Certified Heroku Architecture Designer

Here you have the best Salesforce Certified Heroku Architecture Designer practice exam questions

You have 58 total questions to study from
Each page has 5 questions, making a total of 12 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 11, 2025
This site is not affiliated with or endorsed by Salesforce.

Question 1 of 58

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.
Which solution should an Architect recommend to meet these requirements?

Create the application in a Private Space with default options.

Create the application in a Private Space and restrict the application's set of trusted IP ranges.

Create the application with Internal Routing enabled, in a Private Space.

Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Correct Answer: C

To ensure that the API application is only accessible from other apps deployed to Heroku and that traffic does not transit the public internet, the application should be created with Internal Routing enabled in a Private Space. Internal Routing allows applications within the same Private Space to communicate without using the public internet, providing a secure and private network for inter-app communication.

Question 2 of 58

A client has data in a production Heroku Postgres database, and needs to quickly get access to a subset of that data for reporting needs.
Which two features does Heroku Dataclips provide to enable this? (Choose two.)

JSON export of query results, with CORS support

CSV export of query results

A simple REST API access to query results

Postgres dump file of query results

Correct Answer: A, B

Heroku Dataclips provides features that allow users to export query results in various formats, including JSON and CSV. JSON export enables seamless integration with web applications through CORS support. CSV export is commonly used for reporting and data analysis as it is a widely accepted format for data interchange.

Question 3 of 58

Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku? (Choose three.)

An identity provider with built-in support for Heroku

A Heroku Enterprise Team

An existing Heroku account for each user

At least one valid SSO certificate

Administrative permissions on the selected identity provider

Correct Answer: A, B, E

Question 4 of 58

Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data.
Which Heroku architecture should an Architect recommend?

Common Runtime with secure, isolated containers for running the app's code.

A Private Space restricted to a set of trusted IP ranges.

A Shield Private Space with a Shield Postgres add-on.

A Private Space with Internal Routing enabled on the app.

Correct Answer: C

Question 5 of 58

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC.
Which Heroku feature should an Architect recommend to create the connection?

Internal Routing

Private Space Peering

Private Space VPN connections

Heroku Connect

Correct Answer: B

To create a secure network connection between Heroku applications running in a Private Space and an AWS VPC, the appropriate feature to use is Private Space Peering. This feature allows for the connection of a Heroku Private Space directly to an AWS VPC, providing a secure and efficient way to link the two environments.