HashiCorp Certified: Terraform Associate TA-002-P Dumps Questions

Jonnie Karnath2023-08-02T07:58:29+00:00

The HashiCorp Certified: Terraform Associate TA-002-P exam is a certification for professionals who want to demonstrate their skills and knowledge in using Terraform to automate infrastructure management. To help you prepare for the exam, Certspots offers free online HashiCorp Certified: Terraform Associate TA-002-P Dumps Questions. These TA-002-P dumps questions are designed to simulate the actual exam and cover all the topics that you need to know in order to pass the certification. They are updated regularly to reflect the latest changes in the exam format and content. With the help of Certspots’ free online HashiCorp Certified: Terraform Associate TA-002-P Dumps Questions, you can be confident in your ability to pass the exam and earn your certification.

Page 1 of 14

1. The following is a snippet from a Terraform configuration file:

Which, when validated, results in the following error:

Fill in the blank in the error message with the correct string from the list below.

version

multi

label

alias

2. Using multi-cloud and provider-agnostic tools provides which of the following benefits?

Operations teams only need to learn and manage a single tool to manage infrastructure, regardless of where the infrastructure is deployed.

Increased risk due to all infrastructure relying on a single tool for management.

Can be used across major cloud providers and VM hypervisors.

Slower provisioning speed allows the operations team to catch mistakes before they are applied.

3. Terraform providers are always installed from the Internet.

True

False

4. What kind of resource dependency is stored in terraform.tfstate file?

Both implicit and explicit dependencies are stored in state file.

Only explicit dependencies are stored in state file.

Only implicit dependencies are stored in state file.

No dependency information is stored in state file.

5. You want to share Terraform state with your team, store it securely and provide state locking.

How would you do this? Choose three correct answers.

Using the consul Terraform backend.

Using the remote Terraform backend with Terraform Cloud / Terraform Enterprise.

Using the local backend.

Using the s3 terraform backend. The dynamodb_field option e not needed.

Using an s3 terraform backend with an appropriate IAM policy and dynamodb_field option configured.

6. What does Terraform use .terraform.lock.hcl file for?

Tracking provider dependencies Most Voted

There is no such file

Preventing Terraform runs from occurring

Storing references to workspaces which are locked

7. John wants to use two different regions to deploy two different EC2 instances. He has specified two provider blocks in his providers.tf file.

provider "aws" { region = "us-east-1" }

provider "aws" { region = "us-west-2" }

When he run terraform plan he encountered an error.

How to fix this?

Use another provider version

Use alias for region = "us-west-2"

Use default keyword with region = "us-east-1"

It can not be fixed

8. Which of the below options is the equivalent Terraform 0.12 version of the snippet which is written in Terraform 0.11?

"${var.instance_id}"

variable.instance_id

var.instance_ids

var.instance_id

None of the above

9. You want terraform plan and terraform apply to be executed in Terraform Cloud's run environment but the output is to be streamed locally.

Which one of the below you will choose?

Local Backends.

Terraform Backends.

This can be done using any of the local or remote backends.

Remote Backends.

10. What are some of the features of Terraform state? (select three)

inspection of cloud resources

determining the correct order to destroy resources

mapping configuration to real-world resources

increased performance

Page 2 of 14

11. You have created a main.tr Terraform configuration consisting of an application server, a database, and a load balancer. You ran terraform apply and all resources were created successfully. Now you realize that you do not actually need the load balancer so you run terraform destroy without any flags.

What will happen?

Terraform will destroy the application server because it is listed first in the code

Terraform will prompt you to confirm that you want to destroy all the infrastructure

Terraform will destroy the main.tf file

Terraform will prompt you to pick which resource you want to destroy

Terraform will immediately destroy all the infrastructure

12. Your risk management organization requires that new AWS S3 buckets must be private and encrypted at rest.

How can Terraform Enterprise automatically and proactively enforce this security control?

With a Sentinel policy, which runs before every apply

By adding variables to each TFE workspace to ensure these settings are always enabled

With an S3 module with proper settings for buckets

Auditing cloud storage buckets with a vulnerability scanning tool

13. All Terraform Cloud tiers support team management and governance.

True

False

14. When using parent/child modules to deploy infrastructure, how would you export a value from one module to import into another module.

For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

Export the value using terraform export and input the value using terraform input.

Configure the pertinent provider's configuration with a list of possible IP addresses to use.

Configure an output value in the application module in order to use that value for the DNS module.

Preconfigure the IP address as a parameter in the DNS module.

15. The terraform init command is always safe to run multiple times, to bring the working directory up to date with changes in the configuration. Though subsequent runs may give errors, this command will never delete your existing configuration or state.

False

True

16. Choose the answer that correctly completes the sentence: _______backends support state

locking.

All

Only local

Some

17. Terraform console provides an interactive command-line console for evaluating and experimenting with expressions. You can use it to test interpolations before using them in configurations and to interact with any values currently saved in state.

Which configuration consistency errors does terraform validate report?

A mix of spaces and tabs in configuration files

Differences between local and remote state

Terraform module isn't the latest version

Declaring a resource identifier more than once

18. Which of the following is true about Terraform's implementation of infrastructure as code? (Choose two.)

It is only compatible with AWS infrastructure management

You cannot reuse infrastructure configuration

You can version your infrastructure configuration

It requires manual configuration of infrastructure resources

It allows you to automate infrastructure provisioning

19. You have deployed a new webapp with a public IP address on a clod provider. However, you did not create any outputs for your code.

What is the best method to quickly find the IP address of the resource you deployed?

Run terraform output ip_address to view the result

In a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file

Run terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address

Run terraform destroy then terraform apply and look for the IP address in stdout

20. Which statements best describes what the local variable assignment is doing in the following code snippet:

Create a distinct list of route table name objects

Create a map of route table names to subnet names

Create a map of route table names from a list of subnet names

Create a list of route table names eliminating duplicates

Page 3 of 14

21. A variable az has the following default value.

What will be the datatype of the variable?

az=["us-west-1a","us-east-1a"]

Object

List

Map

String

22. Which of the below are paid features of Terraform Cloud?

Full API Coverage

Secure variable Storage

Roles/ Team management

Cost Estimation

Private Module Registry

Sentinel policies

23. What does the default "local" Terraform backend store?

tfplan files

Terraform binary

Provider plugins

State file

24. Terraform configuration (including any module references) can contain only one Terraform provider type.

True

False

25. Multiple provider instances blocks for AWS can be part of a single configuration file?

False

True

26. Provider dependencies are created in several different ways. Select the valid provider dependencies from the following list: (select three)

Explicit use of a provider block in configuration, optionally including a version constraint.

Use of any resource belonging to a particular provider in a resource or data block in configuration.

Existence of any resource instance belonging to a particular provider in the current state.

Existence of any provider plugins found locally in the working directory.

27. A user creates three workspaces from the command line - prod, dev, and test.

Which of the following commands will the user run to switch to the dev workspace?

terraform workspace dev

terraform workspace select dev

terraform workspace -switch dev

terraform workspace switch dev

28. True or False. The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.

False

True

29. Which argument(s) is (are) required when declaring a Terraform variable?

type

default

description

All of the above

None of the above

30. Which of the following represents a feature of Terraform Cloud that is NOT free to customers?

Roles and Team Management

WorkSpace Management

Private Module Registry

VCS Integration

Page 4 of 14

31. True or False: Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

True

False

32. What is a downside to using the Vault provider to read secrets from Vault?

Secrets are persisted to the state file and plans.

Terraform and Vault must be running on the same version.

Terraform and Vault must be running on the same physical host.

Terraform requires a unique auth method to work with Vault.

33. Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

terraform validate

terraform format

terraform fmt

terraform show

34. Refer to the following terraform variable definition

variable "track_tag" { type = list default = ["data_ec2","integration_ec2","digital_ec2"]} track_tag = { Name = element(var.track_tag,count.index)}

If count.index is set to 2, which of the following values will be assigned to the name attribute of track_tag variable?

integration_ec2

digital_ec2

track_tag

data_ec2

35. When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state doesn't become corrupt?

Object Storage

State Locking

WorkSpaces

Encryption

36. Which are examples of infrastructure as code? (Choose two.)

Cloned virtual machine images

Change management database records

Versioned configuration files

Docker files

37. What is a key benefit of the Terraform state file?

A state file represents a source of truth for resources provisioned with a public cloud console

A state file represents a source of truth for resources provisioned with Terraform

A state file represents the desired state expressed by the Terraform code files D A state file can be used to schedule recurring infrastructure tasks

38. You have written a terraform IaC script which was working till yesterday, but is giving some vague error from today, which you are unable to understand. You want more detailed logs that could potentially help you troubleshoot the issue, and understand the root cause.

What can you do to enable this setting? Please note, you are using terraform OSS.

Terraform OSS can push all its logs to a syslog endpoint. As such, you have to set up the syslog sink, and enable TF_LOG_PATH env variable to the syslog endpoint and all logs will automatically start streaming.

Detailed logs are not available in terraform OSS, except the crash message. You need to upgrade to terraform enterprise for this point.

Enable the TF_LOG_PATH to the log sink file location, and logging output will automatically be stored there.

Enable TF_LOG to the log level DEBUG, and then set TF_LOG_PATH to the log sink file location. Terraform debug logs will be dumped to the sink path, even in terraform OS

39. Which task does terraform init not perform?

Sources all providers present in the configuration and ensures they are downloaded and available locally

Connects to the backend

Sources any modules and copies the configuration locally

Validates all required variables are present

40. You want to define multiple data disks as nested blocks inside the resource block for a virtual machine.

What Terraform feature would help you define the blocks using the values in a variable?

Local values

Dynamic blocks

Count arguments

Collection functions

Page 5 of 14

41. Which of the following connection types are supported by the remote-exec provisioner? (select two)

WinRM

UDP

SMB

RDP

ssh

42. Workspaces in Terraform provides similar functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

True

False

43. You are creating a Terraform configuration which needs to make use of multiple providers, one for AWS and one for Datadog.

Which of the following provider blocks would allow you to do this?

Option A

Option B

Option C

44. You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully.

What will happen if you terraform apply again immediately afterwards without changing any Terraform code?

Terraform will terminate and recreate the VM

Terraform will create another duplicate VM

Terraform will apply the VM to the state file

Nothing

45. Which parameters does terraform import require? Choose two correct answers.

Provider

Path

Resource address

Resource ID

46. Which of the following variable definition files will terraform load automatically?

terraform.tfvar

Any files with names ending in .auto.tfvars.json

terraform.tfvars

terraform.tfvars.json

47. Which provider authentication method prevents credentials from being stored in the state file?

Using environment variables

Specifying the login credentials in the provider block

Setting credentials as Terraform variables

None of the above

48. Which of the following allows Terraform users to apply policy as code to enforce standardized configurations for resources being deployed via infrastructure as code?

Sentinel

Module registry

Functions

Workspaces

49. Command terraform refresh will update state file?

False

True

50. What is terraform refresh intended to detect?

Terraform configuration code changes

Empty state files

State file drift

Corrupt state files

Page 6 of 14

51. In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?

52. CORRECT TEXT

In the below configuration, how would you reference the module output vpc_id?

Type your answer in the field provided. The text field is not case sensitive and all variations of the correct answer are accepted.

53. Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to begin storing the state file in a central location.

Which of the following backends would not work?

Amazon S3

Artifactory

Git

Terraform Cloud

54. One remote backend configuration always maps to a single remote workspace.

True

False

55. Which of the following is not supported backend types in Terra form?

consul

gcs

manta

bitbucket

56. A fellow developer on your team is asking for some help in refactoring their Terraform code. As part of their application’s architecture, they are going to tear down an existing deployment managed by Terraform and deploy new. However, there is a server resource named aws_instance.ubuntu[1] they would like to keep to perform some additional analysis.

What command should be used to tell Terraform to no longer manage the resource?

terraform apply rm aws_instance.ubuntu[1]

terraform state rm aws_instance.ubuntu[1]

terraform plan rm aws_instance.ubuntu[1]

terraform delete aws_instance.ubuntu[1]

57. When running the command terraform taint against a managed resource you want to force recreation upon, Terraform will immediately destroy and recreate the resource.

True

False

58. Terraform variables and outputs that set the "description" argument will store that description in the state file.

True

False

59. How is the Terraform remote backend different than other state backends such as S3, Consul, etc.?

It can execute Terraform runs on dedicated infrastructure on premises or in Terraform Cloud

It doesn't show the output of a terraform apply locally

It is only available to paying customers

All of the above

60. Which of these is the best practice to protect sensitive values in state files?

Blockchain

Secure Sockets Layer (SSL)

Enhanced remote backends

Signed Terraform providers

Page 7 of 14

61. Which of the following type of variable allows multiple values of several distinct types to be grouped together as a single value?

Map

Object

Tuple

List

62. As a member of an operations team that uses infrastructure as code (laC) practices, you are tasked with making a change to an infrastructure stack running in a public cloud.

Which pattern would follow laC best practices for making a change?

Make the change via the public cloud API endpoint

Make the change programmatically via the public cloud CLI

Submit a pull request and wait for an approved merge of the proposed changes

Use the public cloud console to make the change after a database record has been approved

Clone the repository containing your infrastructure code and then run the code

63. Terraform is currently being used by your organisation to create resources on AWS for the development of a web application. One of your coworkers wants to change the instance type to "t2.large" while keeping the default set values.

What adjustments does the teammate make in order to meet his goal?

Issue Terraform plan instance.type".t2.large" and it deploys the instance

Modify the tf.variableswith the instance type and issue terraform apply

Create a new file my.tfvars and add the type of the instance and issue terraform plan and apply

Modify the terraform.tfvars with the instance type and issue terraform plan and then terraform apply to deploy the instances

64. Which one of the following command will rewrite Terraform configuration files to a canonical format and style.

terraform graph -h

terraform init

terraform graph

terraform fmt

65. Which of the following is a meta-argument defined in the configuration files of Terraform?

tfvar

depends_on

instance aws

varl

66. Multiple providers can be declared within a single Terraform configuration file.

True

False

67. When should you use the force-unlock command?

You see a status message that you cannot acquire the lock

You have a high priority change

Automatic unlocking failed

Your apply failed due to a state lock

68. …}

Due to the way that the application code is written, the s3 bucket must be created before the test role is created, otherwise there will be a problem.

How can you ensure that?

Add explicit dependency using depends_on. This will ensure the correct order of resource creation.

This will already be taken care of by terraform native implicit dependency. Nothing else needs to be done from your end.

This is not possible to control in terraform. Terraform will take care of it in a native way, and create a dependency graph that is best suited for the parallel resource creation.

Create 2 separate terraform config scripts, and run them one by one, 1 for s3 bucket, and another for IAM role, run the S3 bucket script first.

69. Your developers are facing a lot of problem while writing complex expressions involving difficult interpolations. They have to run the terraform plan every time and check whether there are errors, and also check terraform apply to print the value as a temporary output for debugging purposes.

What should be done to avoid this?

Use terraform console command to have an interactive UI with full access to the underlying terraform state to run your interpolations, and debug at real-time.

Add a breakpoint in your code, using the watch keyword, and output the value to console for temporary debugging.

Use terraform zipmap function, it will be able to easily do the interpolations without complex code.

Use terraform console command to have an interactive UI, but you can only use it with local state, and it does not work with remote state.

70. A Terraform local value can reference other Terraform local values.

True

False

Page 8 of 14

71. Where can Terraform not load a provider from?

Plugins directory

Provider plugin cache

Official HashrCorp distribution on releases, hashicorp.com

Source code

72. Which of the below datatype is not supported by Terraform.

Array

List

Object

Map

73. You just scaled your VM infrastructure and realized you set the count variable to the wrong value. You correct the value and save your change.

What do you do next to make your infrastructure match your configuration?

Run an apply and confirm the planned changes

Inspect your Terraform state because you want to change it

Reinitialize because your configuration has changed

Inspect all Terraform outputs to make sure they are correct

74. You are using a terraform operation that writes state. Unfortunately automatic state unlocking has failed for that operation.

Which of the below commands can be used to remove the already acquired lock on the state?

terraform unlock

terraform force-unlock

terraform state unlock

None of the above

75. You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need to rerun the script.

Which of the following commands would you use first?

terraform taint null_resource.run_script

terraform apply -target=null_resource.run_script

terraform validate null_resource.run_script

terraform plan -target=null_resource.run_script

76. Changing the Terraform backend from the default "local" backend to a different one after doing your first terraform apply is:

Mandatory

Optional

Impossible

Discouraged

77. }

"15"

Both A and B

None of the above

78. Which of the following statements about local modules is incorrect:

Local modules are not cached by terraform init command

Local modules are sourced from a directory on disk

Local modules support versions

All of the above (all statements above are incorrect

None of the above (all statements above are correct)

79. To check if all code in a Terraform configuration with multiple modules is properly formatted without making changes, what command should be run?

terraform fmt -check

terraform fmt -write-false

terraform fmt "list -recursive

terraform fmt -check -recursive

80. How would you reference the "name" value of the second instance of this fictitious resource?

element(aws_instance.web, 2)

aws_instance.web[1].name

aws_instance.web[1]

aws_instance.web[2].name

aws_instance.web.*.name

Page 9 of 14

81. Your company has a lot of workloads in AWS, and Azure that were respectively created using CloudFormation, and AzureRM Templates. However, now your CIO has decided to use Terraform for all new projects, and has asked you to check how to integrate the existing environment with terraform code.

What should be your next plan of action?

Tell the CIO that this is not possible. Resources created in CloudFormation, and AzureRM templates cannot be tracked using terraform.

Use terraform import command to import each resource one by one .

This is only possible in Terraform Enterprise, which has the TerraformConverter exe that can take any other template language like AzureRM and convert to Terraform code.

Just write the terraform config file for the new resources, and run terraform apply, the state file will automatically be updated with the details of the new resources to be imported.

82. When TF_LOG_PATH is set, TF_LOG must be set in order for any logging to be enabled.

False

True

83. terraform validate validate validates that your infrastructure matches the Terraform state file.

True

False

84. The canonical format may change in minor ways between Terraform versions, so after upgrading Terraform it is recommended to proactively run.

terraform fmt

terraform init

terraform validate

terraform plan

85. How does Terraform determine dependencies between resources?

Terraform automatically builds a resource graph based on resources, provisioners, special meta-parameters, and the state file, if present.

Terraform requires all dependencies between resources to be specified using the depends_on parameter

Terraform requires resources in a configuration to be listed in the order they will be created to determine dependencies

Terraform requires resource dependencies to be defined as modules and sourced in order

86. What does the command terraform fmt do?

Rewrite Terraform configuration files to a canonical format and style.

Deletes the existing configuration file.

Updates the font of the configuration file to the official font supported by HashiCorp.

Formats the state file in order to ensure the latest state of resources can be obtained.

87. You cannot install third party plugins using terraform init.

True

False

88. Which command lets you experiment with Terraform's built-in functions?

terraform env

terraform console

terraform test

terraform validate

89. What does terraform destroy do?

Destroy all infrastructure in the Terraform state file

Destroy all Terraform code files in the current directory while leaving the state file intact

Destroy all infrastructure in the configured Terraform provider

Destroy the Terraform state file while leaving infrastructure intact

90. What is the result of the following terraform function call?

True

False

Page 10 of 14

91. CORRECT TEXT

FILL BLANK

What is the name of the default file where Terraform stores the state?

Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

92. After executing a terraform apply, you notice that a resource has a tilde (~) next to it.

What does this infer?

The resource will be updated in place.

The resource will be created.

Terraform can't determine how to proceed due to a problem with the state file.

The resource will be destroyed and recreated.

93. Multiple configurations for the same provider can be used in a single configuration file.

False

True

94. When using a module block to reference a module stored on the public Terraform Module Registry such as:

How do you specify version 1.0.0?

Modules stored on the public Terraform Module Registry do not support versioning

Append ?ref=v1.0.0 argument to the source path

Add version = "1.0.0" attribute to module block

Nothing C modules stored on the public Terraform Module Registry always default to version 1.0.0

95. Which of the following statements about Terraform modules is not true?

Modules must be publicly accessible

Modules can be called multiple times

Module is a container for one or more resources

Modules can call other modules

96. Forcing the recreation of a resource is useful when you want a certain side effect of recreation that is not visible in the attributes of a resource.

What command will do this?

terraform taint

terraform apply

terraform graph

terraform refresh

97. A colleague has informed you that a new version of a Terraform module that your team hosts on an Amazon S3 bucket is broken. The Amazon S3 bucket has versioning enabled. Your colleague tells you to make sure you are not using the latest version in your configuration.

You have the following configuration block in your code that refers to the module:

module "infranet" { source = "s3::https://s3-us-west-2.amazonaws.com/infrabucket/infra_module.zip"}

What is the best way to ensure that you are not using the latest version of the module?

Add a module version constraint in your configuration's backend block and specify a previous version.

Add a version key to the module configuration and specify a previous version.

Delete the latest version of the module in S3 to rollback to the previous version.

Add a version property to the module in Terraform's state file and specify a previous version.

98. Which of the following best describes a Terraform provider?

A plugin that Terraform uses to translate the API interactions with the service or provider.

Serves as a parameter for a Terraform module that allows a module to be customized.

Describes an infrastructure object, such as a virtual network, compute instance, or other components.

A container for multiple resources that are used together.

99. Your company has been using Terraform Cloud for a some time now. But every team is creating their own modules, and there is no standardization of the modules, with each team creating the resources in their own unique way. You want to enforce a standardization of the modules across the enterprise.

What should be your approach.

Create individual workspaces for each team, and ask them to share modules across workspaces.

Implement a Private module registry in Terraform cloud, and ask teams to reference them.

Upgrade to Terraform enterprise, since this is not possible in terraform cloud.

Upload the modules in the terraform public module registry, and ask teams to reference them

100. Terraform requires the Go runtime as a prerequisite for installation.

True

False

Page 11 of 14

101. Which of the following can you do with terraform plan? Choose two correct answers.

View the execution plan and check if the changes match your expectations

Schedule Terraform to run at a planned time in the future

Execute a plan in a different workspace

Save a generated execution plan to apply later

102. What is the workflow for deploying new infrastructure with Terraform?

terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure

Write a Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure.

terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure

Write a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure changes, and terraform apply to create new infrastructure.

103. Terraform Enterprise (also referred to as pTFE) requires what type of backend database for a clustered deployment?

PostgreSQL

Cassandra

MySQL

MSSQL

104. Terraform variable names are saved in the state file.

True

False

105. terraform validate reports HCL syntax errors.

True

False

106. True or False? terraform init cannot automatically download Community providers.

False

True

107. Select the most accurate statement to describe the Terraform language from the following list.

Terraform is an immutable, declarative, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally JSO

Terraform is a mutable, declarative, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSO

Terraform is an immutable, procedural, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSO

Terraform is a mutable, procedural, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally YAM

108. You have never used Terraform before and would like to test it out using a shared team account for a cloud provider. The shared team account already contains 15 virtual machines (VM). You develop a Terraform configuration containing one VM, perform terraform apply, and see that your VM was created successfully.

What should you do to delete the newly-created VM with Terraform?

The Terraform state file contains all 16 VMs in the team account. Execute terraform destroy and select the newly-created V

The Terraform state file only contains the one new V

Execute terraform destroy.

Delete the Terraform state file and execute Terraform apply.

Delete the VM using the cloud provider console and terraform apply to apply the changes to the Terraform state file.

109. During a terraform apply, a resource is successfully created but eventually fails during provisioning.

What happens to the resource?

The resource will be planned for destruction and recreation upon the next terraform apply

Terraform will retry to provision again.

The failure of provisioner will be ignored and it will not cause a failure to terraform apply

The resource will be automatically destroyed.

110. What is the purpose of using the local-exec provisioner? (Select Two)

To invoke a local executable.

Executes a command on the resource to invoke an update to the Terraform state.

To execute one or more commands on the machine running Terraform.

Ensures that the resource is only executed in the local infrastructure where Terraform is deployed.

Page 12 of 14

111. Which of the following is not a way to trigger terraform destroy?

Passing ---destroy at the end of apian request

Running terraform destroy from the correct directory and then typing "yes" when prompted in the CLI

Using the destroy command with auto approve

Delete the state file and run terraform apply

112. Which of the following is allowed as a Terraform variable name?

count

name

source

version

113. True or False? When using the Terraform provider for Vault, the tight integration between these HashiCorp tools provides the ability to mask secrets in the terraform plan and state files.

False

True

114. You have created a custom variable definition file testing.tfvars.

How will you use it for provisioning infrastructure?

terraform apply -var-state-file ="testing.tfvars"

terraform plan -var-file="testing.tfvar"

terraform apply -var-file="testing.tfvars"

terraform apply var-file="testing.tfvars"

115. Why might a user opt to include the following snippet in their configuration file?

Terraform 0.12 introduced substantial changes to the syntax used to write Terraform configuration

The user wants to ensure that the application being deployed is a minimum version of 0.12

this ensures that all Terraform providers are above a certain version to match the application being deployed

versions before Terraform 0.12 were not approved by HashiCorp to be used in production

116. If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?

Run terraform refresh

It will happen automatically

Manually update the state fire

Run terraform import

117. CORRECT TEXT

FILL BLANK

You need to specify a dependency manually.

What resource meta-parameter can you use to make sure Terraform respects the dependency?

Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

118. Terraform works well in Windows but a Windows server is required.

False

True

119. Which task does teraform init not perform?

Sources any modules and copies the configuration locally

Validates all required variables are present

Connects to the backend

Sources all providers present in the configuration and ensures they are downloaded and available locally

120. You have created a terraform script that uses a lot of new constructs that have been introduced in terraform v0.12. However, many developers who are cloning the script from your git repo, are using v0.11, and getting errors.

What can be done from your end to solve this problem?

Force developer to use v0.12 by using terraform setting ‘required_version’ and set it to >=0.12.

Refactor the code to support both v0.11, and v0.12. It might be a difficult process, but there is no other way.

Add a condition in front of each such specific construct, to check whether the running terraform version id v0.11 or v0.12, and ,work accordingly.

Add comments in your code to tell developers to use v0.12. If they use v0.11, that should be their problem, which they need to figure out.

Page 13 of 14

121. ABC Enterprise has recently tied up with multiple small organizations for exchanging database information. Due to this, the firewall rules are increasing and are more than 100 rules. This is leading firewall configuration file that is difficult to manage.

What is the way this type of configuration can be managed easily?

Terraform Backends

Terraform Functions

Dynamic Blocks

Terraform Expression

122. You have created 2 workspaces PROD and RQA. You have switched to RQA and provisioned RQA infrastructure from this workspace. Where is your state file stored?

terraform.tfstate.d

terraform.d

terraform.tfstate.RQA

terraform.tfstate

123. You have declared a variable called var.list which is a list of objects that all have an attribute id.

Which options will produce a list of the IDs? (Choose two.)

{ for o in var.list: o => o.id }

var.list[*].id

[ var.list[*].id ]

[ for o in var.list: o.id ]

124. You have created a custom variable definition file my_vars.tfvars.

How will you use it for provisioning infrastructure?

terraform apply -var-state-file ="my_vars.tfvars"

terraform apply var-file="my_vars.tfvars"

terraform plan -var-file="my_vars.tfvar"

terraform apply -var-file="my_vars.tfvars"

125. Select the operating systems which are supported for a clustered Terraform Enterprise: (select four)

Unix

Red Hat

CentOS

Amazon Linux

Ubuntu

126. HashiCorp Configuration Language (HCL) supports user-defined functions.

True

False

127. Which of the following is the safest way to inject sensitive values into a Terraform Cloud workspace?

Write the value to a file and specify the file with the -var-file flag

Set a value for the variable in the UI and check the "Sensitive" check box

Edit the state file directly just before running terraform apply

Set the variable value on the command line with the -var flag

128. What feature of Terraform Cloud and/or Terraform Enterprise can you publish and maintain a set of custom modules which can be used within your organization?

Terraform registry

custom VCS integration

private module registry

remote runs

129. What is the provider for this fictitious resource?

vpc

main

aws

test

130. Terraform-specific settings and behaviors are declared in which configuration block type?

provider

terraform

resource

data

Page 14 of 14

131. Which of the following actions are performed during a terraform init?

Initializes downloaded and/or installed providers

Initializes the backend configuration

Provisions the declared resources in your configuration

Download the declared providers which are supported by HashiCorp

132. A user has created three workspaces using the command line - prod, dev, and test. The user wants to create a fourth workspace named stage.

Which command will the user execute to accomplish this?

terraform workspace new stage

terraform workspace -new stage

terraform workspace -create stage

terraform workspace create stage

133. terraform destroy is the only way to remove infrastructure.

True

False

134. When you initialize Terraform, where does it cache modules from the public Terraform Module Registry?

On disk in the /tmp directory

In memory

On disk in the .terraform sub-directory

They are not cached

Facebook Twitter LinkedIn Google + Email

HashiCorp Certified: Terraform Associate TA-002-P Dumps Questions

Author

LEAVE A COMMENT Cancel reply