

Which applications should be deployed into which Heroku runtime?

Accepted Answer

The marketing application into Private Spaces; customer service applications into Shield Private Spaces

Answer

The marketing application into the Common Runtime; customer service applications into Shield Private Spaces

Answer

The marketing application into the Common Runtime; customer service applications into Private Spaces

Answer

The marketing application into Private Spaces; customer service applications into separate Private Spaces

Question 10

Universal Containers (UC) recently acquired another company, International Shipping. Each company has its own Salesforce org, and UC wants those orgs to remain separate for the foreseeable future.

Given this scenario, which Heroku feature should an Architect recommend to provide additional value to UC following the acquisition?

Accepted Answer

Heroku Connect can be used to synchronize data directly between the two Salesforce orgs.

Answer

Both orgs can be attached to the same Heroku application as an add-on to ensure data residency in the application's region.

Answer

Heroku External Objects can expose read-only data from both Salesforce orgs to Heroku Postgres.

Answer

Heroku Postgres database can sync data from both orgs for advanced querying capabilities.

Free Certified Heroku Architecture Designer sample questions

A client is running an app on 20 Standard-2x dynos. They are noticing highly variable performance when the application is experiencing a heavy load. Which two suggestions should an Architect make in this scenario? (Choose two.)

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC. Which Heroku feature should an Architect recommend to create the connection?

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP). Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

Universal Containers (UC) has configured SSO fortheir Heroku Enterprise Team using an identity provider (IdP). When a new employee joins the company, how should their Heroku account be created?

Universal Containers needs to write their Heroku application's logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint. What should an Architect recommend in this scenario?

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR). What should an Architect advise UC regarding data residency in this scenario?

Which Heroku runtimes provide keystroke logging?

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet. Which solution should an Architect recommend to meet these requirements?

10 more free samples are waiting