HashiCorp HashiCorp Certifications TA-003-P Questions & Answers

• Question 71:

  HashiCorp Configuration Language (HCL) supports user-denned functions.

  A. True

  B. False

  Correct Answer: B

  HashiCorp Configuration Language (HCL) does not support user-defined functions. You can only use the built-in functions that are provided by the language. The built-in functions allow you to perform various operations and transformations on values within expressions. The general syntax for function calls is a function name followed by comma-separated arguments in parentheses, such as max(5, 12, 9). You can find the documentation for all of the available built-in functions in the Terraform Registry or the Packer Documentation, depending on which tool you are using. References = : Functions - Configuration Language | Terraform : Functions - Configuration Language | Packer

• Question 72:

  Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to store the state file in a central location. Which of the following backends would not work?

  A. Artifactory

  B. Amazon S3

  C. Terraform Cloud

  D. Git

  Correct Answer: D

  This is not a valid backend for Terraform, as it does not support locking or versioning of state files4. The other options are valid backends that can store state files in a central location.

• Question 73:

  A developer accidentally launched a VM (virtual machine) outside of the Terraform workflow and ended up with two servers with the same name. They don't know which VM Terraform manages but do have a list of all active VM IDs. Which of the following methods could you use to discover which instance Terraform manages?

  A. Run terraform state list to find the names of all VMs, then run terraform state show for each of them to find which VM ID Terraform manages

  B. Update the code to include outputs for the ID of all VMs, then run terraform plan to view the outputs

  C. Run terraform taint/code on all the VMs to recreate them

  D. Use terraform refresh/code to find out which IDs are already part of state

  Correct Answer: A

  The terraform state list command lists all resources that are managed by Terraform in the current state file1. The terraform state show command shows the attributes of a single resource in the state file2. By using these two commands, you can compare the VM IDs in your list with the ones in the state file and identify which one is managed by Terraform.

• Question 74:

  What does the default "local" Terraform backend store?

  A. tfplan files

  B. State file

  C. Provider plugins

  D. Terraform binary

  Correct Answer: B

  The default "local" Terraform backend stores the state file in a local file named terraform.tfstate, which can be used to track and manage the state of your infrastructure3.

• Question 75:

  Which of the following module source paths does not specify a remote module?

  A. Source = "module/consul''

  B. Source = `'githhub.comicrop/example''

  C. Source =''[email protected]:hasicrop/example.git''

  D. Source = `'hasicrop/consul/aws''

  Correct Answer: A

  The module source path that does not specify a remote module is source = "module/consul". This specifies a local module, which is a module that is stored in a subdirectory of the current working directory. The other options are all examples of remote modules, which are modules that are stored outside of the current working directory and can be accessed by various protocols, such as Git, HTTP, or the Terraform Registry. Remote modules are useful for sharing and reusing code across different configurations and environments. References = [Module Sources], [Local Paths], [Terraform Registry], [Generic Git Repository], [GitHub]

• Question 76:

  Which of the following is not a valid siring function in Terraform?

  A. choaf

  B. join

  C. Split

  D. slice

  Correct Answer: A

  This is not a valid string function in Terraform. The other options are valid string functions that can manipulate strings in various ways2.

• Question 77:

  Which command lets you experiment with terraform expressions?

  A. Terraform console

  B. Terraform validate

  C. Terraform env

  D. Terraform test

  Correct Answer: A

  This is the command that lets you experiment with Terraform expressions, by providing an interactive console that allows you to evaluate expressions and see their results. You can use this command to test your expressions before using them in your configuration files.

• Question 78:

  How could you reference an attribute from the vsphere_datacenter data source for use with the datacenter_id argument within the vsphere_folder resource in the following configuration?

  

  A. Data.vsphere_datacenter.DC.id

  B. Vsphere_datacenter.dc.id

  C. Data,dc,id

  D. Data.vsphere_datacenter,dc

  Correct Answer: A

  The correct way to reference an attribute from the vsphere_datacenter data source for use with the datacenter_id argument within the vsphere_folder resource in the following configuration is data.vsphere_datacenter.dc.id. This follows the

  syntax for accessing data source attributes, which is data.TYPE.NAME.ATTRIBUTE. In this case, the data source type is vsphere_datacenter, the data source name is dc, and the attribute we want to access is id. The other options are

  incorrect because they either use the wrong syntax, the wrong punctuation, or the wrong case. References = [Data Source:

  vsphere_datacenter], [Data Source: vsphere_folder], [Expressions: Data Source References]

• Question 79:

  Setting the TF_LOG environment variable to DEBUG causes debug messages to be logged into stdout.

  A. True

  B. False

  Correct Answer: A

  Setting the TF_LOG environment variable to DEBUG causes debug messages to be logged into stdout, along with other log levels such as TRACE, INFO, WARN, and ERROR. This can be useful for troubleshooting or debugging purposes.

• Question 80:

  Which of these ate secure options for storing secrets for connecting to a Terraform remote backend? Choose two correct answers.

  A. A variable file

  B. Defined in Environment variables

  C. Inside the backend block within the Terraform configuration

  D. Defined in a connection configuration outside of Terraform

  Correct Answer: BD

  Environment variables and connection configurations outside of Terraform are secure options for storing secrets for connecting to a Terraform remote backend. Environment variables can be used to set values for input variables that contain secrets, such as backend access keys or tokens. Terraform will read environment variables that start with TF_VAR_ and match the name of an input variable. For example, if you have an input variable called backend_token, you can set its value with the environment variable TF_VAR_backend_token1. Connection configurations outside of Terraform are files or scripts that provide credentials or other information for Terraform to connect to a remote backend. For example, you can use a credentials file for the S3 backend2, or a shell script for the HTTP backend3. These files or scripts are not part of the Terraform configuration and can be stored securely in a separate location. The other options are not secure for storing secrets. A variable file is a file that contains values for input variables. Variable files are usually stored in the same directory as the Terraform configuration or in a version control system. This exposes the secrets to anyone who can access the files or the repository. You should not store secrets in variable files1. Inside the backend block within the Terraform configuration is where you specify the type and settings of the remote backend. The backend block is part of the Terraform configuration and is usually stored in a version control system. This exposes the secrets to anyone who can access the configuration or the repository. You should not store secrets in the backend block4. References = [Terraform Input Variables]1, [Backend Type: s3]2, [Backend Type: http]3, [Backend Configuration]4