HashiCorp HashiCorp Certifications TA-002-P Questions & Answers

• Question 81:

  What kind of configuration block will create an infrastructure object with settings specified in the block?

  A. state

  B. provider

  C. resource

  D. data

  Correct Answer: C

• Question 82:

  You want to share Terraform state with your team, store it securely and provide state locking. How would you do this? Choose three correct answers.

  A. Using the consul Terraform backend.

  B. Using the remote Terraform backend with Terraform Cloud / Terraform Enterprise.

  C. Using the local backend.

  D. Using the s3 terraform backend. The dynamodb_field option e not needed.

  E. Using an s3 terraform backend with an appropriate IAM policy and dynamodb_field option configured.

  Correct Answer: ABE

• Question 83:

  Your firm employs a version control system (for example, git) and has requested that you commit all terraform code to it. During the commit, you must be cautious with sensitive information. Which of the following files should be left out of the commit?

  A. main.tf

  B. variables.tf

  C. provisioner.tf

  D. terraform.tfstate

  Correct Answer: D

• Question 84:

  True or False? terraform init cannot automatically download Community providers.

  A. False

  B. True

  Correct Answer: B

• Question 85:

  Which of the following locations can Terraform use as a private source for modules? (Choose two.)

  A. Internally hosted SCM (Source Control Manager) platform

  B. Public Terraform Module Registry

  C. Private repository on GitHub

  D. Public repository on GitHub

  Correct Answer: AC

• Question 86:

  When using multiple configurations of the same Terraform provider, what meta-argument must be included in any non-default provider configurations?

  A. name

  B. alias

  C. depends_on

  D. id

  Correct Answer: B

• Question 87:

  What is a key benefit of the Terraform state file?

  A. A state file represents a source of truth for resources provisioned with a public cloud console

  B. A state file represents a source of truth for resources provisioned with Terraform

  C. A state file represents the desired state expressed by the Terraform code files D A state file can be used to schedule recurring infrastructure tasks

  Correct Answer: C

• Question 88:

  Which of the following is not supported backend types in Terra form?

  A. consul

  B. gcs

  C. manta

  D. bitbucket

  Correct Answer: D

• Question 89:

  True or False? When using the Terraform provider for Vault, the tight integration between these HashiCorp tools provides the ability to mask secrets in the terraform plan and state files.

  A. False

  B. True

  Correct Answer: A

  Currently, Terraform has no mechanism to redact or protect secrets that are returned via data sources, so secrets read via this provider will be persisted into the Terraform state, into any plan files, and in some cases in the console output produced while planning and applying. These artifacts must, therefore, all be protected accordingly.

• Question 90:

  If a DevOps team adopts AWS Cloud Formation as their standardized method for provisioning public cloud resources, which of the following scenarios poses a challenge for this team?

  A. The team is asked to manage a new application stack built on AWS-natrve services

  B. The organization decides to expand into Azure and wishes to deploy new infrastructure using their existing codebase

  C. The team is asked to build a reusable code base that can deploy resources into any AWS region

  D. The DevOps team is tasked with automating a manual provisioning process

  Correct Answer: B