Salesforce Arch-303 Value Pack (Frequently Bought Together)

A new version of the Page Show controller is required for implementation of Page Deserter specific look. It requires implementation of a specific, cache period for Page Designer pages, which b not currently available in the base Storefront Reference Architecture (SFRA) cache.js module What two steps should the Architect instruct the developer to implement?
Choose 2 answers

• A. Create new Page.js controller in client s cartridge. Copy code from base and modify the Page-Show route to include the new cache middleware function.
• B. Create new cache,js in client's cartridge. Extend cache,js from app_storefront_baseand add a function for the Page Designer caching.
• C. Create new Page,js controller in client's cartridge. Extend the code from base and prepend the new cache middleware function to Page-Show route.
• D. Create new ceche,js client's cartridge. Copy cache,js from app_storefront_base and add a function for the Page Designer caching.

The Client wants to have a flashsate on a few products every day. These products are sold through B2C Commerce as well as an in store Point of Sale system that it tied to the same inventory.
An Architect analyzes the following proposed solution:
Inventory feed w*l continue to run dailybut add a web-service call to compare and update B2C Commerce inventory in real time during checkout after a flash product's inventory reaches a threshold.
Which two risks should the Architect communicate to the Client about this solution?
Choose 2 answers

• A. The default rate limiter configuration for the web-service could cause the web-service to return an exception during high traffic.
• B. If the externals hosted web-service is unreliable. It could be a point of failure in the site s order placement flow.
• C. Because the job would still be configured to run daily there will be a degrade in performance during non-flash sales periods
• D. If the product Inventory threshold that triggers the web service calls is reached too often. It will have a negative Impact on site performance.

During implementation, the team found that there is a notification controller exposed for an external service that marks the order as paid when notification is received. The notification URL is sent to the service together with the payment request and contains only the URL with orderlD as the parameter.
What should the Architect recommend to the team in order to prevent the unauthorized usage of the controller to mark the orders as paid?

• A. Add a customer number in the callback URL and match the customer number against the one stored on the order.
• B. Add an order token in the callback URL and match the token against the one stored on the order.
• C. Add a session attribute and validate it on the callback.
• D. Add HTTPS restriction to the controller start node.

A third party survey provider offers both an API endpoint for individual survey data and an SFTP server endpoint that can accept batch survey data. The initial implementation of the integration includes
1.Marking the order as requiring a survey before order placement
2. On the order confirmation pace, the survey form is displayed for the customer to fill
3. The data is sent to the survey provider API, and the order it marked as not requiring a survey Later it was identified that this solution is not fit for purpose as the following issues and additional requirements were identified:
1. If the API call fails, the corresponding survey data is lost. The Business requires to avoid data loss.
2. Some customers skipped the form. The Business require sending a survey email to such customers.
3. The Order Management System (OMS) uses a non-standard XML parser it did not manage to parse orders with the survey, until the survey attribute was manually removedfrom the xml.
How should the Architect address the issues and requirements described above?

• A. Create a custom session attribute when the survey is required. Send to the API endpoint in real-time. On failure, capture the survey data in the session and reprocess, use me session attribute to send emails for the cases when survey was skipped.
• B. Create a custom object when the survey is required Send to the API endpoint in real-time. On success, remove the object. Onfailure, capture the survey data in the custom object and later reprocess with a job. Use the custom object to send emails for the cases when survey was skipped.
• C. Send the survey data to the API endpoint in real-time until the survey data is successfullycaptured.Instruct the OMS development team to update their XML parser, use the Order survey attribute to send emails for the cases when the survey was skipped.
• D. Create a custom object to store the survey data. Send to the API endpoint using a job. On success, remove the custom object. On failure, send the survey data with APIfrom the next execution of the same job. Use the custom object to send emails for the cases when the survey was skipped.

An Architect isperforming an audit of production logs via Log Center and finds some potentially dangerous custom log output.

In which two ways It this log output Improper In a production environment? Choose 2 answers

• A. The log information includes the order number and customer s email, which violates PCI.
• B. Information logs should not be used in a production environment
• C. The log information includes the customer s cardname as it appears along with the credit card number (PAN), which violates PCI.
• D. The log information includes the customer's card CW (card security code) and expiration date, which violates PCI.