ACH-Forge-Fundamentals Forge Fundamentals Practice Questions
Prepare for ACH-Forge-Fundamentals with more than an answer.
- Level
- Certificate (Foundational)
- Valid for
- 12 months from the date of passing
Domains covered on the exam 4
- Forge Architecture and Runtime30%
- Building and Deploying30%
- Implementation Patterns25%
- Debugging and Troubleshooting15%
- 1
True or False: Data stored in Forge Hosted Storage is namespaced, meaning that an app can only access its own data and cannot read stored data from different Atlassian apps or app environments.
Show answer details
Correct answer: A
True. Data in Forge hosted storage is strictly namespaced. The namespace includes metadata relevant to an app's current installation, ensuring isolated access exclusively for that app in that specific environment.
- 2
During the initial setup of a new Forge project, a developer runs a specific CLI command that automatically populates the
app.idproperty in themanifest.ymlfile with a unique Atlassian Resource Identifier (ARI). Which command performs this action?Show answer details
Correct answer: C
The
forge createcommand initializes a new project from a template and registers it, automatically populating theapp.idproperty in the manifest.yml with a unique ARI. - 3
A security architect is reviewing a proposed Forge app that uses Custom UI. They are concerned about the app executing malicious scripts that could access the parent Atlassian product interface.
How does the Forge platform's architecture mitigate this risk?
Show answer details
Correct answer: B
Custom UI provides full customization by running the app's interface within an isolated iframe. This prevents the app from accessing the parent DOM of the Atlassian host product, and it enforces modern security features like Content Security Policy (CSP).
- 4
A developer is evaluating Atlassian Forge for a new Jira integration. Which of the following best describes the underlying architecture of the Forge runtime environment?
Show answer details
Correct answer: B
At the heart of Forge is a serverless FaaS hosting platform powered by AWS Lambda. Infrastructure is provisioned, managed, monitored, and scaled automatically by Atlassian, freeing developers from infrastructure management.
- 5
You are migrating a legacy Forge app. The app currently uses the legacy JavaScript sandbox runtime. According to Atlassian's deprecation policy, what is the required path forward for this app?
Show answer details
Correct answer: B
The legacy JavaScript sandbox runtime is deprecated. All Forge apps must be updated to use the native Node.js runtime (such as nodejs24.x, nodejs22.x, or nodejs20.x) by specifying it in the runtime section of the manifest.yml.
- 6
A Forge app integrates with a third-party HR system to sync employee data to Jira. During testing, the API calls to
https://api.hr-system.example.comfail with aREQUEST_EGRESS_ALLOWLIST_ERRerror.Which of the following describes the root cause and the required architectural fix?
sequenceDiagram participant App as Forge App participant Proxy as Forge Outbound Proxy participant Ext as api.hr-system.example.com App->>Proxy: Fetch request to Ext Note over Proxy: Evaluates egress rules Proxy-->>App: REQUEST_EGRESS_ALLOWLIST_ERR Proxy-xExt: Request BlockedShow answer details
Correct answer: C
Forge enforces strict data egress restrictions by design. All external requests are routed through an outbound proxy. If an external domain is not explicitly declared in the
permissions.external.fetch.backendsection of the manifest.yml, the proxy blocks the request and returns a REQUEST_EGRESS_ALLOWLIST_ERR.
