Question 1

Your organization plans to deploy an application on Heroku and has strict security policies that require all data in transit to be encrypted and prevent any direct internet access to the application. They also want to ensure that communication between their on-premise database and Heroku app is secure and private. What would be your recommendation as an architect?

Options :

A : Use Heroku Common Runtime and SSL encryption for the application

B : Use Heroku Private Spaces and enable Private Space Peering to the on-premise data center

C : Use Heroku Private Spaces and SSL encryption for the application

D : Use Heroku Common Runtime and enable Private Space Peering to the on-premise data center

Answer: B

Question 2

You are designing a Heroku Enterprise solution for a highly regulated industry that requires strong security and compliance measures. Which compliance feature of Heroku Shield should you highlight to address these requirements?

Options :

A : Shield Connect for secure communication

B : Dynamic Credential Rotation for enhanced security

C : Shield Private Spaces for isolated runtime environments

D : Encryption at Rest for data protection

Answer: D

Question 3

A financial services firm is migrating their services to the cloud and wants to maintain strict compliance regulations, network isolation, and high-quality performance for their customer-facing applications. Which feature of Heroku Enterprise would most enhance their system’s architecture?

Options :

A : Heroku Enterprise Teams

B : Heroku CI/CD

C : Heroku Private Spaces

D : Heroku Connect

Answer: C

Question 4

A finance company is moving its applications to Heroku and must adhere to the Payment Card Industry Data Security Standard (PCI-DSS). Which architectural aspects should be considered to meet these security requirements?

Options :

A : Use Heroku Connect for data synchronization

B : Implement Heroku Shield services in a Private Space

C : Store all sensitive data in Heroku Redis

D : Run applications in the Common Runtime to ensure cost-effectiveness

Answer: B

Question 5

A client has an application that uses both Node.js and Python. They are confused about how to deploy this application on Heroku. What should they do?

Options :

A : Deploy the application twice, once for each language

B : Use a custom multi-buildpack to handle both languages

C : Choose one language for deployment and translate the other parts of the code

D : Use the Heroku CLI to manually combine the two parts of the application

Answer: B