HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 241:

  You have provisioned some aws resources in your test environment through Terraform for a POC work. After the POC, now you want to destroy the resources but before destroying them you want to check what resources will be getting destroyed through terraform. what are the options of doing that? (Select TWO)

  A. Use terraform destroy command

  B. This is not possible

  C. Use terraform plan command

  D. Use terraform plan-destroy command.

  Correct Answer: AD

  https://learn.hashicorp.com/terraform/getting-started/destroy

• Question 242:

  A user has created three workspaces using the command line-prod, dev, and test. The user wants to create a fourth workspace named stage. Which command will the user execute to accomplish this?

  A. terraform workspace new stage

  B. terraform workspace-new stage

  C. terraform workspace-create stage

  D. terraform workspace create stage

  Correct Answer: A

  The terraform workspace new command is used to create a new workspace.

  https://www.terraform.io/docs/commands/workspace/new.html

• Question 243:

  What happens when a terraform apply command is executed?

  A. Creates the execution plan for the deployment of resources.

  B. Applies the changes required in the target infrastructure in order to reach the desired configuration.

  C. The backend is initialized and the working directory is prepped.

  D. Reconciles the state Terraform knows about with the real-world infrastructure.

  Correct Answer: B

  The terraform apply command is used to apply the changes required to reach the desired state of the configuration, or the pre-determined set of actions generated by a terraform plan execution plan. https://www.terraform.io/docs/commands/apply.html

• Question 244:

  Which of the below options is the equivalent Terraform 0.12 version of the snippet which is written in Terraform 0.11?

  "${var.instance_id}"

  A. variable.instance_id

  B. var.instance_ids

  C. var.instance_id

  D. None of the above

  Correct Answer: C

• Question 245:

  Terraform Cloud always encrypts state at rest and protects it with TLS in transit. Terraform Cloud also knows the identity of the user requesting state and maintains a history of state changes.

  A. False

  B. True

  Correct Answer: B

  Terraform Cloud always encrypts state at rest and protects it with TLS in transit. Terraform Cloud also knows the identity of the user requesting state and maintains a history of state changes. This can be used to control access and track activity. Terraform Enterprise also supports detailed audit logging. https://www.terraform.io/docs/state/sensitive-data.html#recommendations

• Question 246:

  Your manager has instructed you to start using terraform for your day-to-day operations, but your security team is concerned about the terraform state files. They have heard it contains confidential information, and are worried that it will not be securely protected. What should be your response to the security team in this regard?

  A. Inform the security team that using terraform state is optional . There are ways to avoid it , and you will do the same.

  B. Ensure that the state is managed in a remote backend , preferably an enterprise grade state management system like Terraform Cloud.

  C. Mask the confidential entries in the terraform state file , using Vault Enterprise, another Hashicorp product , while keeping it locally.

  D. Keep the state file locally on each developer machine , and ensure that there is a local protection software like KeyPass protecting it.

  Correct Answer: B

  https://www.terraform.io/docs/state/index.html State is very important topic for exam. Please read all of the below subtopics Purpose Import Existing Resources Locking Workspaces Remote State Sensitive Data

• Question 247:

  Which of the following challenges would Terraform be a candidate for solving? (Select THREE)

  A. Enable self-service infrastructure to allocate resources on your proprietary private cloud.

  B. Reduce the number of workflows needed for managing infrastructure across each of the companies public and private clouds.

  C. Utilize a single tool for all of the infrastructure and configuration management needs.

  D. Have a single interoperable tool to manage the variety of services including GitHub repositories, MySQL database, and Kubernetes clusters.

  Correct Answer: ABD

• Question 248:

  State locking does not happen automatically and must be specified at run

  A. False

  B. True

  Correct Answer: A

  State locking happens automatically on all operations that could write state. https://www.terraform.io/docs/state/locking.html

• Question 249:

  Which of the following state management command allow you to retrieve a list of resources that are part of the state file?

  A. terraform state list

  B. terraform state view

  C. terraform view

  D. terraform list

  Correct Answer: A

  The terraform state list command is used to list resources within a Terraform state. Usage: terraform state list [options] [address...] The command will list all resources in the state file matching the given addresses (if any). If no addresses are given, all resources are listed. https://www.terraform.io/docs/commands/state/list.html

• Question 250:

  Why is it a good idea to declare the required version of a provider in a Terraform configuration file?

  1.

  terraform

  2.

  {

  3.

  required_providers

  4.

  {

  5.

  aws = "~> 1.0"

  6.

  }

  7.

  }

  A. To remove older versions of the provider.

  B. To ensure that the provider version matches the version of Terraform you are using.

  C. Providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes.

  D. To match the version number of your application being deployed via Terraform.

  Correct Answer: C