Salesforce Certified Heroku Architect - Plat-Arch-206 Exam Questions [2026]

QUESTION NO: 1
A client wants to create a set of applications that all communicate with each other.Only one of the applications should be accessible from the public internet. This application will act as an API gateway and route requests to the interbak applications using HTTPS. Which architecture should an Architect recommend?

A. Create all of the apps in a Private Space Create the internal apps with Internal Routing enabled. Create the gateway app as a web app B. Create all of the appsin a Private Space. Configure the Private Space's trusted IP ranges to only permit requests from within the Private Space C. Create the API gateway application in the Common Runtime. Create all of the internal apps in a Private Space. D. Create all of theapps in the Common Runtime. Ensure that the internal apps do not define a web process type.

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Universal Containers (UC) recently acquired another company, International Shipping. Each company has its own Salesforce org, and UC wants those orgs to remain separate for the foreseeable future. Given this scenario, which Heroku feature should an Architect recommend to provide additional value to UC following the acquisition?

A. Heroku External Objects can expose read-only data from both Salesforce orgs to Heroku Postgres. B. A Heroku Postgres database can sync data from both orgs for advanced querying capabilities. C. Heroku Connect can be used to synchronize data directly between the two Salesforceorgs. D. Both orgs can be attached to the same Heroku application as an add-on to ensure data residency in the application's region.

Correct Answer: C

QUESTION NO: 3
A client has 3 Heroku applications: App 1, App 2, App 3. They would like to restrict external web traffic to App 3 only. Which two Heroku features should an Architect recommend to enable this architecture?

A. Internal Routing B. Trusted IP ranges C. VPC Peering D. Private Spaces

Correct Answer: B

QUESTION NO: 4
The Private Spacesfeature can be useful if you need to:

A. Ensure that your application's incomingtraffic originates from a whitellsted set of IP addresses B. Speed up an application's response time by running it on dynos that are located geographically closer to your customers C. None of these D. Write Apex applications quickly

Correct Answer: A,B

QUESTION NO: 5
Thebest use of Canvas apps is to:

A. Display third-party apps in Salesforce B. Render custom widgets on Chatter feeds C. Display real estate photos in Salesforce for house listings D. All of these

Correct Answer: D

QUESTION NO: 6
Universal Containers needs to write their Heroku application's logs to twodestinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.
What should an Architect recommend in this scenario?

A. Add a logging library to the application source that sends all logs directly to both destinations. B. Write all logs to stdout, and configure a separate log drain for each destination. C. Write all logs to Heroku Redis as a buffer and use an add-on to send them to both destinations. D. Publish all logs to Apache Kafka on Heroku, and create a separate app thatconsumes and distributes log messages.

Correct Answer: B

QUESTION NO: 7
Universal Containers acquires a company that runs an application on Google Cloud Platform (GCP). TheGCP application needs to communicate securely with a Heroku application. The Heroku application has Internal Routing enabled and is running in a Private Space. Which two recommendations should an Architect make to satisfy this use case? Choose 2 answers.

A. Disable Internal Routing on the Heroku app. B. Ensure that the Private Space and GCP use distinct CIDR ranges C. Establish a secure site-to-site VPN connection between the Private Spaceand GCP. D. Ensure that the Private Space and GCP use matching CIDR ranges.

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Which is a characteristic of an add-on that is "available" for applications in Private Spaces but not
"installable" in a Private Space?

A. The add-on's data will always be stored in the same Private Space as the provisioning application. B. The add-on will always run in the same region, but not in the same Private Space, as the provisioning application. C. The traffic between the provisioning app and the add-on will travel across the public Internet. D. The add-on always runs in the samePrivate Space as the provisioning application.

Correct Answer: B

QUESTION NO: 9
Universal Containers is developing a Salesforce app thatinvokes a Heroku app's web service, which asynchronously generates customer invoices. The Heroku app is deployed to a Private Space. When an invoice is ready, the Heroku app sends a POST request to the Salesforce REST API. Which two options should an Architect recommend to ensure that neither the Salesforce nor the Heroku app is accessible from the public internet? Choose 2 answers.

A. Restrict the Private Space's trusted IP range to Universal Containers' VPN B. Restrict the Private Space's trusted IP range to Salesforce IP addresses C. Restrict the Salesforce connected app's login IP ranges to the stable outbound IP addresses of the Private Space D. Restrict the Salesforce connected app's login IP ranges to Universal Containers' VPN

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
You can use the Salesforce REST APIs to:

A. Feed your kitten B. Execute processes as another user C. Access database log files D. Insert or update records

Correct Answer: D

QUESTION NO: 11
Universal Containers needs to integrate three separate apps: a Salesforce app, an app developed to Heroku, and a custom-built app hosted on-premise. Each app needs to send and receive data from any of the other apps. Which two integration options should an Architect recommend that can connect all three systems in a fire-and-forget pattern? Choose 2 answers.

A. Publish and subscribe to Salesforce platform events B. Use Heroku External Objects as a data proxy C. Use Heroku Connect to synchronize all systems with Heroku Postgres D. Publish and subscribe to topics on Apache Kafka on Heroku

Correct Answer: A,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).