How can a ticket-based system slow down infrastructure provisioning and limit the ability to scale? Choose two correct answers.

End-users have to request infrastructure changes

Ticket based systems generate a full audit trail of the request and fulfillment process

Users can access catalog of approved resources from drop down list in a request form

The more resources your organization needs, the more tickets your infrastructure team has to process

You have a Terraform configuration that defines a single virtual machine with no references to it, You have run terraform apply to create the resource, and then removed the resource definition from your Terraform configuration file.What will happen you run terraform apply in the working directory again?

Terraform will destroy the virtual machine

Terraform will remove the virtual machine from the state file, but the resource will still exist

Terraform will destroy the virtual machine

What is one disadvantage of using dynamic blocks in Terraform?

They make configuration harder to read and understand

Dynamic blocks can construct repeatable nested blocks

They cannot be used to loop through a list of values

They make configuration harder to read and understand

Which backend does the Terraform CU use by default?

Depends on the cloud provider configured

How does Terraform manage most dependencies between resources?

Terraform will automatically manage most resource dependencies

By defining dependencies as modules and including them in a particular order

The order that resources appear in Terraform configuration indicates dependencies

Your risk management organization requires that new AWS S3 buckets must be private and encrypted at rest. How can Terraform Cloud automatically and proactively enforce this security control?

With a Sentinel policy, which runs before every apply

Auditing cloud storage buckets with a vulnerability scanning tool

By adding variables to each Terraform Cloud workspace to ensure these settings are always enabled

With an S3 module with proper settings for buckets

With a Sentinel policy, which runs before every apply

A developer on your team is going lo leaf down an existing deployment managed by Terraform and deploy a new one. However, there is a server resource named aws instant.ubuntu[l] they would like to keep. What command should they use to tell Terraform to stop managing that specific resource?

Terraform state rm:aws_instance.ubuntu[1]

Terraform plan rm:aws_instance.ubuntu[1]

Terraform state rm:aws_instance.ubuntu[1]

Terraform apply rm:aws_instance.ubuntu[1]

Terraform destory rm:aws_instance.ubuntu[1]

Which of the following module source paths does not specify a remote module?

Source = ''githhub.comicrop/example''

Source =''git@github.com:hasicrop/example.git''

Source = ''hasicrop/consul/aws''

You have declared a variable called var.list which is a list of objects that all have an attribute id . Which options will produce a list of the IDs? Choose two correct answers.

{ for o in var.llst : o => o.id }

Which task does terraform init not perform?

Validates all required variables are present

Sources any modules and copies the configuration locally

Sources all providers used in the configuration and downloads them

Which of these is true about Terraform's plugin-based architecture?

You can create a provider for your API if none exists

Terraform can only source providers from the internet

Every provider in a configuration has its own state file for its resources

You can create a provider for your API if none exists

All providers are part of the Terraform core binary

Which of the following is not true of Terraform providers?

An individual person can write a Terraform Provider

A community of users can maintain a provider

HashiCorp maintains some providers

Cloud providers and infrastructure vendors can write, maintain, or collaborate on Terraform

How can you trigger a run in a Terraform Cloud workspace that is connected to a Version Control System (VCS) repository?

Commit a change to the VCS working directory and branch that the Terraform Cloud workspace is connected to

Only Terraform Cloud organization owners can set workspace variables on VCS connected workspaces

Commit a change to the VCS working directory and branch that the Terraform Cloud workspace is connected to

Only Terraform Cloud organization owners can approve plans in VCS connected workspaces

Only members of a VCS organization can open a pull request against repositories that are connected to Terraform Cloud workspaces

You're building a CI/CD (continuous integration/continuous delivery) pipeline and need to inject sensitive variables into your Terraform run. How can you do this safely?

Pass variables to Terraform with a -var flag

Copy the sensitive variables into your Terraform code

Store the sensitive variables in a secure_varS.tf file

Store the sensitive variables as plain text in a source code repository

Pass variables to Terraform with a -var flag

When should you write Terraform configuration files for existing infrastructure that you want to start managing with Terraform?

Before you run terraform Import

You can import infrastructure without corresponding Terraform code

Terraform will generate the corresponding configuration files for you

Before you run terraform Import

Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files. How can you protect that data?

Store the state in an encrypted backend

Edit your state file to scrub out the sensitive data

Always store your secrets in a secrets.tfvars file

Delete the state file every time you run Terraform

Store the state in an encrypted backend

Once you configure a new Terraform backend with a terraform code block, which command(s) should you use to migrate the state file?

terraform destroy, then terraform apply

What does Terraform use the .terraform.lock.hc1 file for?

Tracking specific provider dependencies

Preventing Terraform runs from occurring

Storing references to workspaces which are locked

Why does this backend configuration not follow best practices?

You should not store credentials in Terraform configuration

An alias meta-argument should be included in backend blocks whenever possible

You should use the local enhanced storage backend whenever possible

You should not store credentials in Terraform configuration

The backend configuration should contain multiple credentials so that more than one user can execute terraform plan and terraform apply

You want to define a single input variable to capture configuration values for a server. The values must represent memory as a number, and the server name as a string.Which variable type could you use for this input?

Terraform does not support complex input variables of different types

Which of the following statements about Terraform modules is not true?

Modules must be publicly accessible

A module is a container for one or more resources

Modules must be publicly accessible

You can call the same module multiple times

When you use a remote backend that needs authentication, HashiCorp recommends that you:

Use partial configuration to load the authentication credentials outside of the Terraform code

Write the authentication credentials in the Terraform configuration files

Keep the Terraform configuration files in a secret store

Push your Terraform configuration to an encrypted git repository

Use partial configuration to load the authentication credentials outside of the Terraform code

HashiCorp Terraform Associate 003 Practice Test 1 - Free Online Exam Prep & Questions

You have created a main.tf Terraform configuration consisting of an application server, a database and a load balanced. You ran terraform apply and Terraform created all of the resources successfully.

Now you realize that you do not actually need the load balancer, so you run terraform destroy without any flags. What will happen?

A.

Terraform will prompt you to pick which resource you want to destroy

B.

Terraform will destroy the application server because it is listed first in the code

C.

Terraform will prompt you to confirm that you want to destroy all the infrastructure

D.

Terraform will destroy the main, tf file

E.

Terraform will immediately destroy all the infrastructure

HashiCorp Terraform Associate 003 Practice Test 1

Question

HashiCorp Terraform Associate 003 Practice Tests

Practice Tests