Skip to content

ACH-Forge-Fundamentals Forge Fundamentals Practice Questions

Prepare for ACH-Forge-Fundamentals with more than an answer.

135 questions in the full set12 sample questionsUpdated Mar 12, 2026
Level
Certificate (Foundational)
Valid for
12 months from the date of passing
Domains covered on the exam 4
  1. Forge Architecture and Runtime30%
  2. Building and Deploying30%
  3. Implementation Patterns25%
  4. Debugging and Troubleshooting15%
  1. 1

    True or False: Data stored in Forge Hosted Storage is namespaced, meaning that an app can only access its own data and cannot read stored data from different Atlassian apps or app environments.

    Show answer details

    Correct answer: A

    True. Data in Forge hosted storage is strictly namespaced. The namespace includes metadata relevant to an app's current installation, ensuring isolated access exclusively for that app in that specific environment.

  2. 2

    During the initial setup of a new Forge project, a developer runs a specific CLI command that automatically populates the app.id property in the manifest.yml file with a unique Atlassian Resource Identifier (ARI). Which command performs this action?

    Show answer details

    Correct answer: C

    The forge create command initializes a new project from a template and registers it, automatically populating the app.id property in the manifest.yml with a unique ARI.

  3. 3

    A security architect is reviewing a proposed Forge app that uses Custom UI. They are concerned about the app executing malicious scripts that could access the parent Atlassian product interface.

    How does the Forge platform's architecture mitigate this risk?

    Show answer details

    Correct answer: B

    Custom UI provides full customization by running the app's interface within an isolated iframe. This prevents the app from accessing the parent DOM of the Atlassian host product, and it enforces modern security features like Content Security Policy (CSP).

  4. 4

    A developer is evaluating Atlassian Forge for a new Jira integration. Which of the following best describes the underlying architecture of the Forge runtime environment?

    Show answer details

    Correct answer: B

    At the heart of Forge is a serverless FaaS hosting platform powered by AWS Lambda. Infrastructure is provisioned, managed, monitored, and scaled automatically by Atlassian, freeing developers from infrastructure management.

  5. 5

    You are migrating a legacy Forge app. The app currently uses the legacy JavaScript sandbox runtime. According to Atlassian's deprecation policy, what is the required path forward for this app?

    Show answer details

    Correct answer: B

    The legacy JavaScript sandbox runtime is deprecated. All Forge apps must be updated to use the native Node.js runtime (such as nodejs24.x, nodejs22.x, or nodejs20.x) by specifying it in the runtime section of the manifest.yml.

  6. 6

    A Forge app integrates with a third-party HR system to sync employee data to Jira. During testing, the API calls to https://api.hr-system.example.com fail with a REQUEST_EGRESS_ALLOWLIST_ERR error.

    Which of the following describes the root cause and the required architectural fix?

    sequenceDiagram participant App as Forge App participant Proxy as Forge Outbound Proxy participant Ext as api.hr-system.example.com App->>Proxy: Fetch request to Ext Note over Proxy: Evaluates egress rules Proxy-->>App: REQUEST_EGRESS_ALLOWLIST_ERR Proxy-xExt: Request Blocked
    Show answer details

    Correct answer: C

    Forge enforces strict data egress restrictions by design. All external requests are routed through an outbound proxy. If an external domain is not explicitly declared in the permissions.external.fetch.backend section of the manifest.yml, the proxy blocks the request and returns a REQUEST_EGRESS_ALLOWLIST_ERR.

Create an account to continue.