| Exam Code/Number: | Plat-Arch-206Join the discussion |
| Exam Name: | Salesforce Certified Heroku Architect |
| Certification: | Salesforce |
| Question Number: | 172 |
| Publish Date: | May 30, 2026 |
|
Rating
100%
|
|
A client is writing a Heroku application that requirescompliance with PCI DSS Level 1. To accomplish this, they deploy an application to the Shield Private Space. Which statement is true about the application?
Universal Containers is developing a Salesforce app thatinvokes a Heroku app's web service, which asynchronously generates customer invoices. The Heroku app is deployed to a Private Space. When an invoice is ready, the Heroku app sends a POST request to the Salesforce REST API. Which two options should an Architect recommend to ensure that neither the Salesforce nor the Heroku app is accessible from the public internet? Choose 2 answers.
Applications on Heroku that use Salesforce REST APIs can use which authentication mechanisms:
Universal Containers has an app deployed on Heroku that is now required to handle high-volume message processing. What should an Architect recommend to fulfill this new requirement?