HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 301:

  Which of the below terraform commands do not run terraform refresh implicitly before taking actual action of the command?

  A. terraform apply

  B. terraform destroy

  C. terraform init

  D. terraform import

  E. terraform plan

  Correct Answer: CD

  https://www.terraform.io/docs/commands/refresh.html

• Question 302:

  What is the purpose of using the local-exec provisioner? (Select Two)

  A. To invoke a local executable.

  B. Executes a command on the resource to invoke an update to the Terraform state.

  C. To execute one or more commands on the machine running Terraform.

  D. Ensures that the resource is only executed in the local infrastructure where Terraform is deployed.

  Correct Answer: AC

  The local-exec provisioner invokes a local executable after a resource is created. This invokes a process on the machine running Terraform, not on the resource. Note that even though the resource will be fully created when the provisioner is

  run, there is no guarantee that it will be in an operable state-for example system services such as sshd may not be started yet on compute resources.

  Example usage

  resource "aws_instance" "web" {

  # ...

  provisioner "local-exec" {

  command = "echo ${aws_instance.web.private_ip} >> private_ips.txt" }

  }

  Note: Provisioners should only be used as a last resort. For most common situations there are better alternatives.

  https://www.terraform.io/docs/provisioners/local-exec.html

• Question 303:

  Which of the below configuration file formats are supported by Terraform? (Select TWO)

  A. Node

  B. JSON

  C. Go

  D. YAML

  E. HCL

  Correct Answer: BE

  Terraform supports both HashiCorp Configuration Language (HCL) and JSON formats for configurations. https://www.terraform.io/docs/configuration/

• Question 304:

  When using remote state, state is only ever held in memory when used by Terraform.

  A. False

  B. True

  Correct Answer: B

• Question 305:

  terraform refresh command will not modify infrastructure, but does modify the state file.

  A. True

  B. False

  Correct Answer: A

  The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. This can be used to detect any drift from the last-known state, and to update the state file. This does not modify infrastructure, but does modify the state file. https://www.terraform.io/docs/commands/refresh.html

• Question 306:

  Environment variables can be used to set variables. The environment variables must be in the format "____"_. Select the correct prefix string from the following list.

  A. TF_CLI_ARGS

  B. TF_VAR

  C. TF_VAR_

  D. TF_VAR_ENV

  Correct Answer: C

  Environment variables can be used to set variables. The environment variables must be in the format TF_VAR_name and this will be checked last for a value. For example:

  export TF_VAR_region=us-west-1

  export TF_VAR_ami=ami-049d8641

  export TF_VAR_alist='[1,2,3]'

  export TF_VAR_amap='{ foo = "bar", baz = "qux" }'

  https://www.terraform.io/docs/commands/environment-variables.html

• Question 307:

  Matt wants to import a manually created EC2 instance into terraform so that he can manage the EC2 instance through terraform going forward. He has written the configuration file of the EC2 instance before importing it to Terraform. Following is the code:

  resource "aws_instance" "matt_ec2" { ami = "ami-bg2640de" instance_type = "t2.micro" vpc_security_group_ids = ["sg-6ae7d613", "sg-53370035"] key_name = "mysecret" subnet_id = "subnet-9e3cfbc5" }

  The instance id of that EC2 instance is i-0260835eb7e9bd40 How he can import data of EC2 to state file?

  A. terraform import aws_instance.id = i-0260835eb7e9bd40

  B. terraform import i-0260835eb7e9bd40

  C. terraform import aws_instance.i-0260835eb7e9bd40

  D. terraform import aws_instance.matt_ec2 i-0260835eb7e9bd40

  Correct Answer: D

  https://www.terraform.io/docs/import/usage.html

• Question 308:

  You are using a terraform operation that writes state. Unfortunately automatic state unlocking has failed for that operation. Which of the below commands can be used to remove the already acquired lock on the state?

  A. terraform unlock

  B. terraform force-unlock

  C. terraform state unlock

  D. None of the above

  Correct Answer: B

  Command: force-unlock

  Manually unlock the state for the defined configuration. This will not modify your infrastructure. This command removes the lock on the state for the current configuration. The behavior of this lock is dependent on the backend being used.

  Local state files cannot be unlocked by another process. https://www.terraform.io/docs/commands/force-unlock.html https://www.terraform.io/docs/state/locking.html Terraform has a force-unlock command to manually unlock the state if

  unlocking failed. If you unlock the state when someone else is holding the lock it could cause multiple writers. Force unlock should only be used to unlock your own lock in the situation where automatic unlocking failed.

• Question 309:

  Which of the following clouds does not have a provider maintained HashiCorp?

  A. IBM Cloud

  B. DigitalOcean

  C. OpenStack

  D. AWS

  Correct Answer: A

  IBM Cloud does not have a provider maintained by HashiCorp, although IBM Cloud does maintain their own Terraform provider. https://www.terraform.io/docs/providers/index.html

• Question 310:

  Workspaces in Terraform provides similar functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

  A. True

  B. False

  Correct Answer: B

  https://www.terraform.io/docs/cloud/migrate/workspaces.html Workspaces, managed with the terraform workspace command, aren't the same thing as Terraform Cloud's workspaces. Terraform Cloud workspaces act more like completely separate working directories; CLI workspaces are just alternate state files.