HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 101:

  True or False? Each Terraform workspace uses its own state file to manage the infrastructure associated with that particular workspace.

  A. False

  B. True

  Correct Answer: B

  The persistent data stored in the backend belongs to a workspace. Initially, the backend has only one workspace, called "default", and thus there is only one Terraform state associated with that configuration.

• Question 102:

  Select two answers to complete the following sentence: Before a new provider can be used, it must be ______ and _______.

  A. approved by HashiCorp

  B. uploaded to source control

  C. declared in the configuration

  D. initialized

  Correct Answer: CD

  Each time a new provider is added to configuration--either explicitly via a provider block or by adding a resource from that provider--Terraform must initialize the provider before it can be used. Initialization downloads and installs the provider's plugin so that it can later be executed.

• Question 103:

  You just upgraded the version of a provider in an existing Terraform project. What do you need to do to install the new provider?

  A. Run terraform apply-upgrade

  B. Run terraform init-upgrade

  C. Run terraform refresh

  D. Upgrade your version of Terraform

  Correct Answer: B

  [-upgrade]-Opt to upgrade modules and plugins as part of their respective installation steps. See the sections below for more details.

  Reference: https://www.terraform.io/cli/commands/init#upgrade

• Question 104:

  Your company has a lot of workloads in AWS , and Azure that were respectively created using CloudFormation , and AzureRM Templates. However , now your CIO has decided to use Terraform for all new projects , and has asked you to

  check how to integrate the existing environment with terraform code. What should be your next plan of action?

  A. Tell the CIO that this is not possible . Resources created in CloudFormation , and AzureRM templates cannot be tracked using terraform.

  B. Use terraform import command to import each resource one by one .

  C. This is only possible in Terraform Enterprise , which has the TerraformConverter exe that can take any other template language like AzureRM and convert to Terraform code.

  D. Just write the terraform config file for the new resources , and run terraform apply , the state file will automatically be updated with the details of the new resources to be imported.

  Correct Answer: B

• Question 105:

  Your team has started using terraform OSS in a big way , and now wants to deploy multi region deployments (DR) in aws using the same terraform files . You want to deploy the same infra (VPC,EC2 ...) in both us-east-1 ,and us-west-2 using the same script , and then peer the VPCs across both the regions to enable DR traffic. But , when you run your script , all resources are getting created in only the default provider region. What should you do? Your provider setting is as below

  # The default provider configuration provider "aws" { region = "us-east-1" }

  A. No way to enable this via a single script . Write 2 different scripts with different default providers in the 2 scripts , one for us-east , another for us-west.

  B. Create a list of regions , and then use a for-each to iterate over the regions , and create the same resources ,one after the one , over the loop.

  C. Use provider alias functionality , and add another provider for us-west region . While creating the resources using the tf script , reference the appropriate provider (using the alias).

  D. Manually create the DR region , once the Primary has been created , since you are using terraform OSS , and multi region deployment is only available in Terraform Enterprise.

  Correct Answer: C

  You can optionally define multiple configurations for the same provider, and select which one to use on a per-resource or per-module basis. The primary reason for this is to support multiple regions for a cloud platform; other examples include

  targeting multiple Docker hosts, multiple Consul hosts, etc.

  To include multiple configurations for a given provider, include multiple provider blocks with the same provider name, but set the alias meta-argument to an alias name to use for each additional configuration. For example:

  # The default provider configuration

  provider "aws" {

  region = "us-east-1"

  }

  # Additional provider configuration for west coast region provider "aws" {

  alias = "west"

  region = "us-west-2"

  }

  https://www.terraform.io/docs/configuration/providers.html

• Question 106:

  terraform validate validate validates that your infrastructure matches the Terraform state file.

  A. True

  B. False

  Correct Answer: B

  The terraform validate command validates the configuration files in a directory, referring only to the configuration and not accessing any remote services such as remote state, provider APIs, etc. Validate runs checks that verify whether a

  configuration is syntactically valid and internally consistent, regardless of any provided variables or existing state. It is thus primarily useful for general verification of reusable modules, including correctness of attribute names and value types.

  Source:

  https://www.terraform.io/cli/commands/validate

• Question 107:

  Anyone can publish and share modules on the Terraform Public Module Registry, and meeting the requirements for publishing a module is extremely easy. Select from the following list all valid requirements. (select three)

  A. The module must be PCI/HIPPA compliant.

  B. Module repositories must use this three-part name format, terraform--.

  C. The registry uses tags to identify module versions.

  D. Release tag names must be for the format x.y.z, and can optionally be prefixed with a v .

  E. The module must be on GitHub and must be a public repo.

  Correct Answer: CDE

  https://www.terraform.io/docs/registry/modules/publish.html#requirements

• Question 108:

  What does the command terraform fmt do?

  A. Rewrite Terraform configuration files to a canonical format and style.

  B. Deletes the existing configuration file.

  C. Updates the font of the configuration file to the official font supported by HashiCorp.

  D. Formats the state file in order to ensure the latest state of resources can be obtained.

  Correct Answer: A

  The terraform fmt command is used to rewrite Terraform configuration files to a canonical format and style. This command applies a subset of the Terraform language style conventions, along with other minor adjustments for readability. Other Terraform commands that generate Terraform configuration will produce configuration files that conform to the style imposed by terraform fmt, so using this style in your own files will ensure consistency. https://www.terraform.io/docs/commands/fmt.html

• Question 109:

  In the example below, where is the value of the DNS record's IP address originating from?

  1.

  resource "aws_route53_record" "www"

  2.

  {

  3.

  zone_id = aws_route53_zone.primary.zone_id

  4.

  name = "www.example.com"

  5.

  type = "A"

  6.

  ttl = "300"

  7.

  records = [module.web_server.instance_ip_address]

  8.

  }

  A. The regular expression named module.web_server

  B. The output of a module named web_server

  C. By querying the AWS EC2 API to retrieve the IP address

  D. Value of the web_server parameter from the variables.tf file

  Correct Answer: B

  In a parent module, outputs of child modules are available in expressions as module..

  .

  For example, if a child module named web_server declared an output named instance_ip_address, you could access that value as module.web_server.instance_ip_address.

• Question 110:

  When using providers that require the retrieval of data, such as the HashiCorp Vault provider, in what phase does Terraform actually retrieve the data required?

  A. terraform delete

  B. terraform plan

  C. terraform init

  D. terraform apply

  Correct Answer: C