Terraform associate exam 151-191

Terraform associate exam 151-191 What does terraform refresh modify? A. Your cloud infrastructure B. Your state file C. Your Terraform plan D. Your Terraform configuration B Which of the following is not valid source path for specifying a module? A. source = "./modulelversion=v1.0.0" B. source = " C. source = "./module" D. source = "hashicorp/consul/aws" A Which of the following is true about terraform apply? (Choose two.) A. It only operates on infrastructure defined in the current working directory or workspace B. You must pass the output of a terraform plan command to it C. Depending on provider specification, Terraform may need to destroy and recreate your infrastructure resources D. By default, it does not refresh your state file to reflect current infrastructure configuration E. You cannot target specific resources for the operation A C Which of the following statements about local modules is incorrect? A. Local modules are not cached by terraform init command B. Local modules are sourced from a directory on disk C. Local modules support versions D. All of the above (all statements above are incorrect) E. None of the above (all statements above are correct) C Which of the following is true about Terraform's implementation of infrastructure as code? (Choose two.) A. It is only compatible with AWS infrastructure management B. You cannot reuse infrastructure configuration C. You can version your infrastructure configuration D. It requires manual configuration of infrastructure resources E. It allows you to automate infrastructure provisioning C E You need to write some Terraform code that adds 42 firewall rules to a security group as shown in the example. resource "aws_security_group" "many_rules" { name = "many-rules" ingress { from_port = 443 to_port = 443 protocol = "tcp" cidr_blocks = "0.0.0.0/0" } } What can you use to avoid writing 42 different nested ingress config blocks by hand? A. A count loop B. A for block C. A for each block D. A dynamic block D Which of the following is the safest way to inject sensitive values into a Terraform Cloud workspace? A. Write the value to a file and specify the file with the -var-file flag B. Set a value for the variable in the UI and check the "Sensitive" check box C. Edit the state file directly just before running terraform apply D. Set the variable value on the command line with the -var flag B terraform apply will fail if you have not am terraform plan first to update the plan output. A. True B. False B How would you reference the attribute "name" of this fictitious resource in HCL? resource "kubernetes_namespace" "example" { name = "test" } A. netes_ B. kubernetes_ C. kubernetes_ D. netes_ E. None of the above C A Terraform output that sets the "sensitive" argument to true will not store that value in the state file. A. True B. False B Which are forbidden actions when the Terraform state file is locked? (Choose three.) A. terraform destroy B. terraform fmt C. terraform state list D. terraform apply E. terraform plan F. terraform validate A D E Terraform installs its providers during which phase? A. Plan B. Init C. Refresh D. All of the above B When does Sentinel enforce policy logic during a Terraform Enterprise run? A. Before the plan phase B. During the plan phase C. Before the apply phase D. After the apply phase C What is the purpose of a Terraform workspace in either open source or enterprise? A. Workspaces allow you to manage collections of infrastructure in state files B. A logical separation of business units C. A method of grouping multiple infrastructure security policies D. Provides limited access to a cloud environment A Which is the best way to specify a tag of v1.0.0 when referencing a module stored in Git (for example git:: A. Append ?ref=v1. 0. 0 argument to the source path B. Add version = "1.0.0" parameter to module block C. Nothing ג "€modules stored on GitHub always default to version 1.0.0 D. Modules stored on GitHub do not support versioning A Changing the Terraform backend from the default "local" backend to a different one after doing your first terraform apply is: A. Mandatory B. Optional C. Impossible D. Discouraged B You have modified your local Terraform configuration and ran terraform plan to review the changes. Simultaneously, your teammate manually modified the infrastructure component you are working on. Since you already ran terraform plan locally, the execution plan for terraform apply will be the same. A. True B. False B terraform apply is failing with the following error. What next step should you take to determine the root cause of the problem? Error loading state: AccessDenied: Access Denied status code: 403, request id: 288766CE5CCA24A0, host id: FOOBAR A. Set TF_LOG=DEBUG B. Review syslog for Terraform error messages C. Run terraform login to reauthenticate with the provider D. Review /var/log/ for error messages A As a member of an operations team that uses infrastructure as code (IaC) practices, you are tasked with making a change to an infrastructure stack running in a public cloud. Which pattern would follow IaC best practices for making a change? A. Clone the repository containing your infrastructure code and then run the code B. Use the public cloud console to make the change after a database record has been approved C. Make the change programmatically via the public cloud CLI D. Make the change via the public cloud API endpoint E. Submit a pull request and wait for an approved merge of the proposed changes E What command can you run to generate DOT (Document Template) formatted data to visualize Terraform dependencies? A. terraform refresh B. terraform show C. terraform graph D. terraform output