HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 221:

  A data block requests that Terraform read from a given data source and export the result under the given local name.

  A. False
  B. True
  B. True

  ---

  Explanation

• Question 222:

  How would you reference the Volume IDs associated with the ebs_block_device blocks in this configuration?

  

  A. aws_instance.example.ebs_block_device.[*].volume_id
  B. aws_instance.example.ebs_block_device.volume_id
  C. aws_instance.example.ebs_block_device[sda2,sda3].volume_id
  D. aws_instance.example.ebs_block_device.*.volume_id
  D. aws_instance.example.ebs_block_device.*.volume_id

  ---

  Explanation

  This is the correct way to reference the volume IDs associated with the ebs_block_device blocks in this configuration, using the splat expression syntax. The other options are either invalid or incomplete. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.html

• Question 223:

  Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

  A. terraform fmt
  B. terraform destroy
  C. terraform taint
  D. terraform refresh
  C. terraform taint

  ---

  Explanation

  The terraform taint command manually marks a Terraform-managed resource as tainted, forcing it to be destroyed and recreated on the next apply. This command will not modify infrastructure, but does modify the state file in order to mark a resource as tainted. Once a resource is marked as tainted, the next plan will show that the resource will be destroyed and recreated and the next apply will implement this change. Forcing the recreation of a resource is useful when you want a certain side effect of recreation that is not visible in the attributes of a resource. For example: re-running provisioners will cause the node to be different or rebooting the machine from a base image will cause new startup scripts to run. Note that tainting a resource for recreation may affect resources that depend on the newly tainted resource. For example, a DNS resource that uses the IP address of a server may need to be modified to reflect the potentially new IP address of a tainted server. The plan command will show this if this is the case. https://www.terraform.io/docs/commands/taint.html

• Question 224:

  Which are examples of infrastructure as code? (Choose two.)

  A. Cloned virtual machine images
  B. Change management database records
  C. Versioned configuration files
  D. Docker files
  C. Versioned configuration files
  D. Docker files

  ---

  Explanation

  These are examples of infrastructure as code (IaC), which is a practice of managing and provisioning infrastructure through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.

• Question 225:

  Your organization has moved to AWS and has manually deployed infrastructure using the console. Recently, a decision has been made to standardize on Terraform for all deployments moving forward.

  What can you do to ensure that all existing is managed by Terraform moving forward without interruption to existing services?

  A. Submit a ticket to AWS and ask them to export the state of all existing resources and use terraform import to import them into the state file.
  B. Delete the existing resources and recreate them using new a Terraform configuration so Terraform can manage them moving forward.
  C. Resources that are manually deployed in the AWS console cannot be imported by Terraform.
  D. Using terraform import, import the existing infrastructure into your Terraform state.
  D. Using terraform import, import the existing infrastructure into your Terraform state.

  ---

  Explanation

  Terraform is able to import existing infrastructure. This allows us take resources we've created by some other means (i.e. via console) and bring it under Terraform management. This is a great way to slowly transition infrastructure to

  Terraform. The terraform import command is used to import existing infrastructure. To import a resource, first write a resource block for it in our configuration, establishing the name by which it will be known to Terraform.

  Example:

  resource "aws_instance" "import_example" {

  # ...instance configuration...

  }

  Now terraform import can be run to attach an existing instance to this resource configuration.

  $ terraform import aws_instance.import_example i-03efafa258104165f aws_instance.import_example: Importing from ID "i-03efafa258104165f"...

  aws_instance.import_example: Import complete!

  Imported aws_instance (ID: i-03efafa258104165f)

  aws_instance.import_example: Refreshing state... (ID: i-03efafa258104165f) Import successful!

  The resources that were imported are shown above. These resources are now in your Terraform state and will henceforth be managed by Terraform. This command locates the AWS instance with ID i-03efafa258104165f (which has been

  created outside Terraform) and attaches its existing settings, as described by the EC2 API, to the name aws_instance.import_example in the Terraform state.

• Question 226:

  You would like to reuse the same Terraform configuration for your development and production environments with a different state file for each. Which command would you use?

  A. terraform import
  B. terraform workspace
  C. terraform state
  D. terraform init
  B. terraform workspace

  ---

  Explanation

  https://www.terraform.io/language/state/workspaces#when-to-use-multiple-workspaces

• Question 227:

  Your risk management organization requires that new AWS S3 buckets must be private and encrypted at rest. How can Terraform Enterprise automatically and proactively enforce this security control?

  A. With a Sentinel policy, which runs before every apply
  B. By adding variables to each TFE workspace to ensure these settings are always enabled
  C. With an S3 module with proper settings for buckets
  D. Auditing cloud storage buckets with a vulnerability scanning tool
  A. With a Sentinel policy, which runs before every apply

  ---

  Explanation

  The best way to automatically and proactively enforce the security control that new AWS S3 buckets must be private and encrypted at rest is with a Sentinel policy, which runs before every apply. Sentinel is a policy as code framework that allows you to define and enforce logic-based policies for your infrastructure. Terraform Cloud supports Sentinel policies for all paid tiers, and can run them before any terraform plan or terraform apply operation. You can write a Sentinel policy that checks the configuration of the S3 buckets and ensures that they have the proper settings for privacy and encryption, and then assign the policy to your Terraform Cloud organization or workspace. This way, Terraform Cloud will prevent any changes that violate the policy from being applied.

  References: [Sentinel Policy Framework], [Manage Policies in Terraform Cloud], [Write and Test Sentinel Policies for Terraform] https://docs.hashicorp.com/sentinel/intro/what https://medium.com/hashicorp-engineering/enforcing-aws-s3-security-best-practice-using-terraform-sentinel-ddcd181ff4b7

• Question 228:

  Which of the following best describes a Terraform provider?

  A. A plugin that Terraform uses to translate the API interactions with the service or provider.
  B. Serves as a parameter for a Terraform module that allows a module to be customized.
  C. Describes an infrastructure object, such as a virtual network, compute instance, or other components.
  D. A container for multiple resources that are used together.
  A. A plugin that Terraform uses to translate the API interactions with the service or provider.

  ---

  Explanation

  A provider is responsible for understanding API interactions and exposing resources. Providers generally are an IaaS (e.g. Alibaba Cloud, AWS, GCP, Microsoft Azure, OpenStack), PaaS (e.g. Heroku), or SaaS services (e.g. Terraform Cloud, DNSimple, Cloudflare). https://www.terraform.io/docs/providers/index.html

• Question 229:

  Terraform is currently being used by your organisation to create resources on AWS for the development of a web application. One of your coworkers wants to change the instance type to "t2.large" while keeping the default set values. What adjustments does the teammate make in order to meet his goal?

  A. Issue Terraform plan instance.type".t2.large" and it deploys the instance
  B. Modify the tf.variableswith the instance type and issue terraform apply
  C. Create a new file my.tfvars and add the type of the instance and issue terraform plan and apply
  D. Modify the terraform.tfvars with the instance type and issue terraform plan and then terraform apply to deploy the instances
  D. Modify the terraform.tfvars with the instance type and issue terraform plan and then terraform apply to deploy the instances

  ---

  Explanation

• Question 230:

  Your developers are facing a lot of problem while writing complex expressions involving difficult interpolations . They have to run the terraform plan every time and check whether there are errors , and also check terraform apply to print the value as a temporary output for debugging purposes. What should be done to avoid this?

  A. Use terraform console command to have an interactive UI with full access to the underlying terraform state to run your interpolations , and debug at real-time.
  B. Add a breakpoint in your code, using the watch keyword , and output the value to console for temporary debugging.
  C. Use terraform zipmap function , it will be able to easily do the interpolations without complex code.
  D. Use terraform console command to have an interactive UI , but you can only use it with local state , and it does not work with remote state.
  A. Use terraform console command to have an interactive UI with full access to the underlying terraform state to run your interpolations , and debug at real-time.

  ---

  Explanation

  The terraform console command provides an interactive console for evaluating expressions. This is useful for testing interpolations before using them in configurations, and for interacting with any values currently saved in state. https:// www.terraform.io/docs/commands/console.html