Universal Containers intends to build an app which will accept card payments. The app also needs to store, process, and transmit cardholder data.

Which Heroku architecture should an Architect recommend?

A. Common Runtime with secure, isolated containers for running the app’s code.
B. A Private Space restricted to a set of trusted IP ranges.

C. A Shield Private Space with a Shield Postgres add-on.

D. A Private Space with Internal Routing enabled on the app.

Reference: https://www.heroku.com/managed-data-services