support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. HEROKU-ARCHITECT

Free HEROKU-ARCHITECT Exam Braindumps
Salesforce Certified Heroku Architect Questions 46–50 (page: 11)

Updated On: 10-Feb-2026
Page 11 of 38
PDF with 185 Questions

A hospital wants to build a mobile app that allows patients to check the status of submitted insurance claims, which the hospital stores in Salesforce Health Cloud. The app's back end will run on Heroku.

Which two measures should an Architect recommend to help ensure that the app is compliant with HIPAA? (Choose two.)

  1. Use Heroku Shield Connect to sync claim data from Salesforce to a Heroku Postgres database.
  2. Use only Heroku Shield Postgres databases to store claim data outside of Salesforce Health Cloud.
  3. Ensure that the back-end application's code encrypts all claim data before writing it to a Heroku Postgres database.
  4. Ensure that the mobile app can only run when on the hospital's intranet, which is connected to the back end's Shield Private Space via VPN.

Answer(s): A,C



Universal Containers (UC) has a Heroku application that runs in Virginia, in the U.S., that uses Apache

Kafka on Heroku. They have deployed a copy of the app in Asi

  1. Now, both apps need a messaging backbone that will support multi-region distribution.
    What is the least complex architecture that an Architect should recommend?
  2. Deploy a multi-region version of Apache Kafka on Heroku.
  3. Use Heroku's multi-tenant Kafka Basic plan.
  4. The app in Asia should write to the Kafka instance in Virginia.
  5. Provision a second Kafka add-on in Asia. Each instance of the app should sync with each other.

Answer(s): B

Explanation:

-https://www.heroku.com/tech-sessions/get-started-with-apache-kafka



Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.

What should an Architect recommend UC do to secure their database to only trusted locations?

  1. Move the database and the app into the Private Space.
  2. Add a Trusted IP range to the Heroku Postgres configuration.
  3. Set up a VPN from the trusted locations to the app.
  4. Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.

Answer(s): B



Universal Containers (UC) wants to allow its developers to only use certain add-ons. UC enables Add- on Controls for Enterprise Teams and adds the add-ons they wish to allow to the list. There is an existing set of add-ons attached to applications, which are NOT on the list.

What happens to these add-ons?

  1. They are deleted, and all data is backed up and saved.
  2. They are added to the allowed add-ons list.
  3. They are added to the exception list and not affected.
  4. They are flagged for removal, and the developers are notified.

Answer(s): D

Explanation:

https://devcenter.heroku.com/articles/addon-controls



Universal Containers has an application running in the Common Runtime that uses Heroku Redis. The data in Heroku Redis needs to be accessed by a third-party application.

Which connection method should an Architect recommend to ensure the security of the data as it moves from Heroku Redis to the third-party application?

  1. Use stunnel to secure the connection between Heroku Redis and the third-party application.
  2. Set up SSL Certificates on Heroku and the third-party application.
  3. Only allow access to Heroku Redis through an SSH connection.
  4. Set up both a VPN and a VPC between Heroku and the third-party application.

Answer(s): C

Explanation:

https://devcenter.heroku.com/articles/securing-heroku-redis



  PDF
Viewing page 11 of 38
Viewing questions 51 - 55 out of 185 questions


Post your Comments and Discuss Salesforce HEROKU-ARCHITECT exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!