Certified Heroku Architecture Designer

Here you have the best Salesforce Certified Heroku Architecture Designer practice exam questions

You have 60 total questions to study from
Each page has 5 questions, making a total of 12 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on January 10, 2026
This site is not affiliated with or endorsed by Salesforce.

Question 1 of 60

Universal Containers needs to write their Heroku application's logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.
What should an Architect recommend in this scenario?

Publish all logs to Apache Kafka on Heroku, and create a separate app that consumes and distributes log messages.

Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations.

Add a logging library to the application source that sends all logs directly to both destinations.

Write all logs to stdout, and configure a separate log drain for each destination.

Correct Answer: D

Question 2 of 60

A hospital is planning to rewrite its on-premise patient registration system. Their current system is HIPAA-compliant as well as ISO 27018-compliant. They need to maintain these same certification levels after the rewrite. Their new app also needs to sync PII (personally identifiable information) data with their Salesforce org.
What Heroku Enterprise solutions should an Architect propose?

Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Apache Kafka on Heroku to stream from the Salesforce org.

Build the app in the Common Runtime, use a Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Shield Heroku Connect to sync to Salesforce.

Build the app in a Private Space with a Private Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

Correct Answer: C

Question 3 of 60

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.
Which solution should an Architect recommend to meet these requirements?

Create the application in a Private Space with default options.

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Create the application with Internal Routing enabled, in a Private Space.

Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Correct Answer: C

To ensure that the API application is only accessible from other apps deployed to Heroku and that traffic does not transit the public internet, the application should be created with Internal Routing enabled in a Private Space. Internal Routing allows applications within the same Private Space to communicate without using the public internet, providing a secure and private network for inter-app communication.

Question 4 of 60

A client has data in a production Heroku Postgres database, and needs to quickly get access to a subset of that data for reporting needs.
Which two features does Heroku Dataclips provide to enable this? (Choose two.)

JSON export of query results, with CORS support

CSV export of query results

A simple REST API access to query results

Postgres dump file of query results

Correct Answer: A, B

Heroku Dataclips provides features that allow users to export query results in various formats, including JSON and CSV. JSON export enables seamless integration with web applications through CORS support. CSV export is commonly used for reporting and data analysis as it is a widely accepted format for data interchange.

Question 5 of 60

Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku? (Choose three.)

An identity provider with built-in support for Heroku

A Heroku Enterprise Team

An existing Heroku account for each user

At least one valid SSO certificate

Administrative permissions on the selected identity provider

Correct Answer: A, B, E