HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 1:

  Why might a user opt to include the following snippet in their configuration file?

  A. Terraform 0.12 introduced substantial changes to the syntax used to write Terraform configuration
  B. The user wants to ensure that the application being deployed is a minimum version of 0.12
  C. this ensures that all Terraform providers are above a certain version to match the application being deployed
  D. versions before Terraform 0.12 were not approved by HashiCorp to be used in production
  A. Terraform 0.12 introduced substantial changes to the syntax used to write Terraform configuration

  ---

  Explanation

• Question 2:

  What value does the Terraform Cloud private registry provide over the public Terraform Module Registry?

  A. The ability to share modules publicly with any user of Terraform
  B. The ability to restrict modules to members of Terraform Cloud or Enterprise organizations
  C. The ability to tag modules by version or release
  D. The ability to share modules with public Terraform users and members of Terraform Cloud Organizations
  B. The ability to restrict modules to members of Terraform Cloud or Enterprise organizations

  ---

  Explanation

  The Terraform Cloud private registry provides the ability to restrict modules to members of Terraform Cloud or Enterprise organizations. This allows you to share modules within your organization without exposing them to the public. The private registry also supports importing modules from your private VCS repositories. The public Terraform Module Registry, on the other hand, publishes modules from public Git repositories and makes them available to any user of Terraform.

  References: : Private Registry - Terraform Cloud : Terraform Registry - Provider Documentation

• Question 3:

  How would you reference the attribute "name* of this fictitious resource in HCL?

  

  A. resource.kubrnetes_namespace>example.name
  B. kubernetes_namespace.test.name
  C. kubernetes_namespace.example,name
  D. data kubernetes_namespace.name
  E. None of the above
  C. kubernetes_namespace.example,name

  ---

  Explanation

  https://www.terraform.io/language/expressions/references#references-to-resource-attributes

• Question 4:

  Which of these actions will prevent two Terraform runs from changing the same state file at the same time?

  A. Refresh the state after running Terraform
  B. Delete the state before running Terraform
  C. Configure state locking for your state backend
  D. Run Terraform with parallelism set to 1
  B. Delete the state before running Terraform

  ---

  Explanation

  To prevent two Terraform runs from changing the same state file simultaneously, state locking is used. State locking ensures that when one Terraform operation is running, others will be blocked from making changes to the same state, thus preventing conflicts and data corruption. This is achieved by configuring the state backend to support locking, which will lock the state for all operations that could write to the state.

  References: This information is supported by Terraform's official documentation, which explains the importance of state locking and how it can be configured for different backends to prevent concurrent state modifications .

• Question 5:

  What are some benefits of using Sentinel with Terraform Cloud/Terraform Cloud? Choose three correct answers.

  A. You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.
  B. You can check out and check in cloud access keys
  C. Sentinel Policies can be written in HashiCorp Configuration Language (HCL)
  D. Policy-as-code can enforce security best practices
  E. You can enforce a list of approved AWS AMIs
  A. You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.
  D. Policy-as-code can enforce security best practices
  E. You can enforce a list of approved AWS AMIs

  ---

  Explanation

  Sentinel is a policy-as-code framework that allows you to define and enforce rules on your Terraform configurations, states, and plans. Some of the benefits of using Sentinel with Terraform Cloud/Terraform Enterprise are:

  You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0, which would open up your network to the entire internet. This can help you prevent misconfigurations or security vulnerabilities in your

  infrastructure.

  Policy-as-code can enforce security best practices, such as requiring encryption, authentication, or compliance standards. This can help you protect your data and meet regulatory requirements. You can enforce a list of approved AWS AMIs,

  which are pre-configured images that contain the operating system and software you need to run your applications. This can help you ensure consistency, reliability, and performance across your infrastructure.

  References:

  Terraform and Sentinel | Sentinel | HashiCorp Developer

  Terraform Learning Resources: Getting Started with Sentinel in Terraform Cloud

  Exploring the Power of HashiCorp Terraform, Sentinel, Terraform Cloud ...

  Using New Sentinel Features in Terraform Cloud ?Medium

• Question 6:

  You cannot install third party plugins using terraform init.

  A. True
  B. False
  B. False

  ---

  Explanation

  https://www.terraform.io/cli/commands/init For providers that are published in either the public Terraform Registry or in a third-party provider registry, terraform init will automatically find, download, and install the necessary provider plugins.

• Question 7:

  Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?

  A. Defined in Environment variables
  B. Inside the backend block within the Terraform configuration
  C. Defined in a connection configuration outside of Terraform
  D. None of above
  A. Defined in Environment variables

  ---

  Explanation

  https://www.terraform.io/language/settings/backends/configuration#credentials-and-sensitive-data Warning: We recommend using environment variables to supply credentials and other sensitive data. If you use-backend-config or hardcode these values directly in your configuration, Terraform will include these values in both the .terraform subdirectory and in plan files. This can leak sensitive credentials.

• Question 8:

  Your manager has instructed you to start using terraform for your day-to-day operations, but your security team is concerned about the terraform state files. They have heard it contains confidential information, and are worried that it will not be securely protected. What should be your response to the security team in this regard?

  A. Inform the security team that using terraform state is optional . There are ways to avoid it , and you will do the same.
  B. Ensure that the state is managed in a remote backend , preferably an enterprise grade state management system like Terraform Cloud.
  C. Mask the confidential entries in the terraform state file , using Vault Enterprise, another Hashicorp product , while keeping it locally.
  D. Keep the state file locally on each developer machine , and ensure that there is a local protection software like KeyPass protecting it.
  B. Ensure that the state is managed in a remote backend , preferably an enterprise grade state management system like Terraform Cloud.

  ---

  Explanation

  https://www.terraform.io/docs/state/index.html State is very important topic for exam. Please read all of the below subtopics Purpose Import Existing Resources Locking Workspaces Remote State Sensitive Data

• Question 9:

  A Terraform provisioner must be nested inside a resource configuration block.

  A. True
  B. False
  A. True

  ---

  Explanation

  Most provisioners require access to the remote resource via SSH or WinRM, and expect a nested connection block with details about how to connect.

  https://www.terraform.io/docs/language/resources/provisioners/connection.html

• Question 10:

  Which of these ate features of Terraform Cloud? Choose two correct answers.

  A. Automated infrastructure deployment visualization
  B. Automatic backups
  C. A web-based user interface (Ul)
  D. Remote state storage
  C. A web-based user interface (Ul)
  D. Remote state storage

  ---

  Explanation

  These are features of Terraform Cloud, which is a hosted service that provides a web- based UI, remote state storage, remote operations, collaboration features, and more for managing your Terraform infrastructure.