HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 141:

  Which of the following is true about Terraform's implementation of infrastructure as code? (Choose two.)

  A. It is only compatible with AWS infrastructure management

  B. You cannot reuse infrastructure configuration

  C. You can version your infrastructure configuration

  D. It requires manual configuration of infrastructure resources

  E. It allows you to automate infrastructure provisioning

  Correct Answer: CE

• Question 142:

  terraform apply is failing with the following error. What next step should you take to determine the root cause of the problem? Error loading state: AccessDenied: Access Denied status code: 403, request id: 288766CE5CCA24A0, host id: FOOBAR

  A. Set TF_LOG=DEBUG

  B. Review syslog for Terraform error messages

  C. Run terraform login to reauthenticate with the provider

  D. Review /var/log/terraform.log for error messages

  Correct Answer: A

  Terraform has detailed logs which can be enabled by setting the TF_LOG environment variable to any value. This will cause detailed logs to appear on stderr. You can set TF_LOG to one of the log levels (in order of decreasing verbosity) TRACE, DEBUG, INFO, WARN or ERROR to change the verbosity of the logs.

• Question 143:

  Named workspaces are not a suitable isolation mechanism for strong separation between staging and production?

  A. True

  B. False

  Correct Answer: A

  Organizations commonly want to create a strong separation between multiple deployments of the same infrastructure serving different development stages (e.g. staging vs. production) or different internal teams. In this case, the backend used for each deployment often belongs to that deployment, with different credentials and access controls. Named workspaces are not a suitable isolation mechanism for this scenario. https://www.terraform.io/docs/state/workspaces.html#when-touse-multiple-workspaces

• Question 144:

  Most Terraform providers interact with ____________.

  A. API

  B. VCS Systems

  C. Shell scripts

  D. None of the above

  Correct Answer: A

  Terraform relies on plugins called "providers" to interact with cloud providers, SaaS providers, and other APIs, as per: https://www.terraform.io/language/providers

• Question 145:

  When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

  A. a private install

  B. disconnected

  C. air-gapped

  D. non-traditional

  Correct Answer: D

  A Terraform Enterprise install that is provisioned on a network that does not have Internet access is generally known as an air-gapped install. These types of installs require you to pull updates, providers, etc. from external sources vs. being able to download them directly.

• Question 146:

  Which of the following connection types are supported by the remote-exec provisioner? (select two)

  A. WinRM

  B. UDP

  C. SMB

  D. RDP

  E. ssh

  Correct Answer: AE

  The remote-exec provisioner invokes a script on a remote resource after it is created. The remote-exec provisioner supports both ssh and winrm type connections. remote-exec connection types

  *

  ssh on Linux

  *

  winrm on Windows https://www.terraform.io/docs/provisioners/remote-exec.html

• Question 147:

  colleagues is new toTerraform and wants to add a new workspace named new-hire. What command he should execute from the following?

  A. terraform workspace-new-new-hire

  B. terraform workspace new new hire

  C. terraform workspace init new-hire

  D. terraform workspace new-hire

  Correct Answer: B

• Question 148:

  What is the result of the following terraform function call?

  A. hello

  B. what?

  C. goodbye

  Correct Answer: B

  https://www.terraform.io/docs/configuration/functions/lookup.html

• Question 149:

  During a terraform plan, a resource is successfully created but eventually fails during provisioning. What happens to the resource?

  A. Terraform attempts to provision the resource up to three times before exiting with an error

  B. the terraform plan is rolled back and all provisioned resources are removed

  C. it is automatically deleted

  D. the resource is marked as tainted

  Correct Answer: D

  If a resource successfully creates but fails during provisioning, Terraform will error and mark the resource as "tainted". A resource that is tainted has been physically created, but can't be considered safe to use since provisioning failed. Terraform also does not automatically roll back and destroy the resource during the apply when the failure happens, because that would go against the execution plan: the execution plan would've said a resource will be created, but does not say it will ever be deleted.

• Question 150:

  When should Terraform configuration files be written when running terraform import on existing infrastructure?

  A. Infrastructure can be imported without corresponding Terraform code

  B. Terraform will generate the corresponding configuration files for you

  C. You should write Terraform configuration files after the next terraform import is executed

  D. Terraform configuration should be written before terraform import is executed

  Correct Answer: D

  The current implementation of Terraform import can only import resources into the state. It does not generate configuration. A future version of Terraform will also generate configuration.

  Because of this, prior to running terraform import it is necessary to write manually a resource configuration block for the resource, to which the imported object will be mapped.

  Source: https://www.terraform.io/cli/import