Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.
What should an Architect recommend UC do to secure their database to only trusted locations?
Suggested Answer: D
Get Premium Salesforce Certified Heroku Architect (Plat-Arch-206) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
WH
Whitley
11 months ago
D is just unnecessary for most use cases, stick with the simpler options!
CH
Cherry
11 months ago
I think C is the best option for security, but it might add latency.
AN
Anissa
12 months ago
Wait, can you really set up a VPN for Heroku? Seems complicated!
AL
Aleta
12 months ago
A sounds good too, but it might be overkill for some apps.
EL
Eleonora
12 months ago
Definitely go with B, adding a Trusted IP range is a solid move.
KE
Kerrie
1 year ago
I vaguely recall something about using a VPC with a one-off dyno, but I’m not confident if that’s the right solution for securing the database access.
HE
Hershel
1 year ago
Setting up a VPN sounds like a solid approach, but I’m not clear on how that would integrate with Heroku's architecture.
HE
Helga
1 year ago
I remember practicing a question about adding a Trusted IP range to Heroku Postgres. It seems like a straightforward way to limit access, but I wonder if it’s enough on its own.
JE
Jenifer
1 year ago
I think moving the database and app into a Private Space could enhance security, but I'm not entirely sure if that's the best option for UC's needs.
JO
Joni
1 year ago
Okay, I remember learning about absorption costing in class. I believe it's when the total cost per unit includes an allocation of indirect costs used in its creation, so I'll go with B.
AN
An
1 year ago
I'm feeling confident about this question. The PDPO and the model contract are familiar topics, and I think I can identify the section that is not recommended to be included in the contract.
PA
Patria
1 year ago
This looks like a straightforward SQL query with a UNION operation. The key is to identify the correct ORDER BY clause that will work for both parts of the UNION.
JA
Jaime
1 year ago
I'd go with A, B, and C. The job environment is crucial for candidates to understand the role and whether it's a good fit.
MA
Martina
1 year ago
The idea of a system of reward incentives could be effective, but I can't recall if we covered how that might backfire.
AD
Adell
1 year ago
Wait, I'm a bit confused. Is it fsck -A or fsck -P? I'll need to double-check the man page to make sure I get this right.
ME
Melissa
1 year ago
I wonder if the Heroku Postgres database has any jokes pre-installed. Maybe it's a 'Postgres-a-Joke' feature.
RE
Rene
1 year ago
Option B? More like 'Add a Trusted IP range to the Heroku Postgres configuration.' Haha, who writes these questions?
MA
Mammie
1 year ago
Option A is a bit overkill, in my opinion. Moving the whole app and database to a Private Space might be unnecessary for this use case.
BO
Bobbye
1 year ago
Setting up a VPC in a one-off dyno when access to Heroku Postgres is needed seems like a practical solution.
SH
Shawn
1 year ago
Setting up a VPN from the trusted locations to the app could also work to secure the database.
LA
Lachelle
1 year ago
I think adding a Trusted IP range to the Heroku Postgres configuration would be a good option.
FR
Francis
1 year ago
Option D sounds a bit more complex, but setting up a VPC could give you more control over the networking and security aspects.
LI
Linsey
1 year ago
Option D sounds a bit more complex, but setting up a VPC could give you more control over the networking and security aspects.
AL
Aleisha
1 year ago
B) Add a Trusted IP range to the Heroku Postgres configuration.
JA
Javier
1 year ago
A) Move the database and the app into the Private Space.
ER
Erick
1 year ago
I like the idea of a VPN setup in Option C. That would provide an extra layer of security by creating a secure tunnel to the app.
RO
Rolande
1 year ago
It's always better to have multiple layers of security in place.
AS
Asha
1 year ago
I agree, setting up a VPN would definitely help protect the database.
SE
Sean
1 year ago
Option C sounds like a good choice for added security.
DA
Dalene
2 years ago
Option B seems the most straightforward approach to secure the database. Limiting access to trusted IP ranges is a simple and effective way to restrict access.
IL
Ilene
1 year ago
True, but it might be more complex than just setting up a Trusted IP range.
AN
Angella
1 year ago
Moving the database and app into a Private Space could also work.
CR
Craig
1 year ago
I agree, setting up a Trusted IP range is a good way to restrict access.
JA
Janet
1 year ago
Option B seems the most straightforward approach to secure the database.
FR
Freida
1 year ago
User 4: Setting up a VPN from trusted locations seems like a secure option as well.
OL
Olive
1 year ago
User 3: Moving the database and app into a Private Space could also work.
MO
Mose
1 year ago
User 2: I agree, limiting access to trusted IP ranges is a good security measure.
RE
Renato
1 year ago
User 1: I think option B is the best choice.
GA
Gabriele
2 years ago
I see both points. However, I think setting up a VPN from the trusted locations to the app, as mentioned in option C, would provide a secure connection while allowing access from specific locations.
DA
Danica
2 years ago
I disagree with Pearlie. I believe option B is more practical. Adding a Trusted IP range to the Heroku Postgres configuration will restrict access to only trusted locations.
PE
Pearlie
2 years ago
I think option A is the best choice. Moving the database and app into a Private Space will provide the highest level of security.