Salesforce Certified Heroku Architecture Designer — Question 11

A client requires that their web application's logs are accessible only from within the same isolated network as the application itself.
Which solution should an Architect recommend in this scenario?

Answer options

• A. Deploy the application to a Private Space. Provide the Private Space's stable outbound IPs to Heroku's Logplex router to block all logs originating from the Private Space.
• B. Deploy the application to a Shield Private Space with Private Space Logging enabled. Forward logs to a destination within the Shield Private Space.
• C. Deploy the application to a Private Space. Connect the Private Space to an on-premise logging system using VPN and specify it as a log drain.
• D. Deploy the application to a Private Space. Enable Internal Routing to prevent the application's logs from being forwarded outside of the Private Space.

Correct answer: C

Explanation

The correct answer is C because it allows the application logs to be securely sent to an on-premise logging system within the same isolated network via VPN, ensuring access is restricted. Option A does not provide a secure logging option as it merely blocks outbound logs but does not restrict access. Option B, while involving a Shield Private Space, does not specifically address the requirement for logs to be sent to an on-premise system. Option D focuses on internal routing but doesn't specify a method for log access from the isolated network.