Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Salesforce Certified Heroku Architect (Plat-Arch-206) Exam - Topic 7 Question 21 Discussion

Posted by Helga on Jul 28, 2023 at 10:43 PM

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.

What should an Architect recommend UC do to secure their database to only trusted locations?

Suggested Answer: D

Get Premium Salesforce Certified Heroku Architect (Plat-Arch-206) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
41 comments · newest first
WH
Whitley 11 months ago
D is just unnecessary for most use cases, stick with the simpler options!
CH
Cherry 11 months ago
I think C is the best option for security, but it might add latency.
AN
Anissa 12 months ago
Wait, can you really set up a VPN for Heroku? Seems complicated!
AL
Aleta 12 months ago
A sounds good too, but it might be overkill for some apps.
EL
Eleonora 12 months ago
Definitely go with B, adding a Trusted IP range is a solid move.
KE
Kerrie 1 year ago
I vaguely recall something about using a VPC with a one-off dyno, but I’m not confident if that’s the right solution for securing the database access.
HE
Hershel 1 year ago
Setting up a VPN sounds like a solid approach, but I’m not clear on how that would integrate with Heroku's architecture.
HE
Helga 1 year ago
I remember practicing a question about adding a Trusted IP range to Heroku Postgres. It seems like a straightforward way to limit access, but I wonder if it’s enough on its own.
JE
Jenifer 1 year ago
I think moving the database and app into a Private Space could enhance security, but I'm not entirely sure if that's the best option for UC's needs.
JO
Joni 1 year ago
Okay, I remember learning about absorption costing in class. I believe it's when the total cost per unit includes an allocation of indirect costs used in its creation, so I'll go with B.
AN
An 1 year ago
I'm feeling confident about this question. The PDPO and the model contract are familiar topics, and I think I can identify the section that is not recommended to be included in the contract.
PA
Patria 1 year ago
This looks like a straightforward SQL query with a UNION operation. The key is to identify the correct ORDER BY clause that will work for both parts of the UNION.
JA
Jaime 1 year ago
I'd go with A, B, and C. The job environment is crucial for candidates to understand the role and whether it's a good fit.
MA
Martina 1 year ago
The idea of a system of reward incentives could be effective, but I can't recall if we covered how that might backfire.
AD
Adell 1 year ago
Wait, I'm a bit confused. Is it fsck -A or fsck -P? I'll need to double-check the man page to make sure I get this right.
ME
Melissa 1 year ago
I wonder if the Heroku Postgres database has any jokes pre-installed. Maybe it's a 'Postgres-a-Joke' feature.
RE
Rene 1 year ago
Option B? More like 'Add a Trusted IP range to the Heroku Postgres configuration.' Haha, who writes these questions?
MA
Mammie 1 year ago
Option A is a bit overkill, in my opinion. Moving the whole app and database to a Private Space might be unnecessary for this use case.
BO
Bobbye 1 year ago
↳ replying to Mammie
Setting up a VPC in a one-off dyno when access to Heroku Postgres is needed seems like a practical solution.
SH
Shawn 1 year ago
↳ replying to Mammie
Setting up a VPN from the trusted locations to the app could also work to secure the database.
LA
Lachelle 1 year ago
↳ replying to Mammie
I think adding a Trusted IP range to the Heroku Postgres configuration would be a good option.
FR
Francis 1 year ago
Option D sounds a bit more complex, but setting up a VPC could give you more control over the networking and security aspects.
LI
Linsey 1 year ago
↳ replying to Francis
Option D sounds a bit more complex, but setting up a VPC could give you more control over the networking and security aspects.
AL
Aleisha 1 year ago
↳ replying to Francis
B) Add a Trusted IP range to the Heroku Postgres configuration.
JA
Javier 1 year ago
↳ replying to Francis
A) Move the database and the app into the Private Space.
ER
Erick 1 year ago
I like the idea of a VPN setup in Option C. That would provide an extra layer of security by creating a secure tunnel to the app.
RO
Rolande 1 year ago
↳ replying to Erick
It's always better to have multiple layers of security in place.
AS
Asha 1 year ago
↳ replying to Erick
I agree, setting up a VPN would definitely help protect the database.
SE
Sean 1 year ago
↳ replying to Erick
Option C sounds like a good choice for added security.
DA
Dalene 2 years ago
Option B seems the most straightforward approach to secure the database. Limiting access to trusted IP ranges is a simple and effective way to restrict access.
IL
Ilene 1 year ago
↳ replying to Dalene
True, but it might be more complex than just setting up a Trusted IP range.
AN
Angella 1 year ago
↳ replying to Dalene
Moving the database and app into a Private Space could also work.
CR
Craig 1 year ago
↳ replying to Dalene
I agree, setting up a Trusted IP range is a good way to restrict access.
JA
Janet 1 year ago
↳ replying to Dalene
Option B seems the most straightforward approach to secure the database.
FR
Freida 1 year ago
↳ replying to Dalene
User 4: Setting up a VPN from trusted locations seems like a secure option as well.
OL
Olive 1 year ago
↳ replying to Dalene
User 3: Moving the database and app into a Private Space could also work.
MO
Mose 1 year ago
↳ replying to Dalene
User 2: I agree, limiting access to trusted IP ranges is a good security measure.
RE
Renato 1 year ago
↳ replying to Dalene
User 1: I think option B is the best choice.
GA
Gabriele 2 years ago
I see both points. However, I think setting up a VPN from the trusted locations to the app, as mentioned in option C, would provide a secure connection while allowing access from specific locations.
DA
Danica 2 years ago
I disagree with Pearlie. I believe option B is more practical. Adding a Trusted IP range to the Heroku Postgres configuration will restrict access to only trusted locations.
PE
Pearlie 2 years ago
I think option A is the best choice. Moving the database and app into a Private Space will provide the highest level of security.
0/2000 characters

Save Cancel