Study with Salesforce : Plat-Arch-206 Exam Torrent as your best preparation materials

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.
What should an Architect recommend UC do to secure their database to only trusted locations?

• A. Set up a VPN from the trusted locations to the app.
• B. Add a Trusted IP range tothe Heroku Postgres configuration.
• C. Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.
• D. Move the database and the app into the Private Space.

Universal Containers (UC) has an app that allows a costumer to schedule a compute-intensive job. It allows the costumer to schedule the job on an ad-hoc basis. UC has decided to break up the app into the following services: - Website: an Interface for their costumers; -Billing: generates monthly invoices based on usage metrics; - Traffic Cop: manages the job queue, job definitions and job schedule; - Job Runner; runs jobs that Traffic Cop queues up. It Is responsible for self-introspection and self-scaling. UC also wants to createa data lake for analytics. What foundational technology and design should an Architect use to manage communication between these services?

• A. Apache Kafka on Heroku Create a Kafka queue for each service. Create a central routing service that connects to all of the Kafka queues and routes data. The central router is attached to a data lake, and pushes every message into It.
• B. Apache Kafka on Heroku as a bus between all services Create topics for billing, jobs, and website clicks Create an additional service, which will subscribe for all topics, and dump every message into a data lake
• C. Heroku Redis, create a large Redis store. Allow each service to place messages with an agreed-upon format into a single queue, backed by the Redis storeServices listen for messages addressed to them and take action on them. Redis will serve as the data lake.
• D. Heroku Connect and Salesforce Sync all relevant data into Salesforce and allow it to flow into each service Create custom objects for each serviceand alow them to post to each others' objects as needed.
  Push data from Salesforce into Heroku Postgres for a data lake.

A client has a Heroku app that uses Apache Kafka on Heroku. They want to refactor the app into 2 distinct appsthat will both continue to use Kafka (because they probably don't have so much to do in their life). Based on this refactoring, what should an Architect recommend?

• A. Ensure that the apps consume mutually excliusive sets of Kafka topics
• B. Attach the existing Kafka add-on to both apps
• C. Designate one app as a producer and the other as a consumer
• D. Attach the existing Kafka add-on to one app and attach a new Kafka add-on to the other app

A financial reporting application, hosted on an on-premise server, uses a native library (wkhtmltopdf) to convert its HTML reports into PDFs. The app is being migrated to Heroku.
What option should an Architect recommend to enable the Heroku application to use wkhtmltopdf?

• A. Install the dependency using sudo apt install wkhtmltopdf from .profile in the project root.
• B. Use a custom buildpack to install wkhtmltopdf using apt.
• C. Continue to host wkhtmltopdf on-premise, and build a REST API so the library can be invoked from the Heroku app.
• D. Ensure that the Heroku app fetches the wkhtmltopdf library from cloud storage on dyno restart.

Universal Containers acquires a company that runs an application on Google Cloud Platform (GCP). TheGCP application needs to communicate securely with a Heroku application. The Heroku application has Internal Routing enabled and is running in a Private Space. Which two recommendations should an Architect make to satisfy this use case? Choose 2 answers.

• A. Establish a secure site-to-site VPN connection between the Private Spaceand GCP.
• B. Ensure that the Private Space and GCP use distinct CIDR ranges
• C. Disable Internal Routing on the Heroku app.
• D. Ensure that the Private Space and GCP use matching CIDR ranges.