Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?
A. terraform destroy B. terraform refresh C. terraform taint D. terraform fmt
.
In regards to deploying resources in multi-cloud environments, what are some of the benefits of using Terraform rather than a provider's native tooling? (select three)
A. Terraform simplifies management and orchestration, helping operators build large-scale, multi-cloud infrastructure B. Terraform can help businesses deploy applications on multiple clouds and on-premises infrastructure C. Terraform can manage cross-cloud dependencies D. Terraform is not cloud-agnostic and can be used to deploy resources across a single public cloud.
What happens when a terraform apply command is executed?
A. Reconciles the state Terraform knows about with the real-world infrastructure B. The backend is initialized and the working directory is prepped C. Creates the execution plan for the deployment of resources D. Applies the changes required in the target infrastructure in order to reach the desired configuration.
What does the command terraform fmt do?
A. deletes the existing configuration file B. rewrite Terraform configuration files to a canonical format and style C. updates the font of the configuration file to the official font supported by HashiCorp D. formats the state file in order to ensure the latest state of resources can be obtained.
Select two answers to complete the following sentence:
Before a new provider can be used, it must be ______ and _______.
A. approved by HashiCorp B. uploaded to source control C. declared in the configuration D. initialized.
Which flag would be used within a Terraform configuration block to identify the specific version of a provider required?
A. required_versions B. required-version
C. required-provider D. required_providers.
In the example below, where is the value of the DNS record's IP address originating from?
1. resource "aws_route53_record" "www" {
2. zone_id = aws_route53_zone.primary.zone_id
3. name = "www.helloworld.com"
4. type = "A"
5. ttl = "300"
6. records = [module.web_server.instance_ip_addr]
7. }
A. value of the web_server parameter from the variables.tf file B. the regular expression named module.web_server C. the output of a module named web_server D. by querying the AWS EC2 API to retrieve the IP address.
Given the Terraform configuration below, in which order will the resources be created?
1. resource "aws_instance" "web_server" {
2. ami = "i-abdce12345"
3. instance_type = "t2.micro"
4. }
5.
6. resource "aws_eip" "web_server_ip" {
7. vpc = true
8. instance = aws_instance.web_server.id
9. }
A. resources will be created simultaneously B. aws_eip will be created first aws_instance will be created second C. aws_instance will be created first aws_eip will be created second.
True or False: You can migrate the Terraform backend but only if there are no resources currently being managed.
A. True
B. False.
Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
A. to remove older versions of the provider
B. to match the version number of your application being deployed via Terraform C. providers are released on a separate schedule from Terraform itself;
therefore a newer version could introduce breaking changes D. to ensure that the provider version matches the version of Terraform you are using
.
You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?
A. shut down or stop using the resources being imported so no changes are inadvertently missed
B. update the configuration file to include the new resources C. modify the Terraform state file to add the new resources D. run terraform refresh to ensure that the state file has the latest information for existing resources.
True or False: State is a requirement for Terraform to function.
A. True
B. False.
What is a downside to using the Vault provider to read secrets from Vault?
A. Terraform requires a unique auth method to work with Vault B. secrets are persisted to the state file and plans C. Terraform and Vault must be running on the same version D. Terraform and Vault must be running on the same physical host.
Which of the following represents a feature of Terraform Cloud that is NOT free to customers?
A. VCS integration B. roles and team management C. private module registry D. workspace management.
You've been given requirements to create a security group for a new application. Since your organization standardizes on Terraform, you want to add this new security group with the fewest number of lines of code.
What feature could you use to iterate over a list of required tcp ports to add to the new security group?
A. dynamic backend B. dynamic block C. terraform import D. splat expression .
After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?
A. The resource will be created B. Terraform can't determine how to proceed due to a problem with the state file C. the resource will be updated in place D. the resource will be destroyed and recreated.
In Terraform Enterprise, a workspace can be mapped to how many VCS repos? A. 1 B. 2 C. 5 D. 3 .
When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state doesn't become corrupt?
A. Encryption B. object storage C. workspaces D. state locking.
By default, where does Terraform store its state file? A. Amazon S3 bucket B. shared directory C. remotely using Terraform Cloud D. current working directory .
Which of the following actions are performed during a terraform init? (select three)
A. initializes downloaded and/or installed providers B. download the declared providers which are supported by HashiCorp C. initializes the backend configuration D. provisions the declared resources in your configuration.
From the answers below, select the advantages of using Infrastructure as Code. (select four)
A. Provide reusable modules for easy sharing and collaboration B. provide a codified workflow to develop customer-facing applications C. Safely test modifications using a "dry run" before applying any actual changes D. Easily integrate with application workflows (GitLab Actions, Azure DevOps, CI/CD tools) E. Easily change and update existing infrastructure .
Using multi-cloud and provider-agnostic tools provides which of the following benefits? (select two)
A. slower provisioning speed allows the operations team to catch mistakes before they are applied
B. operations teams only need to learn and manage a single tool to manage infrastructure, regardless of where the infrastructure is deployed C. can be used across major cloud providers and VM hypervisors D. increased risk due to all infrastructure relying on a single tool for management .
Which of the following best describes a Terraform provider?
A. serves as a parameter for a Terraform module that allows a module to be customized B. describes an infrastructure object, such as a virtual network, compute instance, or other components C. a plugin that Terraform uses to translate the API interactions with the service or provider together D. a container for multiple resources that are used.
What are some of the features of Terraform state? (select three)
A. inspection of cloud resources B. determining the correct order to destroy resources C. mapping configuration to real-world resources D. increased performance .
When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other important data aren't inadvertently shared with others.
What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)
A. directly querying HashiCorp Vault for the secrets B. command-line key/value pairs C. use the -backend-config=PATH to specify a separate config file D. interactively on the command line.
Your organization has moved to AWS and has manually deployed infrastructure using the console. Recently, a decision has been made to standardize on Terraform for all deployments moving forward.
What can you do to ensure that all existing is managed by Terraform moving forward without interruption to existing services?
A. using terraform import, import the existing infrastructure into your Terraform state B. resources that are manually deployed in the AWS console cannot be imported by Terraform C. submit a ticket to AWS and ask them to export the state of all existing resources and use terraform import to import them into the state file D. delete the existing resources and recreate them using new a Terraform configuration so Terraform can manage them moving forward.
Which of the following allows Terraform users to apply policy as code to enforce standardized configurations for resources being deployed via infrastructure as code?
A. module registry B. functions C. workspaces D. sentinel.
What Terraform command can be used to inspect the current state file?
Example: A. terraform inspect B. terraform read C. terraform show D. terraform state.
Select the answer below that completes the following statement:
Terraform Cloud can be managed from the CLI but requires __________?
A. an API token B. a TOTP token C. a username and password D. authentication using MFA.
Which of the following is considered a Terraform plugin?
A. Terraform logic B. Terraform provider C. Terraform tooling D. Terraform language.
What Terraform feature is shown in the example below?
A. conditional expression B. local values C. dynamic block D. data source.
HashiCorp offers multiple versions of Terraform, including Terraform open-source, Terraform Cloud, and Terraform Enterprise.
Which of the following Terraform features are only available in the Enterprise edition? (select four)
A. SAML/SSO B. Sentinel C. Audit Logs D. Clustering E. Private Module Registry F. Private Network Connectivity.
In regards to Terraform state file, select all the statements below which are correct: (select four)
A. The Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access B. using the mask feature, you can instruct Terraform to mask sensitive data in the state file C. when using local state, the state file is stored in plain-text D. the state file is always encrypted at rest E. Terraform Cloud always encrypts state at rest F. storing state remotely can provide better security.
What are the benefits of using Infrastructure as Code? (select five)
A. Infrastructure as Code is relatively simple to learn and write, regardless of a user's prior experience with developing code B. Infrastructure as Code provides configuration consistency and standardization among deployments C. Infrastructure as Code is easily repeatable, allowing the user to reuse code to deploy similar, yet different resources D. Infrastructure as Code gives the user the ability to recreate an application's infrastructure for disaster recovery scenarios E. Infrastructure as Code easily replaces development languages such as Go and .Net for application development F. Infrastructure as Code allows a user to turn a manual task into a simple, automated deployment.
True or False: Provisioners should only be used as a last resort.
A. True B. false.
Which of the following best describes the default local backend?
A. The local backend is the directory where resources deployed by Terraform have direct access to in order to update their current state B. The local backend is where Terraform Enterprise stores logs to be processed by an log collector C. The local backend is how Terraform connects to public cloud services, such as AWS, Azure, or GCP D. The local backend stores state on the local filesystem, locks the state using system APIs, and performs operations locally.
In order to make a Terraform configuration file dynamic and/or reusable, static values should be converted to use what?
A. Module
B. input parameters C. regular expressions D. output value.
What happens when a terraform plan is executed?
A. reconciles the state Terraform knows about with the real-world infrastructure B. applies the changes required in the target infrastructure in order to reach the desired configuration C. the backend is initialized and the working directory is prepped D. creates an execution plan and determines what changes are required to achieve the desired state in the configuration files.
Which of the following connection types are supported by the remote-exec provisioner? (select two)
A. smb B. winrm C. rdp D. ssh.
What are some of the problems of how infrastructure was traditionally managed before Infrastructure as Code? (select three)
A. Requests for infrastructure or hardware required a ticket, increasing the time required to deploy applications B. Traditional deployment methods are not able to meet the demands of the modern business where resources tend to live days to weeks, rather than months to years C. Traditionally managed infrastructure can't keep up with cyclic or elastic applications D. Pointing and clicking in a management console is a scalable approach and reduces human error as businesses are moving to a multi-cloud deployment model.
Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)
A. terraform.tfstate B. variables.tf C. output.tf D. terraform.tfvars.
True or False: A list(...) may contain a number of values of the same type while an object(...) can contain a number of values of different types.
A. True
B. False.
True or False: Multiple providers can be declared within a single Terraform configuration file.
A. True B. False.
When using parent/child modules to deploy infrastructure, how would you export a value from one module to import into another module.
For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.
A. configure the pertinent provider's configuration with a list of possible IP addresses to use B. export the value using terraform export and input the value using terraform input C. preconfigure the IP address as a parameter in the DNS module D. configure an output value in the application module in order to use that value for the DNS module.
What is the best and easiest way for Terraform to read and write secrets from HashiCorp Vault?
A. Vault provider B. API access using the AppRole auth method C. integration with a tool like Jenkins
D. CLI access from the same machine running Terraform.
True or False: Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.
A. True B. False.
Select the feature below that best completes the sentence:
The following list represents the different types of __________ available in Terraform.
1. max
2. min
3. join
4. replace
5. list
6. length
7. range
A. data sources B. functions C. backends D. named values.
What is the purpose of using the local-exec provisioner? (select two)
A. to execute one or more commands on the machine running Terraform B. to invoke a local executable
C. executes a command on the resource to invoke an update to the Terraform state D. ensures that the resource is only executed in the local infrastructure where Terraform is deployed.
After running into issues with Terraform, you need to enable verbose logging to assist with troubleshooting the error.
Which of the following values provides the MOST verbose logging?
A. TRACE B. DEBUG C. WARN D. ERROR E. INFO.
Terraform-specific settings and behaviors are declared in which configuration block type?
A. data
B. provider
C. resource D. terraform.
|
