Certified Heroku Architecture Designer sample questions

Question 1

A client wants to create a scalable set of microservices that communicate with each other, where multiple microservices have a public REST API.

Which architecture strategy allows this on Heroku?

Accepted Answer

Each microservice is a separate private space. The microservices communicate by using DNS Service Discovery.

Answer

Each microservice is a separate Heroku app. The microservices communicate by using Apache Kafka as a message bus.

Answer

Each microservice is a separate process type in a single Heroku app. The microservices communicate by using Redis as a message bus.

Answer

Each microservice is a separate process in a single Heroku app. The microservices communicate by using shared memory.

Question 2

A client wants to secure their web application using SSL/TLS. They do not have specific requirements regarding using a particular version of SSL/TLS.

Which two Heroku features should an Architect recommend as options? (Choose two.)

Accepted Answer

Automated Certificate Management

Accepted Answer

Heroku SSL

Answer

Heroku Private Spaces

Answer

Heroku Shield Private Spaces

Question 3

A client is running an app on 20 Standard-2x dynos. They are noticing highly variable performance when the application is experiencing a heavy load.

Which two suggestions should an Architect make in this scenario? (Choose two.)

Accepted Answer

Configure the app to use Performance dynos.

Accepted Answer

Add additional Standard-2x dynos.

Answer

Configure the app to use Standard-lx dynos.

Answer

Install a performance monitoring tool.

Question 4

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC.

Which Heroku feature should an Architect recommend to create the connection?

Accepted Answer

Private Space VPN connections

Answer

Internal Routing

Answer

Private Space Peering

Answer

Heroku Connect

Question 5

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).

Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

Accepted Answer

Heroku Shield Private Spaces and Heroku Shield Connect

Answer

Heroku Private Spaces and Private Space VPN Connections

Answer

Heroku Private Spaces and Private Space Peering

Answer

Heroku Shield Private Spaces and Internal Routing

Question 6

Universal Containers (UC) has configured SSO fortheir Heroku Enterprise Team using an identity provider (IdP).

When a new employee joins the company, how should their Heroku account be created?

Accepted Answer

A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.

Answer

The employee should create a new Heroku account with the exact email address listed in their IdP record.

Answer

No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.

Answer

An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Question 7

Universal Containers needs to write their Heroku application's logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.

What should an Architect recommend in this scenario?

Accepted Answer

Write all logs to stdout, and configure a separate log drain for each destination.

Answer

Publish all logs to Apache Kafka on Heroku, and create a separate app that consumes and distributes log messages.

Answer

Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations.

Answer

Add a logging library to the application source that sends all logs directly to both destinations.

Question 8

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR).

What should an Architect advise UC regarding data residency in this scenario?

Accepted Answer

Heroku support can configure add-ons for specific data residency needs.

Answer

Heroku does not control where add-on providers store data.

Answer

Heroku guarantees the physical location of its control surface APIs.

Answer

Data residency for add-ons is covered under Salesforce's GDPR compliance.

Question 9

Which Heroku runtimes provide keystroke logging?

Accepted Answer

Private Spaces and Shield Private Spaces

Answer

The Common Runtime, Private Spaces, and Shield Private Spaces

Answer

Shield Private Spaces only

Answer

Keystroke logging is not available on Heroku

Question 10

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.

Which solution should an Architect recommend to meet these requirements?

Accepted Answer

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Answer

Create the application in a Private Space with default options.

Answer

Create the application with Internal Routing enabled, in a Private Space.

Answer

Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Free Certified Heroku Architecture Designer sample questions

A client wants to create a scalable set of microservices that communicate with each other, where multiple microservices have a public REST API. Which architecture strategy allows this on Heroku?

A client wants to secure their web application using SSL/TLS. They do not have specific requirements regarding using a particular version of SSL/TLS. Which two Heroku features should an Architect recommend as options? (Choose two.)

A client is running an app on 20 Standard-2x dynos. They are noticing highly variable performance when the application is experiencing a heavy load. Which two suggestions should an Architect make in this scenario? (Choose two.)

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC. Which Heroku feature should an Architect recommend to create the connection?

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP). Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

Universal Containers (UC) has configured SSO fortheir Heroku Enterprise Team using an identity provider (IdP). When a new employee joins the company, how should their Heroku account be created?

Universal Containers needs to write their Heroku application's logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint. What should an Architect recommend in this scenario?

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR). What should an Architect advise UC regarding data residency in this scenario?

Which Heroku runtimes provide keystroke logging?

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet. Which solution should an Architect recommend to meet these requirements?

10 more free samples are waiting