A client is planning to deploy an application to Heroku. The client's IT department requires all applications to be hosted from Australia, where their main office is located. Regulators in Australia require keystroke logs ofall engineers who create interactive sessions for the application.
Which should an Architect recommend in this scenario?

You can use the Salesforce REST APIs to:

Universal Containers wants to ensure that inventory needed for repair jobs is tracked and managed so Technicians have the material for their jobs.
Which two ways should a Consultant recommend tracking these inventory requirements in Salesforce?
(Choose two.)

A client has an e-commerce application that stores creditcard information. The application will run the production. Which security certification does the application need to meet?

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.
What should an Architect recommend UC do to secure their database to only trusted locations?