HashiCorp Certified: Terraform Associate (003)

Question 1

The terraform.tfstate file always matches your currently built infrastructure.
A. True
B. False

Answer 1

B

Question 2

One remote backend configuration always maps to a single remote workspace.
A. True
B. False

Answer 2

A

Question 3

How is the Terraform remote backend different than other state backends such as S3, Consul, etc.?

A. It can execute Terraform runs on dedicated infrastructure on premises or in Terraform Cloud
B. It doesn’t show the output of a terraform apply locally
C. It is only available to paying customers
D. All of the above

Answer 3

A

Question 4

What is the workflow for deploying new infrastructure with Terraform?

A. terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure.
B. Write a Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure.
C. terraform import to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure.
D. Write a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure changes, and terraform apply to create new infrastructure.

Answer 4

D

Question 5

A provider configuration block is required in every Terraform configuration.
Example:

A. True
B. False

Answer 5

A

Question 6

You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need to rerun the script.
Which of the following commands would you use first?

A. terraform taint null_resource.run_script
B. terraform apply -target=null_resource.run_script
C. terraform validate null_resource.run_script
D. terraform plan -target=null_resource.run_script

Answer 6

A

Question 7

Which provisioner invokes a process on the resource created by Terraform?
A. remote-exec
B. null-exec
C. local-exec
D. file

Answer 7

A

Question 8

Which of the following is not true of Terraform providers?
A. Providers can be written by individuals
B. Providers can be maintained by a community of users
C. Some providers are maintained by HashiCorp
D. Major cloud vendors and non-cloud vendors can write, maintain, or collaborate on Terraform providers
E. None of the above

Answer 8

D

Question 9

What command does Terraform require the first time you run it within a configuration directory?
A. terraform import
B. terraform init
C. terraform plan
D. terraform workspace

Answer 9

B

Question 10

You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create any outputs for your code.
What is the best method to quickly find the IP address of the resource you deployed?

A. Run terraform output ip_address to view the result
B. In a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file
C. Run terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address
D. Run terraform destroy then terraform apply and look for the IP address in stdout

Answer 10

A

Question 11

Which of the following is not a key principle of infrastructure as code?
A. Versioned infrastructure
B. Golden images
C. Idempotence
D. Self-describing infrastructure

Answer 11

A, B, D

Question 12

Terraform variables and outputs that set the “description” argument will store that description in the state file.
A. True
B. False

Answer 12

A

Question 13

If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?

A. Run terraform refresh
B. It will happen automatically
C. Manually update the state fire
D. Run terraform import

Answer 13

B

Question 14

What is not processed when running a terraform refresh?
A. State file
B. Configuration file
C. Credentials
D. Cloud provider

Answer 14

C, D

Question 15

What information does the public Terraform Module Registry automatically expose about published modules?

A. Required input variables
B. Optional inputs variables and default values
C. Outputs
D. All of the above
E. None of the above

Answer 15

E

Question 16

If a module uses a local values, you can expose that value with a terraform output.
A. True
B. False

Answer 16

A

Question 17

You should store secret data in the same version control repository as your Terraform configuration.
A. True
B. False

Answer 17

B

Question 18

Which of the following is not a valid string function in Terraform?
A. split
B. join
C. slice
D. chomp

Answer 18

D

Question 19

You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with
Terraform and want to manage these VMs using Terraform instead.
What are the two things you must do to achieve this? (Choose two.)

A. Provision new VMs using Terraform with the same VM names
B. Use the terraform import command for the existing VMs
C. Write Terraform configuration for the existing VMs
D. Run the terraform import-gcp command

Answer 19

B, D

Question 20

You have recently started a new job at a retailer as an engineer. As part of this new role, you have been tasked with evaluating multiple outages that occurred during peak shopping time during the holiday season. Your investigation found that the team is manually deploying new compute instances and configuring each compute instance manually. This has led to inconsistent configuration between each compute instance.
How would you solve this using infrastructure as code?

A. Implement a ticketing workflow that makes engineers submit a ticket before manually provisioning and configuring a resource
B. Implement a checklist that engineers can follow when configuring compute instances
C. Replace the compute instance type with a larger version to reduce the number of required deployments
D. Implement a provisioning pipeline that deploys infrastructure configurations committed to your version control system following code reviews

Answer 20

A

Question 21

terraform init initializes a sample main.tf file in the current directory.
A. True
B. False

Answer 21

A

Question 22

Which two steps are required to provision new infrastructure in the Terraform workflow? (Choose two.)
A. Destroy
B. Apply
C. Import
D. Init
E. Validate

Answer 22

B, D

Question 23

Why would you use the terraform taint command?
A. When you want to force Terraform to destroy a resource on the next apply
B. When you want to force Terraform to destroy and recreate a resource on the next apply
C. When you want Terraform to ignore a resource on the next apply
D. When you want Terraform to destroy all the infrastructure in your workspace

Answer 23

B

Question 24

Terraform requires the Go runtime as a prerequisite for installation.
A. True
B. False

Answer 24

B

Question 25

When should you use the force-unlock command?
A. You see a status message that you cannot acquire the lock
B. You have a high priority change
C. Automatic unlocking failed
D. You apply failed due to a state lock

Answer 25

C

Question 26

Terraform can import modules from a number of sources `” which of the following is not a valid source?
A. FTP server
B. GitHub repository
C. Local path
D. Terraform Module Registry

Answer 26

A

Question 27

Which of the following is available only in Terraform Enterprise or Cloud workspaces and not in Terraform CLI?
A. Secure variable storage
B. Support for multiple cloud providers
C. Dry runs with terraform plan
D. Using the workspace as a data source

Answer 27

A

Question 28

terraform validate validates the syntax of Terraform files.
A. True
B. False

Answer 28

A

Question 29

You have used Terraform to create an ephemeral development environment in the cloud and are now ready to destroy all the infrastructure described by your
Terraform configuration. To be safe, you would like to first see all the infrastructure that will be deleted by Terraform.
Which command should you use to show all of the resources that will be deleted? (Choose two.)

A. Run terraform plan -destroy.
B. This is not possible. You can only show resources that will be created.
C. Run terraform state rm *.
D. Run terraform destroy and it will first output all the resources that will be deleted before prompting for approval.

Answer 29

C, D

Question 30

Which of the following is the correct way to pass the value in the variable num_servers into a module with the input servers?
A. servers = num_servers
B. servers = variable.num_servers
C. servers = var(num_servers)
D. servers = var.num_servers

Answer 30

A

Question 31

A Terraform provisioner must be nested inside a resource configuration block.
A. True
B. False

Answer 31

A

Question 32

Terraform can run on Windows or Linux, but it requires a Server version of the Windows operating system.
A. True
B. False

Answer 32

B

Question 33

What does the default “local” Terraform backend store?
A. tfplan files
B. Terraform binary
C. Provider plugins
D. State file

Answer 33

D

Question 34

You have multiple team members collaborating on infrastructure as code (IaC) using Terraform, and want to apply formatting standards for readability.
How can you format Terraform HCL (HashiCorp Configuration Language) code according to standard Terraform style convention?

A. Run the terraform fmt command during the code linting phase of your CI/CD process
B. Designate one person in each team to review and format everyone’s code
C. Manually apply two spaces indentation and align equal sign “=” characters in every Terraform file (*.tf)
D. Write a shell script to transform Terraform files using tools such as AWK, Python, and sed

Answer 34

C

Question 35

What value does the Terraform Cloud/Terraform Enterprise private module registry provide over the public Terraform Module Registry?

A. The ability to share modules with public Terraform users and members of Terraform Enterprise Organizations
B. The ability to tag modules by version or release
C. The ability to restrict modules to members of Terraform Cloud or Enterprise organizations
D. The ability to share modules publicly with any user of Terraform

Answer 35

D

Question 36

Which task does terraform init not perform?
A. Sources all providers present in the configuration and ensures they are downloaded and available locally
B. Connects to the backend
C. Sources any modules and copies the configuration locally
D. Validates all required variables are present

Answer 36

D

Question 37

You have declared a variable called var.list which is a list of objects that all have an attribute id.
Which options will produce a list of the IDs? (Choose two.)
A. { for o in var.list : o => o.id }
B. var.list[].id
C. [ var.list[].id ]
D. [ for o in var.list : o.id ]

Answer 37

A, B

Question 38

Which argument(s) is (are) required when declaring a Terraform variable?
A. type
B. default
C. description
D. All of the above
E. None of the above

Answer 38

B

Question 39

When using a module block to reference a module stored on the public Terraform Module Registry such as:

How do you specify version 1.0.0?
A. Modules stored on the public Terraform Module Registry do not support versioning
B. Append ?ref=v1.0.0 argument to the source path
C. Add version = “1.0.0” attribute to module block
D. Nothing ג€” modules stored on the public Terraform Module Registry always default to version 1.0.0

Answer 39

C

Question 40

What features does the hosted service Terraform Cloud provide? (Choose two.)
A. Automated infrastructure deployment visualization
B. Automatic backups
C. Remote state storage
D. A web-based user interface (UI)

Answer 40

B, C

Question 41

Where does the Terraform local backend store its state?
A. In the /tmp directory
B. In the terraform file
C. In the terraform.tfstate file
D. In the user’s terraform.state file

Answer 41

C

Question 42

Which option can not be used to keep secrets out of Terraform configuration files?
A. A Terraform provider
B. Environment variables
C. A -var flag
D. secure string

Answer 42

C

Question 43

What is one disadvantage of using dynamic blocks in Terraform?
A. They cannot be used to loop through a list of values
B. Dynamic blocks can construct repeatable nested blocks
C. They make configuration harder to read and understand
D. Terraform will run more slowly

Answer 43

A

Question 44

Only the user that generated a plan may apply it.
A. True
B. False

Answer 44

B

Question 45

Examine the following Terraform configuration, which uses the data source for an AWS AMI.
What value should you enter for the ami argument in the AWS instance resource?

A. aws_ami.ubuntu
B. data.aws_ami.ubuntu
C. data.aws_ami.ubuntu.id
D. aws_ami.ubuntu.id

Answer 45

C

Question 46

You need to specify a dependency manually.
What resource meta-parameter can you use to make sure Terraform respects the dependency?

Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

Answer 46

FILL BLANK - depends_on

Question 47

You have never used Terraform before and would like to test it out using a shared team account for a cloud provider. The shared team account already contains
15 virtual machines (VM). You develop a Terraform configuration containing one VM, perform terraform apply, and see that your VM was created successfully.
What should you do to delete the newly-created VM with Terraform?

A. The Terraform state file contains all 16 VMs in the team account. Execute terraform destroy and select the newly-created VM.
B. The Terraform state file only contains the one new VM. Execute terraform destroy.
C. Delete the Terraform state file and execute Terraform apply.
D. Delete the VM using the cloud provider console and terraform apply to apply the changes to the Terraform state file.

Answer 47

B

Question 48

What is the name assigned by Terraform to reference this resource?

A. dev
B. azurerm_resource_group
C. azurerm
D. test

Answer 48

A

Question 49

Setting the TF_LOG environment variable to DEBUG causes debug messages to be logged into syslog.
A. True
B. False

Answer 49

A

Question 50

How can a ticket-based system slow down infrastructure provisioning and limit the ability to scale? (Choose two.)

A. A full audit trail of the request and fulfillment process is generated
B. A request must be submitted for infrastructure changes
C. As additional resources are required, more tickets are submitted
D. A catalog of approved resources can be accessed from drop down lists in a request form

Answer 50

B, C

Question 51

You can reference a resource created with for_each using a Splat (*) expression.

A. True
B. False

Answer 51

B

Explanation:
Splat Expressions with Maps The splat expression patterns shown above apply only to lists, sets, and tuples. To get a similar result with a map or object value you must use for expressions. Resources that use the for_each argument will appear in expressions as a map of objects, so you can’t use splat expressions with those resources. For more information, see Referring to Resource Instances. https://www.terraform.io/language/meta-arguments/for_each#referring-to-instances

Question 52

Which is the best way to specify a tag of v1.0.0 when referencing a module stored in Git (for example git::https://example.com/vpc.git)?

A. Append ref=v1. 0. 0 argument to the source path
B. Add version = “1.0.0” parameter to module block
C. Nothing “ modules stored on GitHub always default to version 1.0.0
D. Modules stored on GitHub do not support versioning

Answer 52

A

Question 53

What does terraform destroy do?

A. Destroy all infrastructure in the Terraform state file
B. Destroy all Terraform code files in the current directory while leaving the state file intact
C. Destroy all infrastructure in the configured Terraform provider
D. Destroy the Terraform state file while leaving infrastructure intact

Answer 53

A

Explanation:
The terraform destroy command terminates resources managed by your Terraform project. This command is the inverse of terraform apply in that it terminates all the resources specified in your Terraform state. It does not destroy resources running elsewhere that are not managed by the current Terraform project.

Question 54

You’re writing a Terraform configuration that needs to read input from a local file called id_rsa.pub. Which built-in Terraform function can you use to import the file’s contents as a string?

A. fileset(“id_rsa.pub”)
B. filebase64(“id_rsa.pub”)
C. templatefile(“id_rsa.pub”)
D. file(“id_rsa.pub”)

Answer 54

D

Question 55

You need to migrate a workspace to use a remote backend. After updating your configuration, what command do you run to perform the migration?
Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

A. terraform init
B. terraform onit

Answer 55

A

Once you have authenticated to Terraform Cloud, you’re ready to migrate your local state file to Terraform Cloud. To begin the migration, reinitialize. This causes Terraform to recognize your cloud block configuration.

Question 56

When should Terraform configuration files be written when running terraform import on existing infrastructure?

A. Infrastructure can be imported without corresponding Terraform code
B. Terraform will generate the corresponding configuration files for you
C. You should write Terraform configuration files after the next terraform import is executed
D. Terraform configuration should be written before terraform import is executed

Answer 56

D

Explanation:
The current implementation of Terraform import can only import resources into the state. It does not generate configuration. A future version of Terraform will also generate configuration. Because of this, prior to running terraform import it is necessary to write manually a resource configuration block for the resource, to which the imported object will be mapped.

Question 57

A Terraform backend determines how Terraform loads state and stores updates when you execute.

A. apply
B. taint
C. destroy
D. All of the above
E. None of the above

Answer 57

D

Question 58

What does Terraform use .terraform.lock.hcl file for?

A. Tracking provider dependencies
B. There is no such file
C. Preventing Terraform runs from occurring
D. Storing references to workspaces which are locked

Answer 58

A

Explanation:
“hcl , and this name is intended to signify that it is a lock file for various items that Terraform caches in the . terraform subdirectory of your working directory. Terraform automatically creates or updates the dependency lock file each time you run the terraform init command.”

Question 59

A junior admin accidentally deleted some of your cloud instances. What does Terraform do when you run terraform apply?

A. Build a completely brand new set of infrastructure
B. Tear down the entire workspace infrastructure and rebuild it
C. Rebuild only the instances that were deleted
D. Stop and generate an error message about the missing instances

Answer 59

C

Question 60

Which are forbidden actions when the Terraform state file is locked? (Choose three.)

A. terraform destroy
B. terraform fmt
C. terraform state list
D. terraform apply
E. terraform plan
F. terraform validate

Answer 60

A, D, E

Question 61

How would you reference the Volume IDs associated with the ebs_block_device blocks in this configuration?

A. aws_instance.example.ebs_block_device.[].volume_id
B. aws_instance.example.ebs_block_device.volume_id
C. aws_instance.example.ebs_block_device[sda2,sda3].volume_id
D. aws_instance.example.ebs_block_device..volume_id

Answer 61

A

Question 62

In the below configuration, how would you reference the module output vpc_id?
Type your answer in the field provided. The text field is not case sensitive and all variations of the correct answer are accepted.

A. module.vpc.vpc_id
B. module.vpc.cpc_id

Answer 62

A

Question 63

Which are examples of infrastructure as code? (Choose two.)

A. Cloned virtual machine images
B. Change management database records
C. Versioned configuration files
D. Docker files

Answer 63

C, D

Question 64

You cannot install third party plugins using terraform init.

A. True
B. False

Answer 64

B

Explanation:
For providers that are published in either the public Terraform Registry or in a third-party provider registry, terraform init will automatically find, download, and install the necessary provider plugins.

Question 65

Which command lets you experiment with Terraform’s built-in functions?

A. terraform env
B. terraform console
C. terraform test
D. terraform validate

Answer 65

B

Question 66

Terraform console provides an interactive command-line console for evaluating and experimenting with expressions. You can use it to test interpolations before using them in configurations and to interact with any values currently saved in state.
Which configuration consistency errors does terraform validate report?

A. A mix of spaces and tabs in configuration files
B. Differences between local and remote state
C. Terraform module isn’t the latest version
D. Declaring a resource identifier more than once

Answer 66

D

Explanation:
validate will look for syntax errors “Declaring a resource identifier more than once” is a syntax error

Question 67

Which of the following Terraform commands is used to initialize a Terraform working directory?

a) terraform validate
b) terraform plan
c) terraform init
d) terraform apply

Answer 67

C

Question 68

What is Terraform?

a) A configuration management tool
b) A cloud orchestration tool
c) A programming language
d) An infrastructure as code tool

Answer 68

D

Question 69

What is the purpose of the Terraform State?

a) To store the current state of infrastructure resources
b) To store the configuration code written in Terraform
c) To track the version control of Terraform modules
d) To manage user authentication and access control

Answer 69

A

Question 70

What is HCL (HashiCorp Configuration Language)?

a) A domain-specific language for defining infrastructure resources
b) A scripting language used to automate Terraform workflows
c) A markup language for creating user interfaces
d) A command-line interface for managing Terraform resources

Answer 70

A

Question 71

Which of the following is the correct syntax for defining a variable in Terraform?

a) variable “name” { default = “value” }
b) var name = “value”
c) input name = “value”
d) var “name” = “value”

Answer 71

A

Question 72

What is the purpose of Terraform Data Sources?

a) To define variables used in Terraform configuration
b) To specify the version constraints for Terraform modules
c) To import existing infrastructure resources into Terraform
d) To create dynamic outputs based on Terraform configurations

Answer 72

C

Question 73

Which of the following Terraform commands is used to create an execution plan?

a) terraform validate
b) terraform init
c) terraform plan
d) terraform apply

Answer 73

C

Question 74

What is the purpose of the -target flag in the terraform apply command?

a) To specify the target directory for the Terraform state file
b) To specify the target AWS region for resource provisioning
c) To limit the operation to a specific resource or module
d) To enable verbose output for debugging purposes

Answer 74

C

Question 75

Which of the following Terraform commands is used to destroy the infrastructure created by Terraform?

a) terraform destroy
b) terraform stop
c) terraform teardown
d) terraform remove

Answer 75

A

Question 76

What is a Terraform Provider?

a) A tool for testing Terraform configurations
b) A cloud service that manages Terraform resources
c) A plugin that manages resources for a specific infrastructure platform
d) A security mechanism for restricting Terraform access

Answer 76

C

Question 77

How can you manage resource dependencies in Terraform?

a) By using the depends_on argument within resource blocks
b) By defining resource dependencies in the Terraform State file
c) By specifying dependencies in the provider configuration
d) By using conditional statements in the Terraform configuration code

Answer 77

A

Question 78

What is Terraform Remote State?

a) A remote repository for storing Terraform configuration files
b) A secure storage location for sensitive Terraform data
c) A distributed version control system for Terraform code
d) A centralized store for storing the Terraform State file

Answer 78

D

Question 79

What is a Terraform Module?

a) A collection of Terraform resources that are managed together
b) A script for automating Terraform workflow tasks
c) A configuration file for defining variables and outputs
d) A template for creating custom Terraform providers

Answer 79

A

Question 80

How can you pass variables to a Terraform Module?

a) By using environment variables
b) By specifying variables in the Terraform State file
c) By using the -var command-line option when running Terraform commands
d) By defining variables in the module’s configuration file

Answer 80

C

Question 81

What is the purpose of the output block in a Terraform Module?

a) To define variables used within the module
b) To specify the module’s dependencies
c) To expose values from the module to be used by other configurations
d) To store sensitive data securely within the module

Answer 81

C

Question 82

What is a Terraform Workspace?

a) A virtual environment for isolating Terraform configurations
b) A collaboration tool for multiple Terraform developers
c) A web-based interface for managing Terraform resources
d) A version control system for Terraform configurations

Answer 82

A

Question 83

How can you create a new Terraform Workspace?

a) By using the terraform workspace create command
b) By specifying the workspace name in the Terraform configuration file
c) By running the terraform init command with the -workspace flag
d) By using the terraform workspace new command

Answer 83

A

Question 84

What is the purpose of the default workspace in Terraform?

a) It is the initial workspace created when running terraform init
b) It is a reserved workspace that cannot be modified or deleted
c) It is the default workspace used when no other workspace is specified
d) It is a workspace specifically designed for storing Terraform State

Answer 84

C

Question 85

How can you authenticate with a Terraform Provider?

a) By specifying authentication credentials in the Terraform configuration file
b) By using environment variables to store authentication information
c) By passing authentication details via command-line options when running Terraform commands
d) By configuring authentication within the provider’s specific configuration block

Answer 85

D

Question 86

What is the purpose of the terraform.tfstate.backup file?

a) It is a backup file for storing previous versions of the Terraform State file
b) It is a cache file used to improve Terraform performance
c) It is a log file that records changes made to the Terraform State
d) It is a temporary file used during the execution of Terraform commands

Answer 86

A

Question 87

How can you manage multiple Terraform Provider versions in a configuration?

a) By using the terraform version command to switch between provider versions
b) By specifying provider versions in the required_providers block of the Terraform configuration
c) By creating separate Terraform modules for each provider version
d) By using environment variables to set the desired provider version

Answer 87

B

Question 88

What is Terraform?

a) A configuration management tool
b) A cloud orchestration tool
c) A programming language
d) An infrastructure as code tool

Answer 88

D

Question 89

What is the purpose of the Terraform State?

a) To store the current state of infrastructure resources
b) To store the configuration code written in Terraform
c) To track the version control of Terraform modules
d) To manage user authentication and access control

Answer 89

A

Question 90

Which of the following Terraform commands is used to initialize a Terraform working directory?

a) terraform validate
b) terraform plan
c) terraform init
d) terraform apply

Answer 90

C

Question 91

Which of the following is the correct syntax for defining a variable in Terraform?

a) variable “name” { default = “value” }
b) var name = “value”
c) input name = “value”
d) var “name” = “value”

Answer 91

A

Question 92

What is the purpose of Terraform Data Sources?

a) To define variables used in Terraform configuration
b) To specify the version constraints for Terraform modules
c) To import existing infrastructure resources into Terraform
d) To create dynamic outputs based on Terraform configurations

Answer 92

C

Question 93

Which of the following Terraform commands is used to create an execution plan?

a) terraform validate
b) terraform init
c) terraform plan
d) terraform apply

Answer 93

C

Question 94

What is the purpose of the -target flag in the terraform apply command?

a) To specify the target directory for the Terraform state file
b) To specify the target AWS region for resource provisioning
c) To limit the operation to a specific resource or module
d) To enable verbose output for debugging purposes

Answer 94

C

Question 95

Which of the following Terraform commands is used to destroy the infrastructure created by Terraform?

a) terraform destroy
b) terraform stop
c) terraform teardown
d) terraform remove

Answer 95

A

Question 96

What is a Terraform Provider?

a) A tool for testing Terraform configurations
b) A cloud service that manages Terraform resources
c) A plugin that manages resources for a specific infrastructure platform
d) A security mechanism for restricting Terraform access

Answer 96

C

Question 97

How can you manage resource dependencies in Terraform?

a) By using the depends_on argument within resource blocks
b) By defining resource dependencies in the Terraform State file
c) By specifying dependencies in the provider configuration
d) By using conditional statements in the Terraform configuration code

Answer 97

A

Question 98

What is Terraform Remote State?

a) A remote repository for storing Terraform configuration files
b) A secure storage location for sensitive Terraform data
c) A distributed version control system for Terraform code
d) A centralized store for storing the Terraform State file

Answer 98

D

Question 99

What is a Terraform Module?

a) A collection of Terraform resources that are managed together
b) A script for automating Terraform workflow tasks
c) A configuration file for defining variables and outputs
d) A template for creating custom Terraform providers

Answer 99

A

Question 100

How can you pass variables to a Terraform Module?

a) By using environment variables
b) By specifying variables in the Terraform State file
c) By using the -var command-line option when running Terraform commands
d) By defining variables in the module’s configuration file

Answer 100

C

Question 101

What is the purpose of the output block in a Terraform Module?

a) To define variables used within the module
b) To specify the module’s dependencies
c) To expose values from the module to be used by other configurations
d) To store sensitive data securely within the module

Answer 101

C

Question 102

What is Infrastructure as Code (IaC)?

a) The practice of manually provisioning infrastructure resources
b) A method for defining and managing infrastructure resources through code
c) A process for automating network configurations
d) A framework for creating virtualized environments

Answer 102

B

Question 103

Which of the following resources is managed by Terraform?

a) Virtual machines
b) Cloud storage buckets
c) Database instances
d) All of the above

Answer 103

D

Question 104

What is the purpose of Terraform’s plan phase?

a) To create infrastructure resources
b) To update the Terraform state file
c) To validate the Terraform configuration
d) To preview the changes to be made in infrastructure

Answer 104

D

Question 105

Which of the following variable types can be defined in Terraform?

a) String
b) Number
c) List
d) All of the above

Answer 105

D

Question 106

What is the purpose of the terraform.tfvars file?

a) It stores sensitive information used in Terraform configurations.
b) It defines variables and their values for a Terraform module.
c) It specifies the version of Terraform to be used in the project.
d) It is not a valid file in Terraform configurations.

Answer 106

B

Question 107

Which of the following Terraform commands applies the changes to infrastructure?

a) terraform apply
b) terraform validate
c) terraform plan
d) terraform refresh

Answer 107

A

Question 108

How does Terraform manage resource dependencies?

a) By automatically resolving dependencies based on the order of resource creation.
b) By using the depends_on argument within resource blocks.
c) By defining dependencies in the required_providers block of the configuration.
d) By using the terraform.tfstate file to track and resolve dependencies.

Answer 108

B

Question 109

What is the purpose of the Terraform State file?

a) To store the Terraform configuration code.
b) To track changes to infrastructure resources.
c) To store provider-specific configuration details.
d) To manage Terraform workspace information.

Answer 109

B

Question 110

Which of the following commands is used to manage Terraform workspaces?

a) terraform import
b) terraform workspace
c) terraform state
d) terraform output

Answer 110

B

Question 111

What is Terraform Provisioning?

a) The process of configuring infrastructure resources using Terraform.
b) The process of managing software packages on virtual machines.
c) The process of allocating IP addresses for networking resources.
d) The process of scaling infrastructure resources based on demand.

Answer 111

A

Question 112

How can you specify conditional creation of resources in Terraform?

a) By using the if statement in Terraform configuration code.
b) By defining conditional statements within resource blocks.
c) By using the count parameter in resource blocks.
d) By creating separate Terraform modules for different conditions.

Answer 112

C

Question 113

What is a Terraform Provider Plugin?

a) A software package that extends Terraform with additional functionality.
b) A mechanism for authenticating Terraform with cloud providers.
c) A containerized environment for running Terraform configurations.
d) A web-based interface for managing Terraform resources.

Answer 113

A

Question 114

A user creates three workspaces from the command line - prod, dev, and test. Which of the following commands will the user run to switch to the dev workspace?

A. terraform workspace dev
B. terraform workspace select dev
C. terraform workspace -switch dev
D. terraform workspace switch dev

Answer 114

B

Question 115

Select the most accurate statement to describe the Terraform language from the following list.

A. Terraform is an immutable, declarative, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally JSON.
B. Terraform is a mutable, declarative, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.
C. Terraform is an immutable, procedural, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.
D. Terraform is a mutable, procedural, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally YAML.

Answer 115

A

Explanation:
Terraform is not a configuration management tool - https://www.terraform.io/intro/vs/chefpuppet.html
Terraform is a declarative language - https://www.terraform.io/docs/configuration/index.html Terraform supports a syntax that is JSON compatible - https://www.terraform.io/docs/configuration/syntax-json.html
Terraform is primarily designed on immutable infrastructure principles

Question 116

True or False? By default, Terraform destroy will prompt for confirmation before proceeding.

A. False
B. True

Answer 116

B

Question 117

Each Terraform workspace uses its own state file to manage the infrastructure associated with that particular workspace.

A. False
B. True

Answer 117

B

Explanation:
Reference:
The persistent data stored in the backend belongs to a workspace. Initially, the backend has only one workspace, called “default”, and thus there is only one Terraform state associated with that configuration.

Question 118

The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.

A. False
B. True

Answer 118

A

Question 119

Complete the following sentence:
The terraform state command can be used to

A. modify state
B. view state
C. refresh state
D. There is no such command

Answer 119

A

Question 120

Provider dependencies are created in several different ways. Select the valid provider dependencies from the following list: (select three)

A. Explicit use of a provider block in configuration, optionally including a version constraint.
B. Use of any resource belonging to a particular provider in a resource or data block in configuration.
C. Existence of any resource instance belonging to a particular provider in the current state.
D. Existence of any provider plugins found locally in the working directory.

Answer 120

A, B, C

Explanation:
The existence of a provider plugin found locally in the working directory does not itself create a provider dependency. The plugin can exist without any reference to it in the terraform configuration.

Question 121

In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?

A. 5
B. 50
C. 10
D. 20

Answer 121

C

Question 122

Select the operating systems which are supported for a clustered Terraform Enterprise: (select four)

A. Unix
B. Red Hat
C. CentOS
D. Amazon Linux
E. Ubuntu

Answer 122

B, C, D, E

Question 123

While Terraform is generally written using the HashiCorp Configuration Language (HCL), what other syntax can Terraform are expressed in?

A. JSON
b. YAML
C. TypeScript
D. XML

Answer 123

A

Explanation:
The constructs in the Terraform language can also be expressed in JSON syntax, which is harder for humans to read and edit but easier to generate and parse programmatically.

Question 124

Select all Operating Systems that Terraform is available for. (select five)

A. Linux
B. mac OS
C. Unix
D. Solaris
E. Windows
F. FreeBSD

Answer 124

A, B, D, E, F

Question 125

A user has created a module called “my_test_module” and committed it to GitHub. Over time, several commits have been made with updates to the module, each tagged in GitHub with an incremental version number. Which of the following lines would be required in a module configuration block in terraform to select tagged version v1.0.4?

A. source = “git::https://example.com/my_test_module.git@tag=v1.0.4”
B. source = “git::https://example.com/my_test_module.git&ref=v1.0.4”
C. source = “git::https://example.com/my_test_module.git#tag=v1.0.4”
D. source = “git::https://example.com/my_test_module.git?ref=v1.0.4”

Answer 125

D

Question 126

Which of the following terraform subcommands could be used to remove the lock on the state for the current configuration?

A. Unlock
B. force-unlock
C. Removing the lock on a state file is not possible
D. state-unlock

Answer 126

B

Question 127

terraform init cannot automatically download Community providers.

A. False
B. True

Answer 127

B

Question 128

Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

A. True
B. False

Answer 128

B

Question 129

What is the best and easiest way for Terraform to read and write secrets from HashiCorp Vault?

A. Vault provider
B. API access using the AppRole auth method
C. integration with a tool like Jenkins
D. CLI access from the same machine running Terraform

Answer 129

A

Question 130

What are some of the problems of how infrastructure was traditionally managed before Infrastructure as Code? (select three)

A. Requests for infrastructure or hardware required a ticket, increasing the time required to deploy applications
B. Traditional deployment methods are not able to meet the demands of the modern business where resources tend to live days to weeks, rather than months to years
C. Traditionally managed infrastructure can’t keep up with cyclic or elastic applications
D. Pointing and clicking in a management console is a scalable approach and reduces human error as businesses are moving to a multi-cloud deployment model

Answer 130

A, B, C

Explanation:
Businesses are making a transition where traditionally-managed infrastructure can no longer meet the demands of today’s businesses. IT organizations are quickly adopting the public cloud, which is predominantly API-driven. To meet customer demands and save costs, application teams are architecting their applications to support a much higher level of elasticity, supporting technology like containers and public cloud resources. These resources may only live for a matter of hours; therefore the traditional method of raising a ticket to request resources is no longer a viable option Pointing and clicking in a management console is NOT scale and increases the change of human error.

Question 131

What are the benefits of using Infrastructure as Code? (select five)

A. Infrastructure as Code is relatively simple to learn and write, regardless of a user’s prior experience with developing code
B. Infrastructure as Code provides configuration consistency and standardization among deployments
C. Infrastructure as Code is easily repeatable, allowing the user to reuse code to deploy similar, yet different resources
D. Infrastructure as Code gives the user the ability to recreate an application’s infrastructure for disaster recovery scenarios
E. Infrastructure as Code easily replaces development languages such as Go and .Net for application development
F. Infrastructure as Code allows a user to turn a manual task into a simple, automated deployment (Correct)

Answer 131

A, C, D, F

Explanation:
If you are new to infrastructure as code as a concept, it is the process of managing infrastructure in a file or files rather than manually configuring resources in a user interface.
A resource in this instance is any piece of infrastructure in a given environment, such as a virtual machine, security group, network interface, etc. At a high level, Terraform allows operators to use HCL to author files containing definitions of their desired resources on almost any provider (AWS, GCP, GitHub, Docker, etc) and automates the creation of those resources at the time of application.

Question 132

HashiCorp offers multiple versions of Terraform, including Terraform open-source, Terraform Cloud, and Terraform Enterprise. Which of the following Terraform features are only available in the Enterprise edition?

A. SAML/SSO
B. Sentinel
C. Audit Logs
D. Clustering
E. Private Module Registry
F. Private Network Connectivity

Answer 132

A, C, F

Question 133

Select the answer below that completes the following statement: Terraform Cloud can be managed from the CLI but requires ?

A. an API token
B. a TOTP token
C. a username and password
D. authentication using MFA

Answer 133

A

Explanation:
API and CLI access are managed with API tokens, which can be generated in the Terraform Cloud UI. Each user can generate any number of personal API tokens, which allow access with their own identity and permissions. Organizations and teams can also generate tokens for automating tasks that aren’t tied to an individual user.

Question 134

When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other important data aren’t inadvertently shared with others. What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)

A. directly querying HashiCorp Vault for the secrets
B. command-line key/value pairs
C. use the -backend-config=PATH to specify a separate config file
D. interactively on the command line

Answer 134

B, C, D

Explanation:
You do not need to specify every required argument in the backend configuration. Omitting certain arguments may be desirable to avoid storing secrets, such as access keys, within the main configuration. When some or all of the arguments are omitted, we call this a partial configuration. With a partial configuration, the remaining configuration arguments must be provided as part of the initialization process. There are several ways to supply the remaining arguments

Question 135

Which of the following commands will launch the Interactive console for Terraform interpolations?

A. terraform console
B. terraform cli
C. terraform
D. terraform cmdline

Answer 135

B

Question 136

Which of the following is not a valid Terraform string function?

A. replace
B. format
C. join
D. tostring

Answer 136

D

Question 137

What is a key benefit of the Terraform state file?

A. A state file represents a source of truth for resources provisioned with a public cloud console
B. A state file represents a source of truth for resources provisioned with Terraform
C. A state file represents the desired state expressed by the Terraform code files
D. A state file can be used to schedule recurring infrastructure tasks

Answer 137

C

Question 138

When you use a remote backend that needs authentication. HashrCorp recommends that you:

A. Push your Tefraform configuration to an encrypted git repository
B. Write the authentication credentials in the Terraform configuration files
C. Use partial configuration to load the authentication credentials outside of the Terraform code
D. Keep the Terraform configuration files in a secret store

Answer 138

C

Explanation:
We recommend omitting the token from the configuration, and instead using terraform login or manually configuring credentials in the CLI config file.

Question 139

Which of the following statements about local modules is incorrect:

A. Local modules are not cached by terraform init command
B. Local modules are sourced from a directory on disk
C. Local modules support versions
D. All of the above (all statements above are incorrect
E. None of the above (all statements above are correct)

Answer 139

C

Explanation:
Version constraints are supported only for modules installed from a module registry, such as the public Terraform Registry or Terraform Cloud’s private module registry. Other module sources can provide their own versioning mechanisms within the source string itself, or might not support versions at all. In particular, modules sourced from local file paths do not support version; since they’re loaded from the same source repository, they always share the same version as their caller

Question 140

Which of the following is not a benefit of adopting infrastructure as code?

A. Automation
B. Versioning
C. Reusability of code
D. Interpolation

Answer 140

D

Question 141

You want to define multiple data disks as nested blocks inside the resource block for a virtual machine. What Terraform feature would help you define the blocks using the values in a variable?

A. Local values
B. Dynamic blocks
C. Count arguments
D. Collection functions

Answer 141

B

Question 142

terraform apply will fail if you have not run terraform plan first to update the plan output.

A. True
B. False

Answer 142

B

Question 143

Which argument(s) are required when declaring a Terraform variable?

A. type
B. default
C. description
D. All of the above
E. None of the above

Answer 143

E

Explanation:
Terraform CLI defines the following OPTIONAL arguments for variable declarations:
default - A default value which then makes the variable optional.
type - This argument specifies what value types are accepted for the variable. description - This specifies the input variable’s documentation.
validation - A block to define validation rules, usually in addition to type constraints. sensitive - Limits Terraform UI output when the variable is used in configuration. nullable - Specify if the variable can be null within the module.

Question 144

Where can Terraform not load a provider from?

A. Plugins directory
B. Provider plugin cache
C. Official HashrCorp distribution on releases, hashicorp.com
D. Source code

Answer 144

D

Question 145

The terraform.tfstate file always matches your currently built infrastructure.
A. True
B. False

Answer 145

B

https://www.terraform.io/docs/language/state/index.html

Question 146

When do you need to explicitly execute terraform refresh?

A. Before every terraform plan
B. Before every terraform apply
C. Before every terraform import
D. None of the above

Answer 146

D

Wherever possible, avoid using terraform refresh explicitly and instead rely on Terraform’s behavior of automatically refreshing existing objects as part of creating a normal plan. Source: https://www.terraform.io/cli/commands/refresh

Question 147

How does Terraform determine dependencies between resources?

A. Terraform automatically builds a resource graph based on resources, provisioners, special meta-parameters, and the state file, if present.
B. Terraform requires all dependencies between resources to be specified using the depends_on parameter
C. Terraform requires resources in a configuration to be listed in the order they will be created to determine dependencies
D. Terraform requires resource dependencies to be defined as modules and sourced in order

Answer 147

A

https://learn.hashicorp.com/tutorials/terraform/dependencies

Question 148

What does terraform refresh modify?

A. Your cloud infrastructure
B. Your state file
C. Your Terraform plan
D. Your Terraform configuration

Answer 148

B

The terraform refresh command reads the current settings from all managed remote objects and updates the Terraform state to match. Source: https://www.terraform.io/cli/commands/refresh

Question 149

Which of the following is not a valid source path for specifying a module?

A. source = “./modulelversion=v1.0.0”
B. source = “github.com/hashicorp/example?ref=v1.0.0”
C. source = “./module”
D. source = “hashicorp/consul/aws”

Answer 149

A

Question 150

Do terraform workspaces help in adding/allowing multiple state files for a single configuration?

A. True
B. False

Answer 150

A

Question 151

Which of the following is not supported by backend types in Terraform?

A. consul
B. gcs
C. manta
D. bitbucket

Answer 151

D

Question 152

Which Terraform collection type should you use to store key/value pairs?

A. set
B. tuple
C. list
D. map

Answer 152

D

Question 153

Which of the following can you do with terraform plan? Choose two correct answers.

A. View the execution plan and check if the changes match your expectations
B. Schedule Terraform to run at a planned time in the future
C. Execute a plan in a different workspace
D. Save a generated execution plan to apply later

Answer 153

A , D

https://learn.hashicorp.com/tutorials/terraform/plan

Question 154

How would you reference the attribute “name* of this fictitious resource in HCL?

A. resource.kubrnetes_namespace>example.name
B. kubernetes_namespace.test.name
C. kubernetes_namespace.example,name
D. data kubernetes_namespace.name
E. None of the above

Answer 154

C

https://www.terraform.io/language/expressions/references#references-to-resource-attributes

Question 155

You have modified your Terraform configuration to fix a typo in the Terraform ID of a resource from aws_security_group.http to aws_security_group.http

Which of the following commands would you run to update the ID in state without destroying the resource?

A. terraform refresh
B. terraform apply
C. terraform mv aws-security-group.htp aws-security-group.http

Answer 155

C

The terraform state mv command changes which resource address in your configuration is associated with a particular real-world object. Use this to preserve an object when renaming a resource, or when moving a resource into or out of a child module.

Question 156

All modules published on the official Terraform Module Registry have been verified by HashiCorp.

A. True
B. False

Answer 156

B

Explanation:
https://registry.terraform.io/
Only modules considered “Verified Modules” are reviewed by Hashicorp, otherwise anyone can publish modules on the Terraform Registry.

Reference:
https://www.terraform.io/registry/modules/verified https://www.terraform.io/registry/modules/publish

Question 157

You want to share Terraform state with your team, store it securely and provide state locking. How would you do this? Choose three correct answers.

A. Using the consul Terraform backend.
B. Using the remote Terraform backend with Terraform Cloud /
Terraform Enterprise.
C. Using the local backend.
D. Using the s3 terraform backend. The dynamodb_field option e not needed.
E. Using an s3 terraform backend with an appropriate IAM policy and dynamodb_field option configured.

Answer 157

A, B, E

Question 158

terraform validate validates that your infrastructure matches the Terraform state file.

A. True
B. False

Answer 158

B

Explanation:
The terraform validate command validates the configuration files in a directory, referring only to the configuration and not accessing any remote services such as remote state, provider APIs, etc.
Validate runs checks that verify whether a configuration is syntactically valid and internally consistent, regardless of any provided variables or existing state. It is thus primarily useful for general verification of reusable modules, including correctness of attribute names and value types. Source: https://www.terraform.io/cli/commands/validate

Question 159

When does Sentinel enforce policy logic during a Terraform Enterprise run?

A. Before the plan phase
B. During the plan phase
C. Before the a apply phase
D. After the apply phase

Answer 159

C

Explanation:
“Enforcing policy checks on runs - Policies are checked when a run is performed, after the terraform plan but before it can be confirmed or the terraform apply is executed.”

Question 160

Open-source Terraform can only import publicly-accessible and open-source modules.

A. True
B. False

Answer 160

B

Explanation:
Terraform can load modules from a public or private registry. This makes it possible to publish modules for others to use, and to use modules that others have published. Also, members of your organization might produce modules specifically crafted for your own infrastructure needs. Terraform Cloud and Terraform Enterprise both include a private module registry for sharing modules internally within your organization. Source: https://www.terraform.io/language/modules

Question 161

Terra form installs its providers during which phase?

A. Man
B. Init
C. Refresh
D. All of the above

Answer 161

B

Explanation:
Providers are installed in the init phase.

Question 162

Terraform plan updates your state file.

A. True
B. False

Answer 162

B

Explanation:
The terraform plan command creates an execution plan, which lets you preview the changes that Terraform plans to make to your infrastructure. The plan command alone will not actually carry out the proposed changes, and so you can use this command to check whether the proposed changes match what you expected before you apply the changes or share your changes with your team for broader review. Source: https://www.terraform.io/cli/commands/plan

Question 163

Which task does teraform init not perform?

A. Sources any modules and copies the configuration locally
B. Validates all required variables are present
C. Connects to the backend
D. Sources all providers present in the configuration and ensures they are downloaded and available locally

Answer 163

B

Question 164

You have to initialize a Terraform backend before it can be configured.

A. True
B. False

Answer 164

A

Explanation:
Initialization
Whenever a configuration’s backend changes, you must run terraform init again to validate and configure the backend before you can perform any plans, applies, or state operations.
When changing backends, Terraform will give you the option to migrate your state to the new backend. This lets you adopt backends without losing any existing state.
To be extra careful, we always recommend manually backing up your state as well. You can do this by simply copying your terraform.tfstate file to another location. The initialization process should create a backup as well, but it never hurts to be safe!

Question 165

While attempting to deploy resources into your cloud provider using Terraform. you begin to see some odd behavior and experience sluggish responses. In order to troubleshoot you decide to turn on Terraform debugging. Which environment variables must be configured to make Terraform’s logging more verbose?

A. TF_10G_PATM
B. TF_LOG
C. TF_10G_LEVEL
D. TF.LOG.FUE

Answer 165

B

Reference:
https://www.terraform.io/internals/debugging

Question 166

The Terraform CLI will print output values from a child module after running terraform apply.

A. True
B. False

Answer 166

A

Question 167

As a member of the operations team, you need to run a script on a virtual machine created by Terraform. Which provision is best to use in your Terraform code?

A. local-exec
B. file
C. null-exec
D. remote-exec

Answer 167

D

Reference:
https://www.terraform.io/language/resources/provisioners/remote-exec

Question 168

If a DevOps team adopts AWS Cloud Formation as their standardized method for provisioning public cloud resources, which of the following scenarios poses a challenge for this team?

A. The team is asked to manage a new application stack built on AWS-natrve services
B. The organization decides to expand into Azure and wishes to deploy new infrastructure using their existing codebase
C. The team is asked to build a reusable code base that can deploy resources into any AWS region
D. The DevOps team is tasked with automating a manual provisioning process

Answer 168

B

Question 169

Running terraform fmt without any flags in a directory with Terraform configuration files will check the formatting of those files without changing their contents.

A. True
B. False

Answer 169

B

Question 170

How would you be able to reference an attribute from the vsphere_datacenter data source for use with the argument within the vsprere_folder resource in the following configuration?

A. vsphere_datacenter.dc.id
B. data.vsphere_datacenter.dc
C. data.dc,id
D. data.vsphere_datacenter.dc.id

Answer 170

D