Online Access Free Heroku-Architecture-Designer Practice Test

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.
What should an Architect recommend UC do to secure their database to only trusted locations?

• A.Set up a VPN from the trusted locations to the app.
• B.Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.
• C.Add a Trusted IP range to the Heroku Postgres configuration.
• D.Move the database and the app into the Private Space.

Which Is an effect of "locking" an application that belongs to a Heroku Enterprise Team?

• A.The application cannot be deployed until is unlocked.
• B.Members of the Enterprise Team cannot be granted new permissions for the application until it's unlocked.
• C.Members of the Enterprise Team who are not administrators have their permissions for the application revoked.
• D.New members of the Enterprise Team are granted no automatic permissions for the application.

A client runs an application on a background worker dyno. The application allows its users to request personalized information as a PDF. At peak usage, the app processes millions of requests at once. The resulting number of requests has caused a bottleneck that is impacting its performance.
Which two solutions can an Architect recommend to resolve the bottleneck and improve performance?
(Choose two.)

• A.Add Heroku Redis as a job queue.
• B.Increase the number of workers to consume the job faster.
• C.Add a CDN add-on from the Elements marketplace.
• D.Move the application to a Private Space.

A healthcare client is creating a web portal for their customers on Heroku, which is sourced from a Salesforce instance. Some of the Salesforce data they wish to display falls under HIPAA compliance, and their auditors have determined this data must be stored encrypted-at-rest. To satisfy this requirement, they have enabled Platform Encryption on Salesforce.
They are investigating Heroku Shield Private Spaces, Shield Dynos, Shield Postgres, and Shield Heroku Connect.
How will Shield Heroku Connect interact with the encrypted fields in Salesforce?

• A.Shield Heroku Connect will be able to synchronize data bidirectionally without additional customization.
• B.Shield Heroku Connect requires customization on the Salesforce side to decrypt the data before transmitting to Heroku.
• C.Shield Heroku Connect will be able to synchronize data from fields in Salesforce without additional customization, but any writes will need to be encrypted using the Salesforce encryption key first before being written.
• D.Shield Heroku Connect will be able to access only cypher text in the fields from Salesforce. They will need to import the encryption key from Salesforce to decrypt to store in Shield Postgres.

A client wants to secure their web application using SSL/TLS. They do not have specific requirements regarding using a particular version of SSL/TLS.
Which two Heroku features should an Architect recommend as options? (Choose two.)

• A.Heroku Shield Private Spaces
• B.Heroku SSL
• C.Heroku Private Spaces
• D.Automated Certificate Management