HEROKU-ARCHITECTURE-DESIGNER Exam Questions and Answers

QUESTION: 16

A web application on Heroku wants to surface Salesforce data. All users of the web application will:
1) Authenticate using SSO with Salesforce.
2) Have user records in Salesforce.

What architecture should be recommended in order to maintain the Salesforce security model already in place?

Use Heroku Connect to sync the Salesforce data and Salesforce security model to Heroku Postgres.
Have the application query Salesforce data and the security model directly using a cached admin credential.
Use Heroku Connect, with a per-user authentication model, to sync the Salesforce data to Heroku Postgres.
Have the application query Salesforce data directly through the Salesforce APIs as the running user.

Answer(s): A

Reference:

https://devcenter.heroku.com/articles/addon-controls

Reveal Solution Next Question

QUESTION: 17

A client wants to create a scalable set of microservices that communicate with each other, where multiple microservices have a public REST API.

Which architecture strategy allows this on Heroku?

Each microservice is a separate Heroku app. The microservices communicate by using Apache Kafka as a message bus.
Each microservice is a separate process type in a single Heroku app. The microservices communicate by using Redis as a message bus.
Each microservice is a separate private space. The microservices communicate by using DNS Service Discovery.
Each microservice is a separate process in a single Heroku app. The microservices communicate by using shared memory.

Answer(s): C

Reference:

https://devcenter.heroku.com/artJcles/event-driven-microservices-with-aDache-kafka

Reveal Solution Next Question

QUESTION: 18

Universal Containers has a Heroku Private Space with a VPN connection to their on-premise network. They want their remote employees to be able to access their Heroku applications using a VPN connection only.
Which solution should an Architect recommend?

Clone the Heroku applications to a second Private Space, and configure its VPN for remote employees.
Enable remote employees to VPN into the company's on-premise network.
Configure a second VPN connection for the Private Space that remote employees can use.
Add all remote employees to an Enterprise Team, and configure it to connect to the Private Space via SSO.

Answer(s): C

Reveal Solution Next Question

QUESTION: 19

Universal Containers (UC) has configured SSO for their Heroku Enterprise Team using an identity provider (IdP).
When a new employee joins the company, how should their Heroku account be created?

A Heroku account is created for the employee automatically the first time they log in to Heroku via SSO.
The employee should create a new Heroku account with the exact email address listed in their IdP record.
No account creation is required, because all SSO users in a particular Enterprise Team are associated with a single Heroku account.
An administrator of the Enterprise Team creates the Heroku account with the exact email address listed in the employee's IdP record.

Answer(s): A

Reference:

https://devcenter.heroku.com/artJcles/using-sso-services-with-heroku#end-user-account-creation-and-removal

Reveal Solution Next Question

QUESTION: 20

A client wants to use Heroku Connect to sync data bidirectionally between a Salesforce org and a Heroku Postgres database.
In this scenario, which two are advantages to setting a custom External Identifier field in the Heroku Connect mapping? (Choose two.)

External IDs simplify the mapping of polymorphic relationships in the Salesforce org.
External IDs improve speed when inserting multiple related objects.
External IDs prevent the creation of orphaned duplicates in Heroku Postgres.
External IDs are required to enable bidirectional synchronization.

Answer(s): C,D

Reveal Solution Next Question

Salesforce HEROKU-ARCHITECTURE-DESIGNER Exam (page: 4) Salesforce Certified Heroku Architecture Designer Updated on: 25-Dec-2025

QUESTION: 16

Reference:

QUESTION: 17

Reference:

QUESTION: 18

QUESTION: 19

Reference:

QUESTION: 20

Salesforce HEROKU-ARCHITECTURE-DESIGNER Exam (page: 4)
Salesforce Certified Heroku Architecture Designer
Updated on: 25-Dec-2025