HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 301:

  You want terraform plan and apply to be executed in Terraform Cloud's run environment but the output is to be streamed locally. Which one of the below you will choose?

  A. Local Backends
  B. This can be done using any of the local or remote backends
  C. Remote Backends
  D. Terraform Backends
  C. Remote Backends

  ---

  Explanation

  The remote backend stores Terraform state and may be used to run operations in Terraform Cloud.

  When using full remote operations, operations like terraform plan or terraform apply can be executed in Terraform Cloud's run environment, with log output streaming to the local terminal.

  Remote plans and applies use variable values from the associated Terraform Cloud workspace.

  https://www.terraform.io/docs/backends/types/remote.html

• Question 302:

  When writing Terraform code, HashiCorp recommends that you use how many spaces between each nesting level?

  B. 1
  C. 2
  D. 4
  C. 2

  ---

  Explanation

  The Terraform parser allows you some flexibility in how you lay out the elements in your configuration files, but the Terraform language also has some idiomatic style conventions which we recommend users always follow for consistency

  between files and modules written by different teams. Automatic source code formatting tools may apply these conventions automatically.

  Indent two spaces for each nesting level.

  When multiple arguments with single-line values appear on consecutive lines at the same nesting level, align their equals signs:

  ami = "abc123"

  instance_type = "t2.micro"

  When both arguments and blocks appear together inside a block body, place all of the arguments together at the top and then place nested blocks below them. Use one blank line to separate the arguments from the blocks. Use empty lines to

  separate logical groups of arguments within a block. For blocks that contain both arguments and "meta-arguments" (as defined by the Terraform language semantics), list meta-arguments first and separate them from other arguments with

  one blank line. Place meta-argument blocks last and separate them from other blocks with one blank line.

  resource "aws_instance" "example" {

  count = 2 # meta-argument first

  ami = "abc123"

  instance_type = "t2.micro"

  network_interface {

  # ...

  }

  lifecycle { # meta-argument block last

  create_before_destroy = true

  }

  }

  Top-level blocks should always be separated from one another by one blank line. Nested blocks should also be separated by blank lines, except when grouping together related blocks of the same type (like multiple provisioner blocks in a

  resource). Avoid separating multiple blocks of the same type with other blocks of a different type, unless the block types are defined by semantics to form a family. (For example:

  root_block_device, ebs_block_device and ephemeral_block_device on aws_instance form a family of block types describing AWS block devices, and can therefore be grouped together and mixed.)

• Question 303:

  Which are forbidden actions when the Terraform state file is locked? (Choose three.)

  A. terraform destroy
  B. terraform fmt
  C. terraform state list
  D. terraform apply
  E. terraform plan
  F. terraform validate
  A. terraform destroy
  D. terraform apply
  F. terraform validate

  ---

  Explanation

  The terraform state file is locked when a Terraform operation that could write state is in progress. This prevents concurrent state operations that could corrupt the state. The forbidden actions when the state file is locked are those that could

  write state, such as terraform apply, terraform destroy, terraform refresh, terraform taint, terraform untaint, terraform import, and terraform state *. The terraform validate command is also forbidden, because it requires an initialized working

  directory with the state file. The allowed actions when the state file is locked are those that only read state, such as terraform plan, terraform show, terraform output, and terraform console.

  References: [State Locking] and [Command: validate]

• Question 304:

  What command should you run to display all workspaces for the current configuration?

  A. terraform workspace
  B. terraform workspace show
  C. terraform workspace list
  D. terraform show workspace
  C. terraform workspace list

  ---

  Explanation

  terraform workspace list The command will list all existing workspaces.

  https://www.terraform.io/docs/cli/commands/workspace/list.html

• Question 305:

  A provider configuration block is required in every Terraform configuration. Example:

  

  A. True
  B. False
  B. False

  ---

  Explanation

  A provider configuration block is not required in every Terraform configuration. A provider configuration block can be omitted if its contents would otherwise be empty. Terraform assumes an empty default configuration for any provider that is not explicitly configured. However, some providers may require some configuration arguments (such as endpoint URLs or cloud regions) before they can be used. A provider's documentation should list which configuration arguments it expects. For providers distributed on the Terraform Registry, versioned documentation is available on each provider's page, via the "Documentation" link in the provider's header. https://www.terraform.io/language/providers/configuration

• Question 306:

  While attempting to deploy resources into your cloud provider using Terraform. you begin to see some odd behavior and experience sluggish responses. In order to troubleshoot you decide to turn on Terraform debugging.

  Which environment variables must be configured to make Terraform's logging more verbose?

  A. TF_10G_PATM
  B. TF_LOG
  C. TF_10G_LEVEL
  D. TF.LOG.FUE
  B. TF_LOG

  ---

  Explanation

  To make Terraform's logging more verbose for troubleshooting purposes, you must configure the TF_LOG environment variable. This variable controls the level of logging and can be set to TRACE, DEBUG, INFO, WARN, or ERROR, with TRACE providing the most verbose output.

  References: Detailed debugging instructions and the use of environment variables like TF_LOG for increasing verbosity are part of Terraform's standard debugging practices https://www.terraform.io/internals/debugging

• Question 307:

  What does Terraform use the .terraform.lock.hc1 file for?

  A. Tracking specific provider dependencies
  B. There is no such file
  C. Preventing Terraform runs from occurring
  D. Storing references to workspaces which are locked
  A. Tracking specific provider dependencies

  ---

  Explanation

  https://www.terraform.io/language/files/dependency-lock "hcl , and this name is intended to signify that it is a lock file for various items that Terraform caches in the . terraform subdirectory of your working directory. Terraform automatically creates or updates the dependency lock file each time you run the terraform init command."

• Question 308:

  Open source Terraform can only import publicly-accessible and open-source modules.

  A. True
  B. False
  B. False

  ---

  Explanation

  Terraform can load modules from a public or private registry. This makes it possible to publish modules for others to use, and to use modules that others have published. Also, members of your organization might produce modules specifically crafted for your own infrastructure needs. Terraform Cloud and Terraform Enterprise both include a private module registry for sharing modules internally within your organization. Source: https://www.terraform.io/language/modules

• Question 309:

  Given the Terraform configuration below, in which order will the resources be created?

  A. Larger image
  B. resources will be created simultaneously
  C. aws_eip will be created first aws_instance will be created second
  D. aws_instance will be created first aws_eip will be created second
  D. aws_instance will be created first aws_eip will be created second

  ---

  Explanation

  The aws_instance will be created first, and then aws_eip will be created second due to the aws_eip's resource dependency of the aws_instance id

• Question 310:

  You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (files). You need to enable debug messages to find this out.

  Which of the following would achieve this?

  A. Set the environment variable TF_LOG=TRACE
  B. Set verbose logging for each provider in your Terraform configuration
  C. Set the environment variable TF_VAR_log=TRACE
  D. Set the environment variable TF_LOG_PATH
  A. Set the environment variable TF_LOG=TRACE

  ---

  Explanation

  Although this will only output to stderr and if you need to review log file you will need to include TF_LOG_PATH=pathtofile https://www.terraform.io/internals/debugging