A client wants to secure their web application using SSL/TLS. They do not
have specific requirements regarding using a particular version of SSL/TLS.
Which two Heroku features should an Architect recommend as options?
(Choose two.)

Universal Containers (UC) has expressed a desire to have encryption-at-rest
enabled on their Heroku Postgres databases.
Which three tiers would UC need to use to have that feature enabled? (Choose
three.)

Universal Containers uses Heroku Connect to sync their Salesforce org’s
data with Heroku Postgres. Periodically, they write a very large set of
changes that needs to be fully replicated between these two systems.
Which two sets of actions should an Architect propose? (Choose two.)

Part of a client’s design is the ability to easily share between two applications running on Heroku.
What should an Architect recommend?

A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).
Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

An app uses a queue of worker dynos to perform complex image processing, but the worker dynos are occasionally running out of memory when performing the processing. All of their dynos are currently standard-1x dynos.
What should an Architect recommend in this scenario?

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data
Protection Regulation (GDPR).
What should an Architect advise UC regarding data residency in this scenario?

A client wants to add CPU-intensive video processing functionality to their Heroku web application.
Which two strategies should an Architect recommend for implementing this functionality? (Choose two.)

A client wants to create a secure network connection between Heroku applications running in a Private Space and an AWS VPC.
Which Heroku feature should an Architect recommend to create the connection?

Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data.
Which Heroku architecture should an Architect recommend?

Which three items are required to successfully set up Single Sign-on (SSO) services with Heroku? (Choose three.)

Universal Containers needs to write their Heroku application’s logs to two destinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.
What should an Architect recommend in this scenario?

A hospital is planning to rewrite its on-premise patient registration system. Their current system is HIPAA-compliant as well as ISO 27018-compliant. They need to maintain these same certification levels after the rewrite. Their new app also needs to sync PII (personally identifiable information) data with their Salesforce org.
What Heroku Enterprise solutions should an Architect propose?

A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.
Which solution should an Architect recommend to meet these requirements?

A client has data in a production Heroku Postgres database, and needs to quickly get access to a subset of that data for reporting needs.
Which two features does Heroku Dataclips provide to enable this? (Choose two.)