Hashicorp Certified Terraform Associate | Mock Exam-1

Hashicorp Certified Terraform Associate Dumps

Mock 1 | Hashicorp Certified: Terraform Associate (TA-03)

1 / 58

A Terraform provider is NOT responsible for:

Exposing resources and data sources based on an APUI

Managing actions to take based on resources differences

Understanding API interactions with some service

Provisioning infrastructure in multiple

2 / 58

In a Terraform Cloud workspace linked to a version control repository speculative plan rum start automatically commit changes to version control.

True

False

3 / 58

Which command add existing resources into Terraform state?

Terraform init

Terraform plan

Terraform refresh

Terraform import

All of these

4 / 58

How does the Terraform cloud integration differ from other state backends such as S3, Consul,etc?

It can execute Terraform runs on dedicated infrastructure in Terraform Cloud

It doesn't show the output of a terraform apply locally

It is only arable lo paying customers

All of the above

5 / 58

Which of these ate features of Terraform Cloud? Choose two correct answers.

Automated infrastructure deployment visualization

Automatic backups

A web-based user interface (Ul)

Remote state storage

6 / 58

You cannot install third party plugins using terraform init.

True

False

7 / 58

Only the user that generated a plan may apply it.

True

False

8 / 58

When you use a remote backend that needs authentication, HashiCorp recommends that you:

Write the authentication credentials in the Terraform configuration files

Keep the Terraform configuration files in a secret store

Push your Terraform configuration to an encrypted git repository

Use partial configuration to load the authentication credentials outside of the Terraform code

9 / 58

You can reference a resource created with for_each using a Splat ( *) expression.

True

False

10 / 58

You want to define a single input variable to capture configuration values for a server. The values must represent memory as a number, and the server name as a string.
Which variable type could you use for this input?

List

Object

Map

Terraform does not support complex input variables of different types

11 / 58

_______backends support state locking.

All

Some

Only local

12 / 58

It is best practice to store secret data in the same version control repository as your Terraform configuration.

True

False

13 / 58

Which of the following statements about Terraform modules is not true?

Modules can call other modules

Modules must be publicly accessible

You can call the same module multiple times

14 / 58

You have declared a variable called var.list which is a list of objects that all have an attribute id .
Which options will produce a list of the IDs? Choose two correct answers.

[ var.list [ * ] , id ]

[ for o in var.list : o.Id ]

var.list[*].id

{ for o in var.llst : o => o.id }

15 / 58

How does Terraform manage most dependencies between resources?

Terraform will automatically manage most resource dependencies

Using the depends_on parameter

By defining dependencies as modules and including them in a particular order

The order that resources appear in Terraform configuration indicates dependencies

16 / 58

Which backend does the Terraform CU use by default?

Depends on the cloud provider configured

HTTP

Remote

Terraform Cloud

Local

17 / 58

What is one disadvantage of using dynamic blocks in Terraform?

Dynamic blocks can construct repeatable nested blocks

Terraform will run more slowly

They cannot be used to loop through a list of values

They make configuration harder to read and understand

18 / 58

You can develop a custom provider to manage its resources using Terraform.

True

False

19 / 58

What is the workflow for deploying new infrastructure with Terraform?

Write Terraform configuration, run terraform init to initialize the working directory or workspace, and run terraform apply

Write Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure

Write Terraform configuration, run terraform apply to create infrastructure, use terraform validate to confirm Terraform deployed resources correctly

Write Terraform configuration, run terraform plan to initialize the working directory or workspace, and terraform apply to create the infrastructure

20 / 58

When do changes invoked by terraform apply take effect?

After Terraform has updated the state file

Once the resource provider has fulfilled the request

Immediately

None of the above are correct

21 / 58

You have never used Terraform before and would like to test it out using a shared team account for a cloud provider. The shared team account already contains 15 virtual machines (VM). You develop a Terraform configuration containing one VM. perform terraform apply, and see that your VM was created successfully.
What should you do to delete the newly-created VM with Terraform?

The Terraform state file contains all 16 VMs in the team account. Execute terraform destroy and select the newly-created VM.

Delete the Terraform state file and execute terraform apply.

The Terraform state file only contains the one new VM. Execute terraform destroy.

Delete the VM using the cloud provider console and terraform apply to apply the changes to the Terraform state file.

22 / 58

What is the Terraform style convention for indenting a nesting level compared to the one above it?

With a tab

With two spaces

With four spaces

With three spaces

23 / 58

What kind of configuration block will create an infrastructure object with settings specified within the block?

provider

state

data

resource

24 / 58

Which command should you run to check if all code in a Terraform configuration that references multiple modules is properly formatted without making changes?

terraform fmt -write-false

terraform fmt -list -recursive

terraform fmt -check -recursive

terraform fmt -check

25 / 58

How would you reference the volume IDs associated with the ebs_block_device blocks in this configuration?

aws_instance.example.ebs_block_device[sda2,sda3).volume_id

aws_lnstance.example.ebs_block_device.[*].volume_id

aws_lnstance.example.ebs_block_device.volume_ids

aws_instance.example-ebs_block_device.*.volume_id

26 / 58

You ate making changes to existing Terraform code to add some new infrastructure.
When is the best time to run terraform validate?

After you run terraform apply so you can validate your infrastructure

Before you run terraform apply so you can validate your provider credentials

Before you run terraform plan so you can validate your code syntax

After you run terraform plan so you can validate that your state file is consistent with your infrastructure

27 / 58

As a member of an operations team that uses infrastructure as code (lac) practices, you are tasked with making a change to an infrastructure stack running in a public cloud.
Which pattern would follow laC best practices for making a change?

Make the change via the public cloud API endpoint

Clone the repository containing your infrastructure code and then run the code

Use the public cloud console to make the change after a database record has been approved

Make the change programmatically via the public cloud CLI

Submit a pull request and wait for an approved merge of the proposed changes

28 / 58

You must use different Terraform commands depending on the cloud provider you use.

True

False

29 / 58

What information does the public Terraform Module Registry automatically expose about published modules?

Required input variables

Optional inputs variables and default values

Outputs

All of the above

None of the above

30 / 58

As a developer, you want to ensure your plugins are up to date with the latest versions.
Which Terraform command should you use?

terraform refresh -upgrade

terraform apply -upgrade

terraform init -upgrade

terraform providers -upgrade

31 / 58

You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create any outputs for your code.
What is the best method to quickly find the IP address of the resource you deployed?

In a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file

Run terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address

Run terraform output ip_address to view the result

Run terraform destroy then terraform apply and look for the IP address in stdout

32 / 58

Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to store the state file in a central location.
Which of the following backends would not work?

Artifactory

Amazon S3

Terraform Cloud

Git

33 / 58

You decide to move a Terraform state file to Amazon S3 from another location. You write the code below into a file called backend.tf.

terraform state

terraform init

terraform push

terraform refresh

34 / 58

Which of the following is not a valid Terraform variable type?

list

array

nap

string

35 / 58

What does Terraform not reference when running a terraform apply -refresh-only ?

State file

Credentials

Cloud provider

Terraform resource definitions in configuration files

36 / 58

What are some benefits of using Sentinel with Terraform Cloud/Terra form Cloud? Choose three correct answers.

You can enforce a list of approved AWS AMIs

Policy-as-code can enforce security best practices

You can check out and check in cloud access keys

You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.

Sentinel Policies can be written in HashiCorp Configuration Language (HCL)

37 / 58

Module variable assignments are inherited from the parent module and you do not need to explicitly set them.

True

False

38 / 58

Why does this backend configuration not follow best practices?

An alias meta-argument should be included in backend blocks whenever possible

You should use the local enhanced storage backend whenever possible

You should not store credentials in Terraform configuration

The backend configuration should contain multiple credentials so that more than one user can execute terraform plan and terraform apply

39 / 58

What does Terraform use the .terraform.lock.hc1 file for?

There is no such file

Tracking specific provider dependencies

Preventing Terraform runs from occurring

Storing references to workspaces which are locked

40 / 58

Once you configure a new Terraform backend with a terraform code block, which command(s) should you use to migrate the state file?

terraform destroy, then terraform apply

terraform init

terraform push

terraform apply

41 / 58

If you update the version constraint in your Terraform configuration, Terraform will update your lock file the next time you run terraform Init.

True

False

42 / 58

Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files. How can you protect that data?

Edit your state file to scrub out the sensitive data

Always store your secrets in a secrets.tfvars file

Delete the state file every time you run Terraform

Store the state in an encrypted backend

43 / 58

Variables declared within a module are accessible outside of the module.

True

False

44 / 58

When should you write Terraform configuration files for existing infrastructure that you want to start managing with Terraform?

You can import infrastructure without corresponding Terraform code

Terraform will generate the corresponding configuration files for you

Before you run terraform Import

After you run terraform import

45 / 58

You're building a CI/CD (continuous integration/continuous delivery) pipeline and need to inject sensitive variables into your Terraform run. How can you do this safely?

Copy the sensitive variables into your Terraform code

Store the sensitive variables in a secure_varS.tf file

Store the sensitive variables as plain text in a source code repository

Pass variables to Terraform with a -var flag

46 / 58

How can you trigger a run in a Terraform Cloud workspace that is connected to a Version Control System (VCS) repository?

Only Terraform Cloud organization owners can set workspace variables on VCS connected workspaces

Commit a change to the VCS working directory and branch that the Terraform Cloud workspace is connected to

Only Terraform Cloud organization owners can approve plans in VCS connected workspaces

Only members of a VCS organization can open a pull request against repositories that are connected to Terraform Cloud workspaces

47 / 58

What does the default "local" Terraform backend store?

tfplan files

State file

Provider plugins

Terraform binary

48 / 58

Terraform providers are always installed from the Internet

True

False

49 / 58

What feature stops multiple users from operating on the Terraform state at the same time?

State locking

Version control

Provider constraints

Remote backends

50 / 58

Which of the following is not a valid siring function in Terraform?

choaf

join

Split

slice

51 / 58

Outside of the required_providers block, Terraform configurations always refer to providers by their local names.

True

False

52 / 58

Which of the following ate advantages of using infrastructure as code (laC) instead of provisioning with a graphical user interface (GUI)? Choose two correct answers.

Lets you version, reuse, and share infrastructure configuration

Provisions the same resources at a lower cost

Secures your credentials

Reduces risk of operator error

53 / 58

You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead.
What are the two things you must do to achieve this? Choose two correct answers.

Run the terraform Import-gcp command

Write Terraform configuration for the existing VMs

Use the terraform import command for the existing VMs

Provision new VMs using Terraform with the same VM names

54 / 58

A developer accidentally launched a VM (virtual machine) outside of the Terraform workflow and ended up with two servers with the same name. They don't know which VM Terraform manages but do have a list of all active VM IDs.
Which of the following methods could you use to discover which instance Terraform manages?

A developer accidentally launched a VM (virtual machine) outside of the Terraform workflow and ended up with two servers with the same name. They don't know which VM Terraform manages but do have a list of all active VM IDs. Which of the following methods could you use to discover which instance Terraform manages?

Update the code to include outputs for the ID of all VMs, then run terraform plan to view the outputs

Run terraform taint/code on all the VMs to recreate them

Use terraform refresh/code to find out which IDs are already part of state

55 / 58

When does Sentinel enforce policy logic during a Terraform Cloud run?

Before the plan phase

During the plan phase

Before the apply phase

After the apply phase

56 / 58

Which command must you first run before performing further Terraform operations in a working directory?

terraform import

terraform workspace

terraform plan

terraform init

57 / 58

terraform validate confirms that your infrastructure matches the Terraform state file.

True

False

58 / 58

Module version is required to reference a module on the Terraform Module Registry.

True

False

Your score is

The average score is 38%