HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 441:

  What is the workflow for deploying new infrastructure with Terraform?

  A. terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure

  B. Write a Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure.

  C. terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure

  D. Write a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure changes, and terraform apply to create new infrastructure.

  Correct Answer: D

  Reference: https://www.google.com/search?q=Write+a+Terraform+configuration%2C+run+terraform+init%2C+run+terraform+plan+to+view+planned+infrastructure+changes%2C+and+terraform+apply+to+create+new+infrastructure.andoq=Write+a +Terraform+configuration%2C+run+terraform+init%2C+run+terraform+plan+to+view+planned+infrastructure+changes%2C+and+terraform+apply+to+create+new+infrastructure.andaqs=chrome..69i57.556j0j7andsourceid=chromeandie=UTF-8

• Question 442:

  Which argument(s) is (are) required when declaring a Terraform variable?

  A. type

  B. default

  C. description

  D. All of the above

  E. None of the above

  Correct Answer: B

  The variable declaration can also include a default argument. Reference: https://www.terraform.io/docs/language/values/variables.html

• Question 443:

  Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?

  A. Defined in Environment variables

  B. Inside the backend block within the Terraform configuration

  C. Defined in a connection configuration outside of Terraform

  D. None of above

  Correct Answer: A

  https://www.terraform.io/language/settings/backends/configuration#credentials-and-sensitive-data Warning: We recommend using environment variables to supply credentials and other sensitive data. If you use-backend-config or hardcode these values directly in your configuration, Terraform will include these values in both the .terraform subdirectory and in plan files. This can leak sensitive credentials.

• Question 444:

  You have declared a variable called var.list which is a list of objects that all have an attribute id. Which options will produce a list of the IDs? (Choose two.)

  A. { for o in var.list : o => o.id }

  B. var.list[*].id

  C. [ var.list[*].id ]

  D. [ for o in var.list : o.id ]

  Correct Answer: BD

  https://www.terraform.io/language/expressions/splat A splat expression provides a more concise way to express a common operation that could otherwise be performed with a for expression.

• Question 445:

  What is the name assigned by Terraform to reference this resource?

  

  A. dev

  B. azurerm_resource_group

  C. azurerm

  D. test

  Correct Answer: A

• Question 446:

  You have declared an input variable called environment in your parent module. What must you do to pass the value to a child module in the configuration?

  A. Add node_count = var.node_count

  B. Declare the variable in a terraform.tfvars file

  C. Declare a node_count input variable for child module

  D. Nothing, child modules inherit variables of parent module

  Correct Answer: C

  "That module may call other modules and connect them together by passing output values from one to input values of another." https://www.terraform.io/language/modules/develop

• Question 447:

  What does the default "local" Terraform backend store?

  A. tfplan files

  B. Terraform binary

  C. Provider plugins

  D. State file

  Correct Answer: D

  The local backend stores state on the local filesystem, locks that state using system APIs, and performs operations locally. Reference: https://www.terraform.io/docs/language/settings/backends/local.html

• Question 448:

  If a module declares a variable with a default, that variable must also be defined within the module.

  A. True

  B. False

  Correct Answer: B

• Question 449:

  Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files?

  A. Delete the state file every time you run Terraform

  B. Store the state in an encrypted backend

  C. Edit your state file to scrub out the sensitive data

  D. Always store your secrets in a secrets.tfvars file.

  Correct Answer: B