MENU
Q. 30 A client has a Heroku Redis instance that can be accessed over the public internet. To meet compliance requirements, the IT Security team requires thatall databases must be isolated from the public internet. Which solution should be suggested by an Architect?
Suggested Answer: A
Get Premium Salesforce Certified Heroku Architect (Plat-Arch-206) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
VO
Vonda
11 months ago
I agree with C, it covers all bases for security!
SK
Skye
11 months ago
A is a good start, but it might not meet all compliance needs.
DE
Delisa
12 months ago
Wait, can you really just enclose it in a Shield Private Space? Sounds too easy!
EZ
Ezekiel
12 months ago
I think B is a solid option too, but not as secure as C.
GE
Geoffrey
1 year ago
Option C seems like the best choice for full isolation.
ST
Stephania
1 year ago
I vaguely remember something about Shield Private Spaces providing extra security, but I'm not clear on how the firewall configuration works for Redis traffic.
CL
Claribel
1 year ago
I practiced a question similar to this, and I feel like combining a Private Space with a Private Tier plan might be the safest option.
HI
Hildegarde
1 year ago
I think using a Private Tier plan is important, but I can't recall if enabling Trusted IP ranges alone would meet the compliance requirements.
RO
Rozella
1 year ago
I remember studying about Private Spaces and how they can help isolate resources, but I'm not sure if just enclosing the Redis instance is enough for compliance.
PA
Patti
1 year ago
I think the key here is ensuring the Redis instance is completely isolated from the public internet. Option D with the Shield Private Space and firewall configuration seems like it would provide the strongest security.
BE
Beth
1 year ago
Option C looks promising - using a Heroku Private Space and a Private Tier Redis instance. That should give us the isolation we need while still keeping the Redis instance accessible to the app.
LU
Lucy
1 year ago
This seems like a straightforward compliance question. I'll carefully review the options and choose the one that best isolates the Redis instance from the public internet.
ER
Erick
1 year ago
Hmm, I'm a bit unsure about the differences between the Heroku Private Space and Shield Private Space options. I'll need to research those a bit more to make sure I select the right solution.
MY
My
1 year ago
I'm a little confused about the default user requirement for anonymous shoppers. I'll need to research that more to understand how it fits into the overall solution.
TI
Tina
1 year ago
I've got a good feeling about this one. The image UDO is definitely used in the Designer pane of Page Composer. That's where you'd use custom images and graphics in your page designs.
PA
Paulina
1 year ago
Wait, we can't use the public internet? But how will I stream my cat videos during work breaks then?
KA
Karol
1 year ago
As a security-conscious candidate, I'd have to go with Option D. Keeping that Redis instance behind a firewall is the way to go, even if it's a bit more complex.
WI
Winfred
1 year ago
Hmm, Option B with the Private Tier plan and Trusted IP ranges might be a simpler approach. Sometimes simple is better, you know?
LE
Leah
1 year ago
Gladys: Definitely, simplicity can often be the key to solving complex problems.
UL
Ulysses
1 year ago
User 3: Using a Private Tier plan with Trusted IP ranges seems like a straightforward solution.
GL
Gladys
1 year ago
User 2: Yeah, I agree. It's important to meet compliance requirements without overcomplicating things.
EA
Earlean
1 year ago
User 1: Option B sounds like a good idea. Keeping it simple is always a good approach.
KR
Krissy
1 year ago
I like how Option D uses a Shield Private Space to protect the Redis instance. Seems like a robust security solution.
SH
Shannon
1 year ago
It's important to meet compliance requirements when it comes to database security.
JA
Jacquelyne
1 year ago
I agree, using a Shield Private Space adds an extra layer of protection.
YO
Yoko
1 year ago
Option D sounds like a good choice for securing the Redis instance.
NI
Nichelle
1 year ago
Option C seems the most comprehensive solution to isolate the Redis instance from the public internet while maintaining compliance requirements.
JA
Jaime
1 year ago
C) Use a Heroku Private Space and a Heroku Redis instance with a Private Tier plan. Redeploy the app into the Space
RA
Ramonita
1 year ago
B) Use a Heroku Redis instance with a Private Tier plan. Enable Trusted IP ranges on the Redis instance.
RO
Roxane
1 year ago
A) Enclose the existing Heroku Redis instance inside a Private Space. Enable Private Space VPN.
JA
Jacquelyne
2 years ago
I see both points, but I think option C could also work well by using a Private Space and a Private Tier plan for the Redis instance.
PA
Paris
2 years ago
I disagree, I believe option D is better because it adds an extra layer of security with the Shield Private Space.
MI
Mitsue
2 years ago
I think option A is the best solution. It will keep the database isolated from the public internet.