HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 201:

  Which of the following actions are performed during a terraform init?

  A. Initializes downloaded and/or installed providers

  B. Initializes the backend configuration

  C. Provisions the declared resources in your configuration

  D. Download the declared providers which are supported by HashiCorp

  Correct Answer: ABD

  The terraform init command is used to initialize a working directory containing Terraform configuration files. This is the first command that should be run after writing a new Terraform configuration or cloning an existing one from version

  control. It is safe to run this command multiple times.

  This command is always safe to run multiple times, to bring the working directory up to date with changes in the configuration. Though subsequent runs may give errors, this command will never delete your existing configuration or state.

  terraform init command does

  *

  Copy a Source Module

  *

  Backend Initialization

  *

  Child Module Installation

  *

  Plugin Installation https://www.terraform.io/docs/commands/init.html

• Question 202:

  Module version is required to reference a module on the Terraform Module Registry.

  A. True

  B. False

  Correct Answer: B

• Question 203:

  Why should secrets not be hard coded into Terraform code? Choose two correct answers

  A. All passwords should be rotated on a quarterly basis.

  B. The Terraform code is copied to the target resources to be applied locally and could expose secrets if a target resource is compromised.

  C. Terraform code is typically stored in version control, as well as copied to the systems from h it's run. Any of those may not have robust security mechanisms.

  D. It makes the code less reusable.

  Correct Answer: BC

• Question 204:

  Your developers are facing a lot of problem while writing complex expressions involving difficult interpolations . They have to run the terraform plan every time and check whether there are errors , and also check terraform apply to print the value as a temporary output for debugging purposes. What should be done to avoid this?

  A. Use terraform console command to have an interactive UI with full access to the underlying terraform state to run your interpolations , and debug at real-time.

  B. Add a breakpoint in your code, using the watch keyword , and output the value to console for temporary debugging.

  C. Use terraform zipmap function , it will be able to easily do the interpolations without complex code.

  D. Use terraform console command to have an interactive UI , but you can only use it with local state , and it does not work with remote state.

  Correct Answer: A

  The terraform console command provides an interactive console for evaluating expressions. This is useful for testing interpolations before using them in configurations, and for interacting with any values currently saved in state. https:// www.terraform.io/docs/commands/console.html

• Question 205:

  In terraform, most resource dependencies are handled automatically. Which of the following statements describes best how terraform resource dependencies are handled?

  A. Resource dependencies are identified and maintained in a file called resource.dependencies. Each terraform provider is required to maintain a list of all resource dependencies for the provider and it's included with the plugin during initialization when terraform init is executed. The file is located in the terraform.d folder.

  B. The terraform binary contains a built-in reference map of all defined Terraform resource dependencies. Updates to this dependency map are reflected in terraform versions. To ensure you are working with the latest resource dependency map you much be running the latest version of Terraform.

  C. Resource dependencies are handled automatically by the depends_on meta_argument, which is set to true by default.

  D. Terraform analyses any expressions within a resource block to find references to other objects, and treats those references as implicit ordering requirements when creating, updating, or destroying resources.

  Correct Answer: D

  https://www.terraform.io/docs/configuration/resources.html

• Question 206:

  Given the Terraform configuration below, in which order will the resources be created?

  1.

  resource "aws_instance" "web_server"

  2.

  {

  3.

  ami = "ami-b374d5a5"

  4.

  instance_type = "t2.micro"

  5.

  }

  6.

  resource "aws_eip" "web_server_ip"

  7.

  {

  8.

  vpc = true instance = aws_instance.web_server.id

  9.

  }

  A. aws_eip will be created first aws_instance will be created second

  B. aws_eip will be created first aws_instance will be created second

  C. Resources will be created simultaneously

  D. aws_instance will be created first aws_eip will be created second

  Correct Answer: D

  Implicit and Explicit Dependencies

  By studying the resource attributes used in interpolation expressions, Terraform can automatically infer when one resource depends on another. In the example above, the reference to aws_instance.web_server.id creates an implicit

  dependency on the aws_instance named web_server.

  Terraform uses this dependency information to determine the correct order in which to create the different resources.

  # Example of Implicit Dependency

  resource "aws_instance" "web_server" {

  ami = "ami-b374d5a5"

  instance_type = "t2.micro"

  }

  resource "aws_eip" "web_server_ip" {

  vpc = true

  instance = aws_instance.web_server.id

  }

  In the example above, Terraform knows that the aws_instance must be created before the aws_eip.

  Implicit dependencies via interpolation expressions are the primary way to inform Terraform about these relationships, and should be used whenever possible. Sometimes there are dependencies between resources that are not visible to

  Terraform. The depends_on argument is accepted by any resource and accepts a list of resources to create explicit dependencies for. For example, perhaps an application we will run on our EC2 instance expects to use a specific Amazon S3

  bucket, but that dependency is configured inside the application code and thus not visible to Terraform. In that case, we can use depends_on to explicitly declare the dependency:

  # Example of Explicit Dependency

  # New resource for the S3 bucket our application will use.

  resource "aws_s3_bucket" "example" {

  bucket = "terraform-getting-started-guide"

  acl = "private"

  }

  # Change the aws_instance we declared earlier to now include "depends_on" resource "aws_instance" "example" {

  ami = "ami-2757f631"

  instance_type = "t2.micro"

  # Tells Terraform that this EC2 instance must be created only after the # S3 bucket has been created.

  depends_on = [aws_s3_bucket.example]

  }

  https://learn.hashicorp.com/terraform/getting-started/dependencies.html

• Question 207:

  terraform destroy is the only way to remove infrastructure.

  A. True

  B. False

  Correct Answer: B

• Question 208:

  You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully. What will happen if you terraform apply again immediately afterwards without changing any Terraform code?

  A. Terraform will terminate and recreate the VM

  B. Terraform will create another duplicate VM

  C. Terraform will apply the VM to the state file

  D. Nothing

  Correct Answer: D

• Question 209:

  You have created a main.tr Terraform configuration consisting of an application server, a database, and a load balancer. You ran terraform apply and all resources were created successfully. Now you realize that you do not actually need the load balancer so you run terraform destroy without any flags

  What will happen?

  A. Terraform will destroy the application server because it is listed first in the code

  B. Terraform will prompt you to confirm that you want to destroy all the infrastructure

  C. Terraform will destroy the main.tf file

  D. Terraform will prompt you to pick which resource you want to destroy

  E. Terraform will immediately destroy all the infrastructure

  Correct Answer: B

• Question 210:

  Select all features which are exclusive to Terraform Enterprise. (Select Three)

  A. Sentinel

  B. Cost Estimation

  C. Audit Logs

  D. Clustering

  E. SAML/SSO

  Correct Answer: CDE

  Sentinel and Cost Estimation are also available in Terraform Cloud https://www.hashicorp.com/products/terraform/pricing/