Plat-Arch-204 Exam Questions & Answers

When an organization must interact with multiple external services (34 different shipping providers) that change frequently, the primary architectural goal is to decouple Salesforce from the specific endpoints and protocols of those services.11

The architect should propose us12ing middleware to abstract the call. By introducing a middleware layer (such as an ESB or iPaaS), Salesforce makes a single, standardized call to the middleware, passing the country and order details. The middleware then handles the 'Process Orchestration':

Service Routing: Determining which shipping service is valid for the specified country.

Protocol Mediation: Translating the standard Salesforce request into the specific format (REST, SOAP, XML, etc.) required by each individual shipping provider.

Maintenance: When a shipper is added or removed, the change is made in the middleware without requiring any code or metadata updates in Salesforce.

Option A (Picklists) creates a high administrative burden and does not solve the underlying technical complexity of making callouts to dozens of different APIs. Option B (Platform Events) is asynchronous and would introduce unnecessary latency for a sales rep who needs an estimate 'on the spot' to complete an order. Middleware abstraction provides a scalable, maintainable, and agile architecture that allows NTO to optimize its shipping operations without disrupting the CRM user experience.

To securely integrate a distributed package with a central 'Hub' org, the architect should utilize the OAuth 2.0 Web Server Flow. In this model, a Connected App is created in the central org to act as the identity and access provider.1

A critical component of this setup is the Callback URL (Redirect URI). When a user in the 'Subscriber' org (where the packag2e is installed) initiates the connection, Salesforce redirects them to the central org to authorize the access. After successful authentication, the central org needs the correct callback URL to return the authorization code to the specific subscriber org.

Using this flow satisfies the security team's requirement for a specific integration account. The administrator in the central org can pre-authorize specific profiles or permission sets to use the Connected App, ensuring that only the designated integration user's credentials are used to fulfill requests. Option A is a security 'anti-pattern' (storing passwords in fields), and Option C is unnecessary as API access is a standard feature. This OAuth-based approach provides a secure, revocable, and standardized way to manage cross-org communication in a multi-tenant environment.

When external services are highly volatile (added/removed frequently), the goal is to decouple the Salesforce UI from the underlying service logic. An Integration Architect should propose invoking a middleware service to retrieve the valid shipping methods.

By using middleware (such as an ESB or MuleSoft) as an abstraction layer, Salesforce doesn't need to 'know' the details of the 34 different shipping providers. When a sales rep selects a country, Salesforce makes a single callout to the middleware. The middleware then performs the routing logic to identify which shippers are active for that region and returns a standardized list to Salesforce.

Option A is a 'maintenance nightmare'; every time a shipping service changes in any of the 34 countries, an admin would need to manually update picklist values and dependencies in Salesforce, which is not scalable. Option C (Platfor31m Events) is an asynchronous pattern unsuitable for a real-time 'request-reply' scenario where a rep is waiting for an estimate during a live customer interaction. Utilizing middleware centralizes the logic, simplifies Salesforce configuration, and allows NTO to change shipping providers without any code deployments or metadata updates in the Salesforce org.

For outbound integrations from Salesforce to an external cloud gateway like Microsoft Azure API Gateway, securing the communication at the transport layer is a fundamental requirement. While standard SSL provides one-way encryption where the client (Salesforce) verifies the server (Azure), Mutual Server Authentication (Two-Way SSL/TLS) ensures that both parties are verified before data is exchanged.

In this architecture, Salesforce presents a digital certificate to the Azure API Gateway during the TLS handshake. For production environments, Salesforce architects recommend using certificates signed by a Certification Authority (CA) rather than self-signed certificates to establish a trusted chain of identity that complies with enterprise security standards. This mechanism prevents unauthorized clients from connecting to the Azure endpoint, effectively mitigating man-in-the-middle attacks and unauthorized data exfiltration.

While a Connected App and OAuth (Option B) are essential for inbound requests where external systems call Salesforce, they do not natively secure the point-to-point connection when Salesforce acts as the client. Similarly, a federated API access model (Option A) focuses on user identity but does not address the transport layer security between the two cloud platforms. By configuring two-way SSL, Northern Trail Outfitters ensures that the Azure API Gateway only processes requests originating from a trusted, authenticated Salesforce instance, fulfilling the high security and trust requirements of modern integration architecture.

To provide near real-time notifications to a client that already supports CometD, an Integration Architect should leverage the Streaming API. While Platform Events are a modern alternative, PushTopic Events are specifically designed to stream changes to Salesforce records based on a defined SOQL query.

A PushTopic event is triggered when a record is created, updated, deleted, or undeleted. By creating a PushTopic on the Opportunity object, NTO defines the criteria (fields and record states) that should trigger a message to the 1subscriber. The affiliate's CometD client can then subscribe to this topic's channel (e.g., /topic/OpportunityUpdates) to receive the data payload instantly.

Option A is incorrect because 'Accept CometD API Requests' is not a standard checkbox or configuration within a Connected App; authentication is handled via standard OAuth flows, but the streaming channel must still be defined. Option C describes a Polling mechanism, which is the architectural opposite of the requested 'immediate notification' and would unnecessarily consume SOAP API limits while introducing latency. By using a PushTopic, NTO ensures a decoupled, event-driven architecture that scales effectively for notification-only use cases while respecting the technical capabilities of the affiliate's existing CometD-compatible infrastructure.