HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 191:

  What is the purpose of a Terraform workspace in either open source of enterprise?

  A. Workspaces allow you to manage collections of infrastructure in state files.

  B. A logical separation of business units

  C. A method of grouping multiple infrastructure security policies

  D. Provides limited access to a cloud environment

  Correct Answer: B

• Question 192:

  You have created a custom variable definition file my_vars.tfvars. How will you use it for provisioning infrastructure?

  A. terraform apply-var-state-file ="my_vars.tfvars"

  B. terraform apply var-file="my_vars.tfvars"

  C. terraform plan-var-file="my_vars.tfvar"

  D. terraform apply-var-file="my_vars.tfvars"

  Correct Answer: D

  To set lots of variables, it is more convenient to specify their values in a variable definitions file (with a filename ending in either .tfvars or .tfvars.json) and then specify that file on the command line with-var-file:

  terraform apply-var-file="my_vars.tfvars"

  https://www.terraform.io/docs/configuration/variables.html#variable-definitions-tfvars-files

• Question 193:

  Provider dependencies are created in several different ways. Select the valid provider dependencies from the following list: (select three)

  A. Explicit use of a provider block in configuration, optionally including a version constraint.

  B. Use of any resource belonging to a particular provider in a resource or data block in configuration.

  C. Existence of any resource instance belonging to a particular provider in the current state.

  D. Existence of any provider plugins found locally in the working directory.

  Correct Answer: ABC

  The existence of a provider plugin found locally in the working directory does not itself create a provider dependency. The plugin can exist without any reference to it in the terraform configuration. https://www.terraform.io/docs/commands/ providers.html

• Question 194:

  As a member of the operations team, you need to run a script on a virtual machine created by Terraform. Which provisioned is best to use in your Terraform code?

  A. local-exec

  B. file

  C. null-exec

  D. remote-exec

  Correct Answer: D

  https://www.terraform.io/language/resources/provisioners/remote-exec

• Question 195:

  A Terraform backend determines how Terraform loads state and stores updates when you execute ___________.

  A. apply

  B. taint

  C. destroy

  D. All of the above

  E. None of the above

  Correct Answer: D

• Question 196:

  You are creating a Terraform configuration which needs to make use of multiple providers, one for AWS and one for Datadog.

  Which of the following provider blocks would allow you to do this?

  

  

  A. Option A

  B. Option B

  C. Option C

  Correct Answer: B

  https://www.terraform.io/language/providers/configuration

• Question 197:

  terraform validate reports HCL syntax errors.

  A. True

  B. False

  Correct Answer: A

• Question 198:

  Talal is a DevOps engineer and he has deployed the production infrastructure using Terraform. He is using a very large configuration file to maintain and update the actual infrastructure. As the infrastructure have grown to a very complex and large, he has started experiencing slowness when he run runs terraform plan. What are the options for him to resolve this slowness?

  A. Use-refresh=true flag as well as the-target flag with terraform plan in order to work around this.

  B. Run terraform refresh every time before running terraform plan.

  C. Break large configurations into several smaller configurations that can each be independently applied.

  D. Use-refresh=false flag as well as the-target flag with terraform plan in order to work around this.

  Correct Answer: CD

  For larger infrastructures, querying every resource is too slow. Many cloud providers do not provide APIs to query multiple resources at once, and the round trip time for each resource is hundreds of milliseconds. On top of this, cloud providers almost always have API rate limiting so Terraform can only request a certain number of resources in a period of time. Larger users of Terraform make heavy use of the-refresh=false flag as well as the-target flag in order to work around this. In these scenarios, the cached state is treated as the record of truth. Although 'Use-refresh=false flag as well as the-target flag with terraform plan in order to work around this.' is a solution, but its not always recommended. Instead of using-target as a means to operate on isolated portions of very large configurations, prefer instead to break large configurations into several smaller configurations that can each be independently applied. Data sources can be used to access information about resources created in other configurations, allowing a complex system architecture to be broken down into more manageable parts that can be updated independently. Option 'Run terraform refresh every time before running terraform plan.' and 'Use-refresh=true flag as well as the-target flag with terraform plan in order to work around this.' is not correct because in both the cases terraform will query every resources of the infrastructure.

• Question 199:

  Which of the following is the safest way to inject sensitive values into a Terraform Cloud workspace?

  A. Write the value to a file and specify the file with the-var-file flag

  B. Set a value for the variable in the UI and check the "Sensitive" check box

  C. Edit the state file directly just before running terraform apply

  D. Set the variable value on the command line with the-var flag

  Correct Answer: B

  -var and-var-file overwrite workspace-specific and variable set variables that have the same key. From the workspace, variable can be added and checked off as being sensitive. Reference: https://www.terraform.io/cloud-docs/workspaces/

  variables/managing-variables#loading-variables-from-files https://www.terraform.io/cloud-docs/workspaces/variables

• Question 200:

  As a member of an operations team that uses infrastructure as code (laC) practices, you are tasked with making a change to an infrastructure stack running in a public cloud. Which pattern would follow laC best practices for making a change?

  A. Make the change via the public cloud API endpoint

  B. Make the change programmatically via the public cloud CLI

  C. Submit a pull request and wait for an approved merge of the proposed changes

  D. Use the public cloud console to make the change after a database record has been approved

  E. Clone the repository containing your infrastructure code and then run the code

  Correct Answer: C