Integration-Architect Exam Dumps - Salesforce Integration Architecture Designer Questions and Answers

In this scenario, Salesforce acts as the trigger for a business process that completes in an external system. The architect's recommendation for the remote system to subscribe to a platform event is the classic implementation of the Remote Process Invocation—Fire and Forget pattern.1

In a Fire and Forget pattern, Salesforce initiates a process by publishing a message (the event) to the event bus and then immediately continues its own2 processing without waiting for a functional response from the target system. The "Fire" part occurs when the order details are captured and the event is published; the "Forget" part refers to Salesforce handing off the responsibility of order creation to the remote system. This pattern is ideal for improving user experience and system performance, as it avoids blocking the user interface while waiting for potentially slow back-office systems to respond.

Option A (Request and Reply) is incorrect because that would require Salesforce to make a synchronous call and wait for the remote system to confirm the order was created before allowing the user to proceed. Option C (Remote Call-In) is the inverse of what is described; it would involve the remote system actively reaching into Salesforce to "pull" the data, whereas here Salesforce is "pushing" the notification via an event stream. By using Platform Events to facilitate this hand-off, Northern Trail Outfitters ensures a decoupled, scalable architecture where the remote system can process orders at its own pace while Salesforce remains responsive to sales users.

To provide "immediate notifications" to a client that already supports CometD, the architect must utilize Salesforce's Streaming API. PushTopic Events are the classic Streaming API implementation for broadcasting changes to specific records.

A PushTopic is a definition that includes a SOQL query and a set of trigger events (Create, Update, Delete). When an Opportunity in NTO's instance is updated and matches the query, Salesforce automatically pushes a notification to the topic's channel. The affiliate's CometD client, having subscribed to this channel, receives the data payload instantly.12

Option A (Polling) is the architectural opposite of "immediate notifications". Polling is inefficient, consumes API limits, and int13roduces latency between the actual record change and the client's discovery of that change. Option C is incorrect as there is no "Accept CometD" setting in a Connected App; while a Connected App is used for OAuth authentication, the PushTopic is the mechanism that actually defines and delivers the stream. By using PushTopic, NTO provides a decoupled, event-driven architecture that fulfills the requirement for real-time visibility while minimizing the technical burden on the affiliate's infrastructure.

When an integration initiated from the client-side (the browser) fails, the architect must first look at the browser's security policies. In Salesforce, Lightning Web Components are subject to the Lightning Component framework's Content Security Policy (CSP).

CSP is a security layer that prevents cross-site scripting (XSS) and other code injection attacks by restricting which domains the browser is allowed to communicate with. If an LWC attempts to make a fetch() call to an external REST endpoint, the browser will block the request unless that specific domain is whitelisted in CSP Trusted Sites.

Option B (Remote Site Settings) is a common distractor; these settings are strictly for server-side Apex callouts and have no effect on client-side JavaScript requests. Option A (CORS) is also a browser security mechanism, but it must be configured on the external server to allow Salesforce to access its resources. While CORS is necessary, the first thing to validate within the Salesforce environment for a failing LWC callout is the CSP Trusted Site entry. Without this whitelisting, the request will be terminated by the browser before it even leaves the client, regardless of how the external server is configured.

When migrating from a legacy landscape to a modern platform like Salesforce, the most immediate technical hurdle is the diversity of system types and communication protocols used by the existing systems.

In a legacy environment, integrations are often not standardized. An architect may encounter systems that communicate via modern REST/SOAP APIs, but they will also likely find older systems that rely on Flat File exchanges (FTP/SFTP), Email-based triggers, or direct Database connections. These "System Types" are a fundamental constraint because they dictate the choice of integration middleware. For example, Salesforce cannot natively poll a file system or read an on-premise database; therefore, an architect must identify these constraints to justify the need for an ETL or ESB tool that can bridge these legacy protocols with Salesforce’s API-centric architecture.

While reporting (Option B) and multi-currency (Option C) are important functional requirements for the Salesforce implementation, they do not dictate the integration pattern (e.g., Request-Reply vs. Batch) as much as the technical interface of the source/target systems does. By evaluating the APIs, file systems, and email capabilities of the legacy landscape first, the architect ensures that the chosen integration mechanism—whether it be the Streaming API, Bulk API, or middleware orchestration—is technically capable of actually communicating with the legacy debt.

To satisfy the requirement of encrypting standard fields while maintaining their functionality within record-triggered flows, Shield Platform Encryption is the recommended architectural solution.1

Shield Platform Encryption is a modern security layer that allows for encryption at rest while 2preserving critical platform features. Unlike Classic Encryption (Option B)—which is limited to a specific "Encrypted Text" custom field type and often breaks platform features like search and automation—Shield is designed to work with standard fields such as Name, Email, and Phone.

Key architectural considerations for Shield include:

Compatibility with Automation: Shield fields can be used in Flows, Apex triggers, and validation rules. This allows NTO to implement the required record-triggered business logic without needing to decrypt the data manually in code.

Search and Filtering: By using Deterministic Encryption, Shield allows users to filter and search for records based on encrypted fields, which is often a requirement for "widely-used" standard fields.

Compliance and Governance: Shield provides advanced key management (Bring Your Own Key - BYOK) and auditing, ensuring that NTO meets corporate security guidelines while data is being processed by the platform.

Data Masking (Option C) is primarily used for sandboxes to obfuscate PII during testing and is not a production encryption-at-rest solution. By recommending Shield, the architect provides a transparent security model that protects sensitive data without sacrificing the declarative power of Flow Builder.

When designing an event-driven architecture to track order processing stages (Created, Shipped, Paid), the Integration Architect must ensure the solution provides "durability"—the ability to recover messages that were sent while a subscriber was offline or during a system failure. In Salesforce, this is managed through the Event Bus and the ReplayID mechanism.

For High-Volume Platform Events and Change Data Capture, Salesforce provides a standard retention window of 72 hours (3 days). This means that events are stored in the bus for this duration, allowing clients to "replay" events that occurred in the past. To leverage this durability, the subscribing client must specify where in the event stream they wish to begin receiving messages.

There are two special values for the ReplayID:

ReplayID = -1 (Tip of the Stream): The subscriber receives only new events that are published after the subscription is established. Any events published while the client was disconnected are missed. This does not meet the requirement of seeing processing stages that occurred within the retention window if the connection was interrupted.

ReplayID = -2 (All Available Events): The subscriber receives all events that are currently stored in the event bus (up to 72 hours old) as well as all new events.

By recommending the use of ReplayID = -2, the architect ensures that even if the Salesforce frontend or the integration middleware experiences downtime, the system can "catch up" by retrieving all order status updates (Shipped, Paid, etc.) that were published during that window. This provides a robust and resilient user experience, ensuring that the Opportunity and Order records in Salesforce accurately reflect the state of the ERP system without data gaps. This configuration is essential for maintaining data synchronization in a distributed landscape where Salesforce acts as the engagement layer for a back-1end ERP master.

Salesforce Connect is a powerful tool for data virtualization, allowing users to view and manage data in external systems (via OData) as if it were stored natively in Salesforce. However, a critical security decision during the setup of an External Data Source is determining the Identity Type.

The Identity Type determines how the external system authenticates the Salesforce user. There are two primary options:

Named Principal: Every Salesforce user accesses the external system using the same set of credentials. This is easier to maintain but provides less granular security tracking in the target system.

Per User: Each individual Salesforce user must provide their own credentials for the external system. This ensures that the data visible in Salesforce respects the user's specific permissions in the external source.

Configuring the Identity Type is the fundamental way an architect secures OData requests because it defines the authentication boundary between the platforms. While certificates (Option A) can be used for transport layer security, the "Identity Type" configuration is the specific Salesforce Connect setting that governs how a session is authorized. Option B (Special Compatibility) is a technical setting used to handle non-standard OData implementations and does not directly relate to securing the request. By recommending the correct Identity Type, the architect ensures that the integration adheres to the "Principle of Least Privilege," ensuring that users only see the external data they are authorized to access.

Troubleshooting failures in Platform Event-triggered logic is challenging because these triggers execute under the "Automated Process" system user, making them invisible to standard user-level monitoring. To diagnose why a trigger is failing in production, an Integration Architect must set up debug logs specifically for that trigger or the automated process user.

Debug logs provide a granular view into the execution execution path, including Apex errors, governor limit consumption, and specific DML failures. Without these logs, it is impossible to determine if the failure is due to a null pointer exception, a validation rule violation, or a record locking conflict.678

Option B is a design-time validation step; while important, it would not help mon9itor or troubleshoot a runtime failure in a deployed trigger. Option C focuses on high-level consumption limits; while reaching the "Created Per Hour" limit would prevent events from1011 being published, it would not explain why an existing trigger is failing once the event has already arrived in the bus. By proactively establishing debug logs for the integration's triggers, the consultant can pinpoint the exact line of code or system constraint causing the failure, ensuring a faster "Mean Time to Repair" (MTTR) for critical AI-driven business processes.

When integrating high-security back-office systems like an Enterprise Billing System (EBS) and a Document Management System (DMS) with Salesforce, the primary concern for an Integration Architect is maintaining the integrity of the organization's existing security perimeter. In an enterprise landscape with over 10 million customers, these systems are typically governed by strict regulatory and compliance standards (such as PCI-DSS or GDPR) that dictate who can view financial records.

The consultant must consider Enterprise security needs for access to these systems rather than simply attempting to synchronize credentials. This involves evaluating an Identity Federation strategy using protocols like SAML 2.0 or OpenID Connect. Instead of maintaining a separate silo of authentication details within Salesforce (which creates a security risk and administrative overhead), Salesforce should act as a Service Provider (SP) that trusts a central Identity Provider (IdP).1234

Furthermore, the "seamle5ss access" requirement implies that once a support agent is authenticated into Salesforce, their identity should be propagated to the EBS and DMS to authorize the specific 6view of a7 customer's bill. This is often achieved through Single Sign-On (SSO) and Token-Based Authentication8. By prioritizing the enterprise security framewo9rk, the architect ensures that access is auditable, centralized, and compliant with corporate policies, while providing th10e "360-degree" view required by support agents without forcing them to log in to multiple disconnected systems. Migrating such massive systems (Option A) into Salesforce is technically and financially unfeasible for most enterprises due to data volume and specialized processing logic.

In a Remote-Call-In or Batch Synchronization pattern where an external middleware initiates the connection to Salesforce, the external system must be authenticated. The standard Salesforce framework for this is the Connected App.

A Connected App provides a framework for external applications to integrate with Salesforce using APIs and standard protocols like OAuth 2.0. For a high-volume (100,000 records) batch process initiated by middleware every 6-12 hours, the architect would recommend a Connected App using a secure flow, such as the OAuth 2.0 JWT Bearer Flow. This allows the middleware to authenticate as a specific "Integration User" without storing clear-text passwords.

Option A (API Gateway) is used to manage and secure outbound calls from Salesforce or between external services; it does not handle inbound authentication to the Salesforce org itself. Option B (Remote Site Settings) is a whitelist configuration used purely to allow Salesforce to make outbound callouts to a specific URL; it provides no authentication mechanism for systems calling into Salesforce. By recommending a Connected App, the architect ensures that the middleware has the necessary permissions (scopes) to use the Bulk API—which is the appropriate mechanism for the 100,000 record volume—while maintaining a secure, auditable, and standard integration boundary.