HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 201:

  What is terraform refresh-only intended to detect?

  A. Terraform configuration code changes
  B. Corrupt state files
  C. State file drift
  D. Empty state files
  C. State file drift

  ---

  Explanation

  The terraform refresh-only command is intended to detect state file drift. This command synchronizes the state file with the actual infrastructure, updating the state to reflect any changes that have occurred outside of Terraform.

• Question 202:

  Which of the following methods, used to provision resources into a public cloud, demonstrates the concept of infrastructure as code?

  A. curl commands manually run from a terminal
  B. A sequence of REST requests you pass to a public cloud API endpoint References:
  C. A script that contains a series of public cloud CLI commands
  D. A series of commands you enter into a public cloud console
  C. A script that contains a series of public cloud CLI commands

  ---

  Explanation

  The concept of infrastructure as code (IaC) is to define and manage infrastructure using code, rather than manual processes or GUI tools. A script that contains a series of public cloud CLI commands is an example of IaC, because it uses code to provision resources into a public cloud. The other options are not examples of IaC, because they involve manual or interactive actions, such as running curl commands, sending REST requests, or entering commands into a console.

  References: [Introduction to Infrastructure as Code with Terraform] and [Infrastructure as Code]

• Question 203:

  True or False? terraform init cannot automatically download Community providers.

  A. False
  B. True
  B. True

  ---

  Explanation

• Question 204:

  Your root module contains a variable named num_servers. Which is the correct way to pass its value to a child module with an input named servers?

  A. servers = num_servers
  B. servers = var(num_servers)
  C. servers = var.num_servers
  D. servers = ${var.num_servers}
  C. servers = var.num_servers

  ---

  Explanation

  The correct syntax to pass a variable from the root module to a child module is servers = var.num_servers. Terraform uses dot notation to reference variables.

  References:

  Terraform Variables

• Question 205:

  Which of the following module source paths does not specify a remote module?

  A. Source = "module/consul''
  B. Source = `'githhub.comicrop/example''
  C. Source =''[email protected]:hasicrop/example.git''
  D. Source = `'hasicrop/consul/aws''
  A. Source = "module/consul''

  ---

  Explanation

  The module source path that does not specify a remote module is source = "module/consul". This specifies a local module, which is a module that is stored in a subdirectory of the current working directory. The other options are all examples of remote modules, which are modules that are stored outside of the current working directory and can be accessed by various protocols, such as Git, HTTP, or the Terraform Registry. Remote modules are useful for sharing and reusing code across different configurations and environments.

  References: [Module Sources], [Local Paths], [Terraform Registry], [Generic Git Repository], [GitHub]

• Question 206:

  terraform refresh command will not modify infrastructure, but does modify the state file.

  A. True
  B. False
  A. True

  ---

  Explanation

  The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. This can be used to detect any drift from the last-known state, and to update the state file. This does not modify infrastructure, but does modify the state file. https://www.terraform.io/docs/commands/refresh.html

• Question 207:

  What kind of resource dependency is stored in terraform.tfstate file?

  A. Both implicit and explicit dependencies are stored in state file.
  B. Only explicit dependencies are stored in state file.
  C. Only implicit dependencies are stored in state file.
  D. No dependency information is stored in state file.
  A. Both implicit and explicit dependencies are stored in state file.

  ---

  Explanation

  Terraform state captures all dependency information, both implicit and explicit. One purpose for state is to determine the proper order to destroy resources. When resources are created all of their dependency information is stored in the state. If you destroy a resource with dependencies, Terraform can still determine the correct destroy order for all other resources because the dependencies are stored in the state.

  https://www.terraform.io/docs/state/purpose.html#metadata

• Question 208:

  Which option can not be used to keep secrets out of Terraform configuration files?

  A. A Terraform provider
  B. Environment variables
  C. A-var flag
  D. secure string
  D. secure string

  ---

  Explanation

  A secure string is not a valid option to keep secrets out of Terraform configuration files. A secure string is a feature of AWS Systems Manager Parameter Store that allows you to store sensitive data encrypted with a KMS key. However,

  Terraform does not support secure strings natively and requires a custom data source to retrieve them. The other options are valid ways to keep secrets out of Terraform configuration files. A Terraform provider can expose secrets as data

  sources that can be referenced in the configuration. Environment variables can be used to set values for input variables that contain secrets. A -var flag can be used to pass values for input variables that contain secrets from the command

  line or a file.

  References: [AWS Systems Manager Parameter Store], [Terraform AWS Provider Issue #55], [Terraform Providers], [Terraform Input Variables]

  https://secrethub.io/blog/secret-management-for-terraform/

• Question 209:

  Which of the below are paid features of Terraform Cloud?

  A. Full API Coverage
  B. Secure variable Storage
  C. Roles/ Team management
  D. Cost Estimation
  E. Private Module Registry
  F. Sentinel policies
  C. Roles/ Team management
  D. Cost Estimation
  F. Sentinel policies

  ---

  Explanation

  https://www.hashicorp.com/products/terraform/pricing/

• Question 210:

  Once you configure a new Terraform backend with a terraform code block, which command(s) should you use to migrate the state file?

  A. terraform destroy, then terraform apply
  B. terraform init
  C. terraform push
  D. terraform apply
  A. terraform destroy, then terraform apply

  ---

  Explanation

  This command will initialize the new backend and prompt you to migrate the existing state file to the new location4. The other commands are not relevant for this task.