HashiCorp HashiCorp Certifications VA-002-P Questions & Answers

• Question 11:

  In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?

  A. 20

  B. 50

  C. 5

  D. 10

  Correct Answer: D

  Terraform can limit the number of concurrent operations as Terraform walks the graph using the parallelism=n argument. The default value for this setting is 10. This setting might be helpful if you're running into API rate limits.

• Question 12:

  Select all features which are exclusive to Terraform Enterprise. (select three)

  A. Audit Logs

  B. Cost Estimation

  C. Sentinel

  D. Clustering

  E. SAML/SSO

  Correct Answer: ADE

  Sentinel and Cost Estimation are both available in Terraform Cloud, though not at the free tier level.

• Question 13:

  Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

  A. terraform format

  B. terraform validate

  C. terraform fmt

  D. terraform show

  Correct Answer: B

  The terraform validate command validates the configuration files in a directory, referring only to the configuration and not accessing any remote services such as remote state, provider APIs, etc. Validate runs checks that verify whether a configuration is syntactically valid and internally consistent, regardless of any provided variables or existing state. It is thus primarily useful for general verification of reusable modules, including the correctness of attribute names and value types.

• Question 14:

  Which of the following is an invalid variable name?

  A. instance_name

  B. web

  C. var1

  D. count

  Correct Answer: D

  count is a reserved word. The count parameter on resources can simplify configurations and let you scale resources by simply incrementing a number. https://www.terraform.io/intro/examples/count.html

• Question 15:

  True or False:

  The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with

  the real-world infrastructure. If the drift is detected between the real-world infrastructure and the last

  known-state, it will modify the infrastructure to correct the drift.

  A. False

  B. True

  Correct Answer: A

  The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. This can be used to detect any drift from the last-known state, and to update the state file. This does not modify infrastructure but does modify the state file. If the state is changed, this may cause changes to occur during the next plan or apply. https://www.terraform.io/docs/commands/refresh.html

• Question 16:

  When multiple arguments with single-line values appear on consecutive lines at the same nesting level, HashiCorp recommends that you:

  A. place a space in between each line type = "A" ttl = "300" zone_id = aws_route53_zone.primary.zone_id

  B. align their equals signs ami = "abc123" instance_type = "t2.micro"

  C. place all arguments using a variable at the top ami = var.aws_ami instance_type = var.instance_size subnet_id = "subnet-0bb1c79de3EXAMPLE" tags = { Name = "HelloWorld" }

  D. put arguments in alphabetical order name = "www.pythonfanclub.com" records = [aws_eip.lb.public_ip] type = "A" ttl = "300" zone_id = aws_route53_zone.primary.zone_id

  Correct Answer: B

  HashiCorp style conventions suggest you that align the equals sign for consecutive arguments for easing

  readability for configurations

  ami = "abc123"

  instance_type = "t2.micro"

• Question 17:

  True or False? By default, Terraform destroy will prompt for confirmation before proceeding.

  A. True

  B. False

  Correct Answer: A

  Terraform destroy will always prompt for confirmation before executing unless passed the -auto- approve

  flag.

  $ terraform destroy

  Do you really want to destroy all resources?

  Terraform will destroy all your managed infrastructure, as shown above. There is no undo. Only 'yes' will

  be accepted to confirm.

  Enter a value:

• Question 18:

  During a terraform apply, a resource is successfully created but eventually fails during provisioning. What happens to the resource?

  A. Terraform attempts to provide the resource up to three times before exiting with an error

  B. the terraform plan is rolled back and all provisioned resources are removed

  C. it is automatically deleted

  D. the resource is marked as tainted

  Correct Answer: D

  If a resource successfully creates but fails during provisioning, Terraform will error and mark the resource as "tainted". A resource that is tainted has been physically created, but can't be considered safe to use since provisioning failed. Terraform also does not automatically roll back and destroy the resource during the apply when the failure happens, because that would go against the execution plan: the execution plan would've said a resource will be created, but does not say it will ever be deleted.

• Question 19:

  True or False? When using the Terraform provider for Vault, the tight integration between these HashiCorp tools provides the ability to mask secrets in the terraform plan and state files.

  A. False

  B. True

  Correct Answer: A

  Currently, Terraform has no mechanism to redact or protect secrets that are returned via data sources, so secrets read via this provider will be persisted into the Terraform state, into any plan files, and in some cases in the console output produced while planning and applying. These artifacts must, therefore, all be protected accordingly.

• Question 20:

  When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

  A. a private install

  B. disconnected

  C. non-traditional

  D. air-gapped

  Correct Answer: D

  A Terraform Enterprise install that is provisioned on a network that does not have Internet access is generally known as an air-gapped install. These types of installs require you to pull updates, providers, etc. from external sources vs. being able to download them directly.