HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 211:

  What does state locking accomplish?

  A. Copies the state file from memory to disk

  B. Encrypts any credentials stored within the state file

  C. Blocks Terraform commands from modifying the state file

  D. Prevents accidental deletion of the state file

  Correct Answer: C

  If supported by your backend, Terraform will lock your state for all operations that could write state. This prevents others from acquiring the lock and potentially corrupting your state. Source: https://www.terraform.io/language/state/locking

• Question 212:

  What command can you run to generate DOT (Document Template) formatted data to visualize Terraform dependencies?

  A. terraform refresh

  B. terraform show

  C. terraform graph

  D. terraform output

  Correct Answer: C

  The terraform graph command is used to generate a visual representation of either a configuration or execution plan. The output is in the DOT format, which can be used by GraphViz to generate charts.

• Question 213:

  HashiCorp offers multiple versions of Terraform, including Terraform open-source, Terraform Cloud, and Terraform Enterprise. Which of the following Terraform features are only available in the Enterprise edition? (select four)

  A. SAML/SSO

  B. Sentinel

  C. Audit Logs

  D. Clustering

  E. Private Module Registry

  F. Private Network Connectivity

  Correct Answer: ACF

  While there are a ton of features that are available to open source users, many features that are part of the Enterprise offering are geared towards larger teams and enterprise functionality. To see what specific features are part of Terraform Cloud and Terraform Enterprise, check out this link. https://www.hashicorp.com/products/terraform/pricing/

• Question 214:

  In a Terraform Cloud workspace linked to a version control repository, speculative plan runs start automatically when you merge or commit changes to version control.

  A. True

  B. False

  Correct Answer: B

• Question 215:

  Your team lead does not trust the junior terraform engineers who now have access to the git repo . So , he wants you to have some sort of a checking layer , whereby , you can ensure that the juniors will not create any non-compliant resources that might lead to a security audit failure in future. What can you do to efficiently enforce this?

  A. Create a design /security document (in PDF) and share to the team , and ask them to always follow that document , and never deviate from it.

  B. Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and write Policy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.

  C. Use Terraform OSS Sentinel Lite version , which will save cost , since there is no charge for OSS , but it can still check for most non-compliant rules using Policy-As-Code.

  D. Create a git master branch , and implement PR . Every change needs to be reviewed by you , before being merged to the master branch.

  Correct Answer: B

  Sentinel is an embedded policy-as-code framework integrated with the HashiCorp Enterprise products. It enables fine-grained, logic-based policy decisions, and can be extended to use information from external sources. https:// www.terraform.io/docs/cloud/sentinel/index.html

• Question 216:

  Choose the answer that correctly completes the sentence: _______backends support state locking.

  A. All

  B. No

  C. Only local

  D. Some

  Correct Answer: D

• Question 217:

  Which of the following is not a benefit of adopting infrastructure as code?

  A. Automation

  B. Versioning

  C. Reusability of code

  D. Interpolation

  Correct Answer: D

• Question 218:

  When using constraint expressions to signify a version of a provider, which of the following are valid provider versions that satisfy the expression found in the following code snippet: (select two)

  1.

  terraform

  2.

  {

  3.

  required_providers

  4.

  {

  5.

  aws = "~> 1.2.0"

  6.

  }

  7.

  }

  A. 1.3.1

  B. 1.2.3

  C. 1.2.9

  D. 1.3.0

  Correct Answer: BC

  As your Terraform usage becomes more advanced, there are some cases where you may need to modify the Terraform state. Rather than modify the state directly, the terraform state commands can be used in many cases instead. This command is a nested subcommand, meaning that it has further subcommands. https://www.terraform.io/docs/commands/state/index.html

• Question 219:

  You have decided to create a new Terraform workspace to deploy a development environment. What is different about this workspace?

  A. It uses a different branch of code

  B. It uses a different backend

  C. It has its own state file

  D. It pulls in a different terraform.tvars file

  Correct Answer: C

• Question 220:

  Which of the following terraform subcommands could be used to remove the lock on the state for the current configuration?

  A. Unlock

  B. force-unlock

  C. Removing the lock on a state file is not possible

  D. state-unlock

  Correct Answer: B

  https://www.terraform.io/docs/commands/force-unlock.html