HashiCorp TERRAFORM-ASSOCIATE-003 Online Practice Questions and Exam Preparation

HashiCorp TERRAFORM-ASSOCIATE-003 Online Questions & Answers

• Question 341:

  Which of the following challenges would Terraform be a candidate for solving? (Select THREE)

  A. Enable self-service infrastructure to allocate resources on your proprietary private cloud.
  B. Reduce the number of workflows needed for managing infrastructure across each of the companies public and private clouds.
  C. Utilize a single tool for all of the infrastructure and configuration management needs.
  D. Have a single interoperable tool to manage the variety of services including GitHub repositories, MySQL database, and Kubernetes clusters.
  A. Enable self-service infrastructure to allocate resources on your proprietary private cloud.
  B. Reduce the number of workflows needed for managing infrastructure across each of the companies public and private clouds.
  D. Have a single interoperable tool to manage the variety of services including GitHub repositories, MySQL database, and Kubernetes clusters.

  ---

  Explanation

• Question 342:

  True or False? By default, Terraform destroy will prompt for confirmation before proceeding.

  A. False
  B. True
  B. True

  ---

  Explanation

• Question 343:

  If a module uses a local variable, you can expose that value with a terraform output.

  A. True
  B. False
  A. True

  ---

  Explanation

  Output values are like function return values.

  https://www.terraform.io/docs/language/values/locals.html https://www.terraform.io/docs/language/values/outputs.html

• Question 344:

  You must use different Terraform commands depending on the cloud provider you use.

  A. True
  B. False
  B. False

  ---

  Explanation

  You do not need to use different Terraform commands depending on the cloud provider you use. Terraform commands are consistent across different providers, as they operate on the Terraform configuration files and state files, not on the provider APIs directly.

• Question 345:

  You want to use API tokens and other secrets within your team's Terraform workspaces. Where does HashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

  A. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.
  B. In HashiCorp Vault.
  C. In a terraform.tfvars file, securely managed and shared with your team.
  D. In a terraform.tfvars file, checked into your version control system.
  E. In a plaintext document on a shared drive.
  A. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.
  B. In HashiCorp Vault.
  C. In a terraform.tfvars file, securely managed and shared with your team.

  ---

  Explanation

  Sensitive values such as API tokens should be stored in a secure way, either in Terraform Cloud variables marked as sensitive or in HashiCorp Vault. Storing secrets in version control systems or plaintext files is not recommended.

  References:

  Terraform Cloud Environment Variables

• Question 346:

  The Security Operations team of ABC Enterprise wants to mandate that all the Terraform configuration that creates an S3 bucket must have encryption feature enabled. What is the best way to achieve it?

  A. Use Sentinel Policies.
  B. Use S3 bucket policy.
  C. Create a script that checks the encryption parameter is enabled on every git commit.
  D. Shared a SOP to engineers to mandate encryption feature on S3.
  A. Use Sentinel Policies.

  ---

  Explanation

  Sentinel is an embedded policy-as-code framework integrated with the HashiCorp Enterprise products. It enables fine-grained, logic-based policy decisions, and can be extended to use information from external sources. Using Sentinel with Terraform Cloud involves:

  *

  Defining the policies-Policies are defined using the policy language with imports for parsing the Terraform plan, state and configuration.

  *

  Managing policies for organizations-Users with permission to manage policies can add policies to their organization by configuring VCS integration or uploading policy sets through the API. They also define which workspaces the policy sets are checked against during runs. (More about permissions.)

  *

  Enforcing policy checks on runs-Policies are checked when a run is performed, after the terraform plan but before it can be confirmed or the terraform apply is executed.

  *

  Mocking Sentinel Terraform data-Terraform Cloud provides the ability to generate mock data for any run within a workspace. This data can be used with the Sentinel CLI to test policies before deployment. https://www.terraform.io/docs/cloud/sentinel/index.html

• Question 347:

  Which task does terraform init not perform?

  A. Sources all providers present in the configuration and ensures they are downloaded and available locally
  B. Connects to the backend
  C. Sources any modules and copies the configuration locally
  D. Validates all required variables are present
  D. Validates all required variables are present

  ---

  Explanation

  The terraform init command is used to initialize a working directory containing Terraform configuration files. This command performs several different initialization steps to prepare the current working directory for use with Terraform, which includes initializing the backend, installing provider plugins, and copying any modules referenced in the configuration. However, it does not validate whether all required variables are present; that is a task performed by terraform plan or terraform apply.

  References: This information can be verified from the official Terraform documentation on the terraform init command provided by HashiCorp Developer.

  https://www.terraform.io/docs/cli/commands/init.html

• Question 348:

  Which of the following value will be accepted for var1?

  variable "var1" { type = string }

  A. None of the above
  B. Both A and B
  C. "5"
  D. 5
  B. Both A and B

  ---

  Explanation

  Terraform automatically converts number and bool values to strings when needed.

• Question 349:

  You have been working in a Cloud provider account that is shared with other team members. You previously used Terraform to create a load balancer that is listening on port 80. After some application changes, you updated the Terraform

  code to change the port to 443. You run terraform plan and see that the execution plan shows the port changing from 80 to 443 like you intended, and step away to grab some coffee.

  In the meantime, another team member manually changes the load balancer port to 443 through the Cloud provider console before you get back to your desk.

  What will happen when you terraform apply upon returning to your desk?

  A. Terraform will not make any changes to the Load Balancer and will update the state file to reflect any changes made.
  B. Terraform will change the port back to 80 in your code
  C. Terraform will change the load balancer port to 80, and) then change it back to 443
  D. Terraform will fail with in error because the state file is no longer accurate
  A. Terraform will not make any changes to the Load Balancer and will update the state file to reflect any changes made.

  ---

  Explanation

• Question 350:

  Terraform plan updates your state file.

  A. True
  B. False
  B. False

  ---

  Explanation

  The terraform plan command creates an execution plan, which lets you preview the changes that Terraform plans to make to your infrastructure. The plan command alone will not actually carry out the proposed changes, and so you can use this command to check whether the proposed changes match what you expected before you apply the changes or share your changes with your team for broader review. Source: https://www.terraform.io/cli/commands/plan