Certified Heroku Architecture Designer Salesforce Practice Questions
Prepare for Certified Heroku Architecture Designer with more than an answer.
- Exam fee
- $200 USD
- Level
- Architect
- Valid for
- Valid until maintenance is due
Domains covered on the exam 6
- Heroku Platform18%
- Data23%
- Security20%
- Heroku Enterprise15%
- Architect Applications12%
- Integrations12%
- 1
An app uses a queue of worker dynos to perform complex image processing, but the worker dynos are occasionally running out of memory when performing the processing. All of their dynos are currently standard-1x dynos.
What should an Architect recommend in this scenario?
Show answer details
Correct answer: D
- 2
Which is a characteristic of an add-on that is "available" for applications in Private Spaces but not "installable" in a Private Space?
Show answer details
Correct answer: C
C
- 3
A client is planning to deploy an application to Heroku. The client's IT department requires all applications to be hosted from Australia, where their main office is located. Regulators in Australia require keystroke logs of all engineers who create interactive sessions for the application.
Which should an Architect recommend in this scenario?
Show answer details
Correct answer: C
- 4
A client provisions a Heroku Postgres database in the EU region.
Which two services related to Heroku Postgres are located in the U.S.? (Choose two.)
Show answer details
Correct answer: A, D
A, D
A, D
- 5
Case Study: A FinTech startup is building a PCI-compliant trading platform on Heroku. The architecture consists of several microservices deployed in a Shield Private Space in the Virginia region.
Current Situation:
- A 'Trading API' application receives requests from external partners. These partners have static IP addresses.
- An 'Analytics Service' needs to connect to a data warehouse hosted in an AWS VPC (us-east-1), which is managed by a separate team.
- A 'Reporting Service' must be accessible only to internal analysts who connect from the corporate office via a dedicated VPN.
- All inter-service communication between the 'Trading API', 'Analytics Service', and 'Reporting Service' must not traverse the public internet.
Requirements:
- Securely allow traffic from partners to the 'Trading API'.
- Establish a private, secure, and low-latency connection from the 'Analytics Service' to the AWS VPC.
- Ensure the 'Reporting Service' is only accessible via the corporate VPN.
- All services within the Shield Private Space must communicate privately.
Which combination of Heroku features correctly meets all requirements?
graph TD subgraph Corporate Network Analysts --> VPN end subgraph Internet Partners --> TradingAPI end subgraph Shield Private Space [Heroku Shield Space] TradingAPI[Trading API] --> Analytics TradingAPI --> Reporting Analytics[Analytics Service] -->|Private Link| AWS_VPC Reporting[Reporting Service] end subgraph AWS AWS_VPC[AWS VPC] end VPN --> ReportingShow answer details
Correct answer: B
This solution correctly maps each requirement to the appropriate Heroku feature: 1) Trusted IP Ranges are used to whitelist the static IPs of partners for the 'Trading API'. 2) Private Space Peering is the ideal solution for creating a private, low-latency connection between a Heroku Private Space and an AWS VPC in the same region. 3) A Private Space VPN connection is used to link the corporate office network to the Private Space, allowing secure access to internal services like the 'Reporting Service'. 4) All services within the same Private Space can communicate privately by default without needing Internal Routing enabled (which would make them only internally accessible).
- 6
A client wants to create a scalable set of microservices that communicate with each other, where multiple microservices have a public REST API.
Which architecture strategy allows this on Heroku?
Show answer details
Correct answer: C
- 7
A client wants to secure their web application using SSL/TLS. They do not have specific requirements regarding using a particular version of SSL/TLS.
Which two Heroku features should an Architect recommend as options? (Choose two.)
Show answer details
Correct answer: B, C
B, C -- Reference: https://devcenter.heroku.com/articles/ssl
B, C -- Reference: https://devcenter.heroku.com/articles/ssl
- 8
A client is running an app on 20 Standard-2x dynos. They are noticing highly variable performance when the application is experiencing a heavy load.
Which two suggestions should an Architect make in this scenario? (Choose two.)
Show answer details
Correct answer: B, D
B, D -- Reference: https://devcenter.heroku.com/articles/optimizing-dyno-usage
B, D -- Reference: https://devcenter.heroku.com/articles/optimizing-dyno-usage
- 9
A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC.
Which Heroku feature should an Architect recommend to create the connection?
Show answer details
Correct answer: C
Reference: https://blog.heroku.com/private-spaces-vpn
- 10
A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).
Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?
Show answer details
Correct answer: A
A
