HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 211:

  When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

  A. a private install
  B. disconnected
  C. air-gapped
  D. non-traditional
  D. non-traditional

  ---

  Explanation

  A Terraform Enterprise install that is provisioned on a network that does not have Internet access is generally known as an air-gapped install. These types of installs require you to pull updates, providers, etc. from external sources vs. being able to download them directly.

• Question 212:

  Which of these are features of HCP Terraform/Terraform Cloud? (Pick the 2 correct responses)

  A. Automatic backups of configuration and state.
  B. Remote state storage.
  C. Automated infrastructure deployment visualization.
  D. A web-based user interface (UI).
  B. Remote state storage.
  D. A web-based user interface (UI).

  ---

  Explanation

  Terraform Cloud provides features like remote state storage and a web- based user interface for managing your Terraform runs. While it offers robust infrastructure as code capabilities, automatic backups of configuration and state are not

  directly provided by Terraform Cloud; instead, the state is stored remotely and secured.

  References:

  Terraform Cloud Features

• Question 213:

  Your team lead does not trust the junior terraform engineers who now have access to the git repo . So , he wants you to have some sort of a checking layer , whereby , you can ensure that the juniors will not create any non-compliant resources that might lead to a security audit failure in future. What can you do to efficiently enforce this?

  A. Create a design /security document (in PDF) and share to the team , and ask them to always follow that document , and never deviate from it.
  B. Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and write Policy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.
  C. Use Terraform OSS Sentinel Lite version , which will save cost , since there is no charge for OSS , but it can still check for most non-compliant rules using Policy-As-Code.
  D. Create a git master branch , and implement PR . Every change needs to be reviewed by you , before being merged to the master branch.
  B. Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and write Policy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.

  ---

  Explanation

  Sentinel is an embedded policy-as-code framework integrated with the HashiCorp Enterprise products. It enables fine-grained, logic-based policy decisions, and can be extended to use information from external sources. https:// www.terraform.io/docs/cloud/sentinel/index.html

• Question 214:

  In Terraform 0.13 and above, outside of the required_providers block, Terraform configurations always refer to providers by their local names.

  A. True
  B. False
  A. True

  ---

  Explanation

  Outside of the required_providers block, Terraform configurations always refer to providers by their local names.

  https://www.terraform.io/docs/language/providers/requirements.html https://www.terraform.io/language/providers/requirements#local-names

• Question 215:

  What does terraform refresh modify?

  A. Your cloud infrastructure
  B. Your Terraform plan
  C. Your state file
  D. Your Terraform configuration
  C. Your state file

  ---

  Explanation

• Question 216:

  You are using a networking module in your Terraform configuration with the name label my_network. In your main configuration you have the following code:

  

  When you run terraform validate, you get the following error:

  

  What must you do to successfully retrieve this value from your networking module?

  A. Define the attribute vnet_id as a variable in the networking module
  B. Change the referenced value to module.my_network.outputs.vnet_id
  C. Define the attribute vnet_id as an output in the networking module
  D. Change the referenced value to my_network.outputs.vnet_id
  C. Define the attribute vnet_id as an output in the networking module

  ---

  Explanation

  In a parent module, outputs of child modules are available in expressions as module..

  . For example, if a child module named web_server declared an output named instance_ip_addr, you could access that value as module.web_server.instance_ip_addr.

• Question 217:

  Terraform Cloud is more powerful when you integrate it with your version control system (VCS) provider. Select all the supported VCS providers from the answers below. (select four)

  A. GitHub
  B. CVS Version Control
  C. Azure DevOps Server
  D. Bitbucket Cloud
  E. GitHub Enterprise
  A. GitHub
  C. Azure DevOps Server
  D. Bitbucket Cloud
  E. GitHub Enterprise

  ---

  Explanation

  Terraform Cloud supports the following VCS providers: -https://www.terraform.io/docs/cloud/vcs/github.html -https://www.terraform.io/docs/cloud/vcs/github.html -https://www.terraform.io/docs/cloud/vcs/github-enterprise.html -https://www.terraform.io/docs/cloud/vcs/gitlab-com.html -https://www.terraform.io/docs/cloud/vcs/gitlab-eece.html -https://www.terraform.io/docs/cloud/vcs/bitbucket-cloud.html -https://www.terraform.io/docs/cloud/vcs/bitbucket-server.html -https://www.terraform.io/docs/cloud/vcs/azure-devops-server.html -https://www.terraform.io/docs/cloud/vcs/azure-devops-services.html https://www.terraform.io/docs/cloud/vcs/index.html#supported-vcs-providers

• Question 218:

  Terraform provisioners that require authentication can use the ______ block.

  A. connection
  B. credentials
  C. secrets
  D. ssh
  A. connection

  ---

  Explanation

  https://www.terraform.io/language/resources/provisioners/connection "Most provisioners require access to the remote resource via SSH or WinRM and expect a nested connection block with details about how to connect." "Connection blocks don't take a block label and can be nested within either a resource or a provisioner."

• Question 219:

  Select all Operating Systems that Terraform is available for. (select five)

  A. Linux
  B. macOS
  C. Unix
  D. Solaris
  E. Windows
  F. FreeBSD
  A. Linux
  B. macOS
  D. Solaris
  E. Windows
  F. FreeBSD

  ---

  Explanation

  A,B,D,E,F Terraform is available for macOS, FreeBSD, OpenBSD, Linux, Solaris, Windows https://www.terraform.io/downloads.html

• Question 220:

  Which argument(s) is (are) required when declaring a Terraform variable?

  A. type
  B. default
  C. description
  D. All of the above
  E. None of the above
  B. default

  ---

  Explanation

  The variable declaration can also include a default argument.

  https://www.terraform.io/docs/language/values/variables.html