Free HEROKU-ARCHITECT Web TestEngine Demo

Q17 Single choice

A healthcare client is creating a web portal for their customers on Heroku, which is sourced from a Salesforce instance. Some of the Salesforce data they wish to display falls under HIPAA compliance, and their auditors have determined this data must be stored encrypted-at-rest. To satisfy this requirement, they have enabled Platform Encryption on Salesforce.

They are investigating Heroku Shield Private Spaces, Shield Dynos, Shield Postgres, and Shield HerokuConnect.

How will Shield Heroku Connect interact with the encrypted fields in Salesforce?

A
Shield Heroku Connect will be able to access only cypher text in the fields from Salesforce. They will need to import the encryption key from Salesforce to decrypt to store in Shield Postgres.
B
Shield Heroku Connect will be able to synchronize data from fields in Salesforce without additional customization, but any writes will need to be encrypted using the Salesforce encryption key first before being written.
C
Shield Heroku Connect requires customization on the Salesforce side to decrypt the data before transmitting to Heroku.
D
Shield Heroku Connect will be able to synchronize data bidirectionally without additional customization.

HEROKU-ARCHITECT Web TestEngine demo