Certified Heroku Architecture Designer sample questions

Question 1

Universal Containers (UC) has configured SSO fortheir Heroku Enterprise Team using an identity provider (IdP). When a new employee joins the company, how should their Heroku account be created?

Accepted Answer

A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.

Answer

The employee should create a new Heroku account with the exact email address listed in their IdP record.

Answer

No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.

Answer

An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Question 2

Universal Containers needs to write their Heroku application's logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.

What should an Architect recommend in this scenario?

Accepted Answer

Write all logs to stdout, and configure a separate log drain for each destination.

Answer

Publish all logs to Apache Kafka on Heroku, and create a separate app that consumes and distributes log messages.

Answer

Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations.

Answer

Add a logging library to the application source that sends all logs directly to both destinations.

Question 3

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR).

What should an Architect advise UC regarding data residency in this scenario?

Accepted Answer

Heroku support can configure add-ons for specific data residency needs.

Answer

Heroku does not control where add-on providers store data.

Answer

Heroku guarantees the physical location of its control surface APIs.

Answer

Data residency for add-ons is covered under Salesforce's GDPR compliance.

Question 4

Which Heroku runtimes provide keystroke logging?

Accepted Answer

Private Spaces and Shield Private Spaces

Answer

The Common Runtime, Private Spaces, and Shield Private Spaces

Answer

Shield Private Spaces only

Answer

Keystroke logging is not available on Heroku

Question 5

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.

Which solution should an Architect recommend to meet these requirements?

Accepted Answer

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Answer

Create the application in a Private Space with default options.

Answer

Create the application with Internal Routing enabled, in a Private Space.

Answer

Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Question 6

A healthcare services client is requesting an architecture for a set of applications: one is a marketing application, and the other two are of customer service applications that allow for customers to interact with their healthcare records. The marketing application must be able to scale up within seconds in response to traffic spikes. The client wants to be able to deploy each of these applications to the U.S. East Coast and EMEA.

Which applications should be deployed into which Heroku runtime?

Accepted Answer

The marketing application into Private Spaces; customer service applications into Shield Private Spaces

Answer

The marketing application into the Common Runtime; customer service applications into Shield Private Spaces

Answer

The marketing application into the Common Runtime; customer service applications into Private Spaces

Answer

The marketing application into Private Spaces; customer service applications into separate Private Spaces

Question 7

Universal Containers (UC) recently acquired another company, International Shipping. Each company has its own Salesforce org, and UC wants those orgs to remain separate for the foreseeable future.

Given this scenario, which Heroku feature should an Architect recommend to provide additional value to UC following the acquisition?

Accepted Answer

Heroku Connect can be used to synchronize data directly between the two Salesforce orgs.

Answer

Both orgs can be attached to the same Heroku application as an add-on to ensure data residency in the application's region.

Answer

Heroku External Objects can expose read-only data from both Salesforce orgs to Heroku Postgres.

Answer

Heroku Postgres database can sync data from both orgs for advanced querying capabilities.

Question 8

Which three resources can be found in the Heroku Elements Marketplace? (Choose three.)

Accepted Answer

Heroku Buttons

Accepted Answer

Buildpacks

Accepted Answer

Add-ons

Answer

Heroku Stacks

Answer

Docker image files

Question 9

Universal Containers wants to limit the total cost of their Heroku usage while they're getting started on the platform. To accomplish this, they are considering replacing certain add-ons with comparable open-source components, but the development team doesn't want to lose access to certain features that the add-ons provide.

Which option should an Architect recommend for reducing add-on costs without affecting feature availability?

Accepted Answer

Remove data store add-ons from the staging and development versions of the applications.

Answer

Remove aliases for high-cost add-ons.

Answer

Share a single instance of a compatible paid add-on across multiple applications.

Answer

Migrate add-ons to free plans.

Question 10

Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data.

Which Heroku architecture should an Architect recommend?

Accepted Answer

A Shield Private Space with a Shield Postgres add-on.

Answer

Common Runtime with secure, isolated containers for running the app's code.

Answer

A Private Space restricted to a set of trusted IP ranges.

Answer

A Private Space with Internal Routing enabled on the app.

Certified Heroku Architecture Designer Sample Questions & Answers

Ready for the real thing?

Certified Heroku Architecture Designer Sample Questions & Answers

Related practice tests

Ready for the real thing?