Terraform associate exam 101-150

Terraform associate exam 101-150 If a module declares a variable with a default, that variable must also be defined within the module. A. True B. False B Which option cannot be used to keep secrets out of Terraform configuration files? A. Environment Variables B. Mark the variable as sensitive C. A Terraform provider D. A -var flag B Which of the following arguments are required when declaring a Terraform output? A. sensitive B. description C. default D. value D Your risk management organization requires that new AWS S3 buckets must be private and encrypted at rest. How can Terraform Enterprise automatically and proactively enforce this security control? A. With a Sentinel policy, which runs before every apply B. By adding variables to each TFE workspace to ensure these settings are always enabled C. With an S3 module with proper settings for buckets D. Auditing cloud storage buckets with a vulnerability scanning tool A Most Terraform providers interact with ____________. A. API B. VCS Systems C. Shell scripts D. None of the above A terraform validate validates that your infrastructure matches the Terraform state file. A. True B. False B What does terraform import allow you to do? A. Import a new Terraform module B. Use a state file to import infrastructure to the cloud C. Import provisioned infrastructure to your state file D. Import an existing state file to a new Terraform workspace C FILL BLANK - In the below configuration, how would you reference the module output vpc_id? module "vpc" { source = "terraform-and-modules/vpc/aws" cidr = "10.0.0.0/16" name = "test-vpc". } Type your answer in the field provided. The text field is not case sensitive and all variations of the correct answer are accepted. How would you reference the Volume IDs associated with the ebs_block_device blocks in this configuration? resource "aws_instance" "example" { ami = "ami-abc123" instance_type = "" } ebs_block_device { device_name = "sda2" volume_size = 16 } ebs_block_device { device_name = "sda3" volume_size = 20 } A. aws__block_device.[*].volume_id B. aws__block_e_id C. aws__block_device[sda2,sda3].volume_id D. aws__block_device.*.volume_id A(57%) - D(43%) What does state locking accomplish? A. Copies the state file from memory to disk B. Encrypts any credentials stored within the state file C. Blocks Terraform commands from modifying the state file D. Prevents accidental deletion of the state file C You just upgraded the version of a provider in an existing Terraform project. What do you need to do to install the new provider? A. Run terraform apply -upgrade B. Run terraform init -upgrade C. Run terraform refresh D. Upgrade your version of Terraform B A module can always refer to all variables declared in its parent module. A. True B. False B When you use a remote backend that needs authentication, HashiCorp recommends that you: A. Use partial configuration to load the authentication credentials outside of the Terraform code B. Push your Terraform configuration to an encrypted git repository C. Write the authentication credentials in the Terraform configuration files D. Keep the Terraform configuration files in a secret store A You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully. What will happen if you terraform apply again immediately afterwards without changing any Terraform code? A. Terraform will terminate and recreate the VM B. Terraform will create another duplicate VM C. Terraform will apply the VM to the state file D. Nothing D A junior admin accidentally deleted some of your cloud instances. What does Terraform do when you run terraform apply? A. Build a completely brand new set of infrastructure B. Tear down the entire workspace infrastructure and rebuild it C. Rebuild only the instances that were deleted D. Stop and generate an error message about the missing instances C You have created a Terraform configuration consisting of an application server, a database, and a load balancer. You ran terraform apply and all resources were created successfully. Now you realize that you do not actually need the load balancer so you run terraform destroy without any flags What will happen? A. Terraform will destroy the application server because it is listed first in the code B. Terraform will prompt you to confirm that you want to destroy all the infrastructure C. Terraform will destroy the file D. Terraform will prompt you to pick which resource you want to destroy E. Terraform will immediately destroy all the infrastructure B Which type of block fetches or computes information for use elsewhere in a Terraform configuration? A. provider B. resource C. local D. data D You have just developed a new Terraform configuration for two virtual machines with a cloud provider. You would like to create the infrastructure for the first time. Which Terraform command should you run first? A. terraform apply B. terraform plan C. terraform show D. terraform init D All modules published on the official Terraform Module Registry have been verified by HashiCorp. A. True B. False B You have to initialize a Terraform backend before it can be configured. A. True B. False A(63%) - B(38%) Which of the following does terraform apply change after you approve the execution plan? (Choose two.)