HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 171:

  Your configuration file has been locked accidentally. What of the following command would you use to unlock?

  A. terraform filename-unlock

  B. delete the file and create a new state file

  C. terraform force-unlock

  D. state.tf-unlock

  Correct Answer: C

• Question 172:

  When does Sentinel enforce policy logic during a Terraform Enterprise run?

  A. Before the plan phase

  B. During the plan phase

  C. Before the a apply phase

  D. After the apply phase

  Correct Answer: C

  "Enforcing policy checks on runs-Policies are checked when a run is performed, after the terraform plan but before it can be confirmed or the terraform apply is executed."

• Question 173:

  Terra form installs its providers during which phase?

  A. Man

  B. Init

  C. Refresh

  D. All of the above

  Correct Answer: B

  Providers are installed in the init phase

• Question 174:

  Valarie has created a database instance in AWS and for ease of use is outputting the value of the database password with the following code. Valarie wants to hide the output value in the CLI after terraform apply that's why she has used sensitive parameter.

  1.

  output "db_password" {

  2.

  value = local.db_password

  3.

  sensitive = true

  4.

  }

  Since sensitive is set to true, will the value associated with db password be available in plain-text in the state file for everyone to read?

  A. Yes

  B. No

  Correct Answer: A

  Outputs can be marked as containing sensitive material by setting the sensitive attribute to true, like this: output "sensitive" { sensitive = true value = VALUE } When outputs are displayed on-screen following a terraform apply or terraform refresh, sensitive outputs are redacted, with displayed in place of their value. Limitations of Sensitive Outputs The values of sensitive outputs are still stored in the Terraform state, and available using the terraform output command, so cannot be relied on as a sole means of protecting values. Sensitivity is not tracked internally, so if the output is interpolated in another module into a resource, the value will be displayed.

• Question 175:

  You have modified your Terraform configuration to fix a typo in the Terraform ID of a resource from aws_security_group.http to aws_security_group.http

  

  Which of the following commands would you run to update the ID in state without destroying the resource?

  A. terraform refresh

  B. terraform apply

  C. terraform mv aws-security-group.htp aws-security-group.http

  Correct Answer: C

  The terraform state mv command changes which resource address in your configuration is associated with a particular real-world object. Use this to preserve an object when renaming a resource, or when moving a resource into or out of a child module.

• Question 176:

  Which of the following value will be accepted for my_var?

  1.

  variable "my_var"

  2.

  {

  3.

  type = string

  4.

  }

  B. "15"

  C. Both A and B

  D. None of the above

  Correct Answer: C

  The Terraform language will automatically convert number and bool values to string values when needed, and vice-versa as long as the string contains a valid representation of a number or boolean value. Example

  *

  true converts to "true", and vice-versa

  *

  false converts to "false", and vice-versa

  *

  15 converts to "15", and vice-versa Where possible, Terraform automatically converts values from one type to another in order to produce the expected type. If this isn't possible, Terraform will produce a type mismatch error and you must update the configuration with a more suitable expression. https://www.terraform.io/docs/configuration/expressions.html#type-conversion

• Question 177:

  What are some of the features of Terraform state? (select three)

  A. inspection of cloud resources

  B. determining the correct order to destroy resources

  C. mapping configuration to real-world resources

  D. increased performance

  Correct Answer: CD

• Question 178:

  Jack is a newbieto Terraform and wants to enable detailed logging to find all the details. Which environment variable does he need to set?

  A. TF_help

  B. TF LOG

  C. TF_Debug

  D. TF_var_log

  Correct Answer: B

• Question 179:

  What does terraform destroy do?

  A. Destroy all infrastructure in the Terraform state file

  B. Destroy all Terraform code files in the current directory while leaving the state file intact

  C. Destroy all infrastructure in the configured Terraform provider

  D. Destroy the Terraform state file while leaving infrastructure intact

  Correct Answer: A

  The terraform destroy command terminates resources managed by your Terraform project. This command is the inverse of terraform apply in that it terminates all the resources specified in your Terraform state. It does not destroy resources running elsewhere that are not managed by the current Terraform project.

  https://learn.hashicorp.com/tutorials/terraform/aws-destroy

• Question 180:

  Which is the best way to specify a tag of v1.0.0 when referencing a module stored in Git (for example git::https://example.com/vpc.git)?

  A. Append ref=v1. 0. 0 argument to the source path Most Voted

  B. Add version = "1.0.0" parameter to module block

  C. Nothing " modules stored on GitHub always default to version 1.0.0

  D. Modules stored on GitHub do not support versioning

  Correct Answer: A

  https://www.terraform.io/language/modules/sources#selecting-a-revision