Salesforce Arch-303 Exam : Salesforce Certified B2C Commerce Architect

The Client wants to have a flashsate on a few products every day. These products are sold through B2C Commerce as well as an in store Point of Sale system that it tied to the same inventory.
An Architect analyzes the following proposed solution:
Inventory feed w*l continue to run dailybut add a web-service call to compare and update B2C Commerce inventory in real time during checkout after a flash product's inventory reaches a threshold.
Which two risks should the Architect communicate to the Client about this solution?
Choose 2 answers

• A. Because the job would still be configured to run daily there will be a degrade in performance during non-flash sales periods
• B. The default rate limiter configuration for the web-service could cause the web-service to return an exception during high traffic.
• C. If the externals hosted web-service is unreliable. It could be a point of failure in the site s order placement flow.
• D. If the product Inventory threshold that triggers the web service calls is reached too often. It will have a negative Impact on site performance.

During a review of the most recent release notes, the Architect finds that Salesforce has deprecated an API that is used throughout the site. After reviewing the deprecated API usage in Business Manager, the Architect narrows down the usage of that API to a particular LINK integration cartridge. The cartridge was integrated when the site was first launched and is heavily customized for the Client.
What is the recommended way for the Architect to remove the deprecated API so the LINK integration continues to work without interruptions, and lowest level of effort'

• A. The Architect should update all the deprecated API cats in the already integrated LINK cartridge and test thoroughly.
• B. The Architect should check to see If the LINK cartridge has been updated already, integrate It, apply the customisations, and teat thoroughly.
• C. The Architect does not need to do anything at this time, the API will continue to work with no issues for the foreseeable future.
• D. The Architect should contact the company that created the LINK cartridge to fix the issue and provide the client with updated code.

A B2C Commerce Developer has just finished implementing a new promotion code form on checkout. During review, an Architect notes that the form it not using CSRF validation correctly.

Which two options are best practice recommendations for dealing with CSRF validation? Choose 2 answers

• A. Only use GET methods over HTTPS.
• B. Ensure the CSRF protection is validated on form submission.
• C. Only use POST methods over HTTPS.
• D. Automatically renew the CSRF Token if expired.

During the testing of the login form, QA finds out that the first time the user can log in, but every other login attempt from another computer leads to the homepage and the basket being emptied. Developers tried to debug the issue, but when they add a breakpoint to the login action, it is not hit by the debugger.
Whatshould the Architect recommend developers to check?

• A. Add remote include for the login page
• B. Check Login Form and any includedtemplates for includes that enable page caching.
• C. Add disable cache page in the template ISML - <iscache status--off''/>.
• D. Remove CSRF protection from Login Form Action.

A new project for a Client will involve a few different Integrations to their middleware system resulting in four different web services. All will use the same credentials to the middleware. Each will have the same timeout, but will require a separate log file prefix.
How should the Architect set this up with the Service framework using a minimal set of configuration?

• A. Four Service Configurations. Four Service Profiles, Four Service Credentials
• B. Four Service Configurations. Four Service Profiles, One Service Credential
• C. One Service Configuration, Four Service Profiles, One Service Credential.
• D. Four Service Configurations. One Service Profile, One Service Credential.