Question 1

Your client has an application running in Heroku Common Runtime. They want to maintain the existing architecture but need to access a private resource in their AWS VPC. Which solution would you recommend?

Options :

A : Move the application to a Heroku Private Space and configure Private Space Peering

B : Configure a Heroku VPN connection to the AWS VPC

C : Use an internet-facing endpoint for the private resource in AWS VPC

D : There is no way to accomplish this, as Heroku Common Runtime cannot connect to a private resource in AWS VPC

Answer: D

Question 2

Universal Containers is developing a Salesforce app that invokes a Heroku app's web service, which asynchronously generates customer invoices. The Heroku app is deployed to a Private Space. When an invoice is ready, the Heroku app sends a POST request to the Salesforce REST API. Which two options should an Architect recommend to ensure that neither the Salesforce nor the Heroku app is accessible from the public internet? Choose 2 answers.

Options :

A : Restrict the Private Space-s trusted IP range to Salesforce IP addresses

B : Restrict the Private Space-s trusted IP range to Universal Containers' VPN

C : Restrict the Salesforce connected app-s login IP ranges to Universal Containers' VPN

D : Restrict the Salesforce connected app-s login IP ranges to the stable outbound IP addresses of the Private Space

Answer: A,D

Question 3

A financial services firm is migrating their services to the cloud and wants to maintain strict compliance regulations, network isolation, and high-quality performance for their customer-facing applications. Which feature of Heroku Enterprise would most enhance their system’s architecture?

Options :

A : Heroku Enterprise Teams

B : Heroku CI/CD

C : Heroku Private Spaces

D : Heroku Connect

Answer: C

Question 4

Callouts from Salesforce to Heroku can be made using:

Options :

A : Corba

B : Web sockets

C : Message bus

D : Apex triggers or outbound messages

Answer: D

Question 5

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR).What should an Architect advise UC regarding data residency in this scenario?

Options :

A : Heroku does not control where add-on providers store data.

B : Heroku support can configure add-ons for specific data residency needs.

C : Heroku guarantees the physical location of its control surface APIs.

D : Data residency for add-ons is covered under Salesforce-s GDPR compliance

Answer: B

Confidently Practice Online with Free Plat-Arch-206 Exam Cram

Buying Options: