HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 241:

  You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need to rerun the script. Which of the following commands would you use first?

  A. terraform taint null_resource.run_script
  B. terraform apply-target=null_resource.run_script
  C. terraform validate null_resource.run_script
  D. terraform plan-target=null_resource.run_script
  A. terraform taint null_resource.run_script

  ---

  Explanation

  https://www.terraform.io/cli/commands/taint

• Question 242:

  Which Terraform command checks that your configuration syntax is correct?

  A. terraform validate
  B. terraform init
  C. terraform show
  D. terraform fmt
  A. terraform validate

  ---

  Explanation

  The terraform validate command is used to check that your Terraform configuration files are syntactically valid and internally consistent. It is a useful command for ensuring your Terraform code is error-free before applying any changes to your infrastructure.

• Question 243:

  Which method for sharing Terraform modules fulfills the following criteria:

  Keeps the module configurations confidential within your organization. Supports Terraform's semantic version constraints.

  Provides a browsable directory of your modules.

  A. A Git repository containing your modules.
  B. Public Terraform module registry.
  C. A subfolder within your workspace.
  D. HCP Terraform/Terraform Cloud private registry.
  D. HCP Terraform/Terraform Cloud private registry.

  ---

  Explanation

  Confidentiality: Using HCP Terraform/Terraform Cloud's private registry keeps the module configurations within your organization, ensuring privacy and access control. Version Constraints: The private registry supports semantic versioning,

  allowing you to manage versions of your modules as Terraform does natively. Browsable Directory: The private registry offers a user interface to browse modules, making it easy for users within the organization to locate and manage

  modules.

  This setup aligns with HashiCorp's design for private registry support in Terraform, meeting all listed requirements for secure, version-controlled, and searchable module storage.

• Question 244:

  How can terraform plan aid in the development process?

  A. Validates your expectations against the execution plan without permanently modifying state
  B. Initializes your working directory containing your Terraform configuration files
  C. Formats your Terraform configuration files
  D. Reconciles Terraform's state against deployed resources and permanently modifies state using the current status of deployed resources
  A. Validates your expectations against the execution plan without permanently modifying state

  ---

  Explanation

  "The terraform plan command creates an execution plan, which lets you preview the changes that Terraform plans to make to your infrastructure. By default, when Terraform creates a plan it:

  Reads the current state of any already-existing remote objects to make sure that the Terraform state is up-to-date.

  Compares the current configuration to the prior state and noting any differences. Proposes a set of change actions that should, if applied, make the remote objects match the configuration."

  "The plan command alone will not actually carry out the proposed changes, and so you can use this command to check whether the proposed changes match what you expected before you apply the changes or share your changes with your

  team for broader review.

  If Terraform detects that no changes are needed to resource instances or to root module output values, terraform plan will report that no actions need to be taken."

  https://www.terraform.io/cli/commands/plan

• Question 245:

  Resources in terraform can have same identifiers(Resource type + Block name).

  A. True
  B. False
  B. False

  ---

  Explanation

• Question 246:

  When you use a remote backend that needs authentication. HashrCorp recommends that you:

  A. Push your Tefraform configuration to an encrypted git repository
  B. Write the authentication credentials in the Terraform configuration files
  C. Use partial configuration to load the authentication credentials outside of the Terraform code
  D. Keep the Terraform configuration files in a secret store
  C. Use partial configuration to load the authentication credentials outside of the Terraform code

  ---

  Explanation

  We recommend omitting the token from the configuration, and instead using terraform login or manually configuring credentials in the CLI config file.

  This is the recommended way to use a remote backend that needs authentication, as it allows you to provide the credentials via environment variables, command-line arguments, or interactive prompts, without storing them in the Terraform

  configuration files.

  https://www.terraform.io/language/settings/backends/remote

• Question 247:

  Which of the following is considered a Terraform plugin?

  A. Terraform language
  B. Terraform tooling
  C. Terraform logic
  D. Terraform provider
  D. Terraform provider

  ---

  Explanation

  Terraform is built on a plugin-based architecture. All providers and provisioners that are used in Terraform configurations are plugins, even the core types such as AWS and Heroku. Users of Terraform are able to write new plugins in order to support new functionality in Terraform. https://www.terraform.io/docs/plugins/basics.html

• Question 248:

  You need to write some Terraform code that adds 42 firewall rules to a security group as shown in the example.

  

  What can you use to avoid writing 42 different nested ingress config blocks by hand?

  A. A count loop
  B. A for block
  C. A for each block
  D. A dynamic block
  D. A dynamic block

  ---

  Explanation

  A dynamic block acts much like a for expression, but produces nested blocks instead of a complex typed value. It iterates over a given complex value, and generates a nested block for each element of that complex value.

  https://www.terraform.io/language/expressions/dynamic-blocks

• Question 249:

  Your manager has instructed you to start using terraform for the entire infra provisioning of the application stack. There are 4 environments ?DEV , QA , UAT , and PROD. The application team has asked for complete segregation between these environments including the backend , state , and also configurations ,since there will be unique resources in different environments . What is the possible way to structure the terraform code to facilitate that.

  A. Completely separate the working directories , keep one for each environment . For each working directory , maintain a separate configuration file , variables file , and map to a different backend.
  B. Completely separate the working directories , keep one for each environment . For each working directory , maintain a separate configuration file , variables file , and map to the same backend.
  C. Implement terraform workspaces , and map each environment with one workspace.
  D. Enable remote backend storage . Configure 4 different backend storages , one for each environment.
  A. Completely separate the working directories , keep one for each environment . For each working directory , maintain a separate configuration file , variables file , and map to a different backend.

  ---

  Explanation

  In particular, organizations commonly want to create a strong separation between multiple deployments of the same infrastructure serving different development stages (e.g. staging vs. production) or different internal teams. In this case, the backend used for each deployment often belongs to that deployment, with different credentials and access controls. Named workspaces are not a suitable isolation mechanism for this scenario. https://www.terraform.io/docs/state/ workspaces.html

• Question 250:

  Terraform init can indeed be run only a few times, because, every time terraform init will initialize the project , and download all plugins from the internet repository , regardless of whether they were present or not , and this increases the waiting time

  A. True
  B. False
  B. False

  ---

  Explanation

  Re-running init with modules already installed will install the sources for any modules that were added to configuration since the last init, but will not change any already-installed modules. Use-upgrade to override this behavior, updating all modules to the latest available source code. https://www.terraform.io/docs/commands/init.html