HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 151:

  How does Terraform determine dependencies between resources?

  A. Terraform automatically builds a resource graph based on resources, provisioners, special meta-parameters, and the state file, if present.

  B. Terraform requires all dependencies between resources to be specified using the depends_on parameter

  C. Terraform requires resources in a configuration to be listed in the order they will be created to determine dependencies

  D. Terraform requires resource dependencies to be defined as modules and sourced in order

  Correct Answer: A

  https://learn.hashicorp.com/tutorials/terraform/dependencies

• Question 152:

  Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

  A. terraform validate

  B. terraform format

  C. terraform fmt

  D. terraform show

  Correct Answer: A

  The terraform validate command validates the configuration files in a directory, referring only to the configuration and not accessing any remote services such as remote state, provider APIs, etc. Validate runs checks that verify whether a

  configuration is syntactically valid and internally consistent, regardless of any provided variables or existing state. It is thus primarily useful for general verification of reusable modules, including the correctness of attribute names and value

  types.

  It is safe to run this command automatically, for example as a post-save check in a text editor or as a test step for a re-usable module in a CI system.

• Question 153:

  A variable az has the following default value. What will be the datatype of the variable?

  az=["us-west-1a","us-east-1a"]

  A. Object

  B. List

  C. Map

  D. String

  Correct Answer: B

• Question 154:

  While attempting to deploy resources into your cloud provider using Terraform. you begin to see some odd behavior and experience sluggish responses. In order to troubleshoot you decide to turn on Terraform debugging.

  Which environment variables must be configured to make Terraform's logging more verbose?

  A. TF_10G_PATM

  B. TF_LOG

  C. TF_10G_LEVEL

  D. TF.LOG.FUE

  Correct Answer: B

  https://www.terraform.io/internals/debugging

• Question 155:

  John is writing a module and within the module, there are multiple places where he has to use the same conditional expression but he wants to avoid repeating the same values or expressions multiple times in a configuration,. What is a better approach to dealing with this?

  A. Local Values

  B. Expressions

  C. Functions

  D. Variables

  Correct Answer: A

  A local value assigns a name to an expression, allowing it to be used multiple times within a module without repeating it. https://www.terraform.io/docs/configuration/locals.html

• Question 156:

  Given the below resource configuration-resource "aws_instance" "web" { # ... count = 4 }

  What does the terraform resource address aws_instance.web refer to?

  A. It refers to all 4 web instances , together , for further individual segregation , indexing is required , with a 0 based index.

  B. It refers to the last web EC2 instance , as by default , if no index is provided , the last / N-1 index is used.

  C. It refers to the first web EC2 instance out of the 4 ,as by default , if no index is provided , the first / 0th index is used.

  D. The above will result in a syntax error , as it is not syntactically correct . Resources defined using count , can only be referenced using indexes.

  Correct Answer: A

  A Resource Address is a string that references a specific resource in a larger infrastructure.

  An address is made up of two parts:

  [module path][resource spec]

  Module path:

  A module path addresses a module within the tree of modules. It takes the form:

  module.A.module.B.module.C...

  Multiple modules in a path indicate nesting. If a module path is specified without a resource spec, the address applies to every resource within the module. If the module path is omitted, this addresses the root module.

  Given a Terraform config that includes:

  resource "aws_instance" "web" {

  # ...

  count = 4

  }

  An address like this:

  aws_instance.web[3]

  Refers to only the last instance in the config, and an address like this:

  aws_instance.web

  Refers to all four "web" instances.

  https://www.terraform.io/docs/internals/resource-addressing.html

• Question 157:

  True or False? By default, Terraform destroy will prompt for confirmation before proceeding.

  A. False

  B. True

  Correct Answer: B

• Question 158:

  Your organization has moved to AWS and has manually deployed infrastructure using the console. Recently, a decision has been made to standardize on Terraform for all deployments moving forward.

  What can you do to ensure that all existing is managed by Terraform moving forward without interruption to existing services?

  A. Submit a ticket to AWS and ask them to export the state of all existing resources and use terraform import to import them into the state file.

  B. Delete the existing resources and recreate them using new a Terraform configuration so Terraform can manage them moving forward.

  C. Resources that are manually deployed in the AWS console cannot be imported by Terraform.

  D. Using terraform import, import the existing infrastructure into your Terraform state.

  Correct Answer: D

  Terraform is able to import existing infrastructure. This allows us take resources we've created by some other means (i.e. via console) and bring it under Terraform management. This is a great way to slowly transition infrastructure to

  Terraform. The terraform import command is used to import existing infrastructure. To import a resource, first write a resource block for it in our configuration, establishing the name by which it will be known to Terraform.

  Example:

  resource "aws_instance" "import_example" {

  # ...instance configuration...

  }

  Now terraform import can be run to attach an existing instance to this resource configuration.

  $ terraform import aws_instance.import_example i-03efafa258104165f aws_instance.import_example: Importing from ID "i-03efafa258104165f"...

  aws_instance.import_example: Import complete!

  Imported aws_instance (ID: i-03efafa258104165f)

  aws_instance.import_example: Refreshing state... (ID: i-03efafa258104165f) Import successful!

  The resources that were imported are shown above. These resources are now in your Terraform state and will henceforth be managed by Terraform. This command locates the AWS instance with ID i-03efafa258104165f (which has been

  created outside Terraform) and attaches its existing settings, as described by the EC2 API, to the name aws_instance.import_example in the Terraform state.

• Question 159:

  Which of the following statements best describes the Terraform list(...) type?

  A. a collection of values where each is identified by a string label.

  B. a sequence of values identified by consecutive whole numbers starting with zero.

  C. a collection of unique values that do not have any secondary identifiers or ordering.

  D. a collection of named attributes that each have their own type.

  Correct Answer: B

  A terraform list is a sequence of values identified by consecutive whole numbers starting with zero. https://www.terraform.io/docs/configuration/types.html#structural-types

• Question 160:

  What is a downside to using the Vault provider to read secrets from Vault?

  A. Secrets are persisted to the state file and plans.

  B. Terraform and Vault must be running on the same version.

  C. Terraform and Vault must be running on the same physical host.

  D. Terraform requires a unique auth method to work with Vault.

  Correct Answer: A

  The Vault provider allows Terraform to read from, write to, and configure Hashicorp Vault. Interacting with Vault from Terraform causes any secrets that you read and write to be persisted in both Terraform's state file and in any generated plan files. For any Terraform module that reads or writes Vault secrets, these files should be treated as sensitive and protected accordingly.