HashiCorp HashiCorp Certifications TERRAFORM-ASSOCIATE-003 Questions & Answers

• Question 91:

  If a DevOps team adopts AWS CloudFormation as their standardized method for provisioning public cloud resoruces, which of the following scenarios poses a challenge for this team?

  A. The team is asked to manage a new application stack built on AWS-native services

  B. The organization decides to expand into Azure wishes to deploy new infrastructure

  C. The team is asked to build a reusable code based that can deploy resources into any AWS region

  D. The DevOps team is tasked with automating a manual, web console-based provisioning.

  Correct Answer: B

  This is the scenario that poses a challenge for this team, if they adopt AWS CloudFormation as their standardized method for provisioning public cloud resources, as CloudFormation only supports AWS services and resources, and cannot be used to provision infrastructure on other cloud platforms such as Azure.

• Question 92:

  Which method for sharing Terraform configurations fulfills the following criteria:

  1. Keeps the configurations confidential within your organization

  2. Support Terraform's semantic version constrains

  3. Provides a browsable directory

  A. Subfolder within a workspace

  B. Generic git repository

  C. Terraform Cloud private registry

  D. Public Terraform module registry

  Correct Answer: C

  This is the method for sharing Terraform configurations that fulfills the following criteria:

  Keeps the configurations confidential within your organization Supports Terraform's semantic version constraints

  Provides a browsable directory

  The Terraform Cloud private registry is a feature of Terraform Cloud that allows you to host and manage your own modules within your organization, and use them in your Terraform configurations with versioning and access control.

• Question 93:

  Module version is required to reference a module on the Terraform Module Registry.

  A. True

  B. False

  Correct Answer: B

  Module version is optional to reference a module on the Terraform Module Registry. If you omit the version constraint, Terraform will automatically use the latest available version of the module

• Question 94:

  You have created a main.tf Terraform configuration consisting of an application server, a database and a load balanced. You ran terraform apply and Terraform created all of the resources successfully. Now you realize that you do not actually need the load balancer, so you run terraform destroy without any flags. What will happen?

  A. Terraform will prompt you to pick which resource you want to destroy

  B. Terraform will destroy the application server because it is listed first in the code

  C. Terraform will prompt you to confirm that you want to destroy all the infrastructure

  D. Terraform will destroy the main, tf file

  E. Terraform will immediately destroy all the infrastructure

  Correct Answer: C

  This is what will happen if you run terraform destroy without any flags, as it will attempt to delete all the resources that are associated with your current working directory or workspace. You can use the -target flag to specify a particular resource that you want to destroy.

• Question 95:

  You're building a CI/CD (continuous integration/continuous delivery) pipeline and need to inject sensitive variables into your Terraform run. How can you do this safely?

  A. Copy the sensitive variables into your Terraform code

  B. Store the sensitive variables in a secure_varS.tf file

  C. Store the sensitive variables as plain text in a source code repository

  D. Pass variables to Terraform with a -var flag

  Correct Answer: D

  This is a secure way to inject sensitive variables into your Terraform run, as they will not be stored in any file or source code repository. You can also use environment variables or variable files with encryption to pass sensitive variables to Terraform.

• Question 96:

  If a module declares a variable with a default, that variable must also be defined within the module.

  A. True

  B. False

  Correct Answer: B

  A module can declare a variable with a default value without requiring the caller to define it. This allows the module to provide a sensible default behavior that can be customized by the caller if needed. References = [Module Variables]

• Question 97:

  How does Terraform manage most dependencies between resources?

  A. Terraform will automatically manage most resource dependencies

  B. Using the depends_on parameter

  C. By defining dependencies as modules and including them in a particular order

  D. The order that resources appear in Terraform configuration indicates dependencies

  Correct Answer: A

  This is how Terraform manages most dependencies between resources, by using the references between them in the configuration files. For example, if resource A depends on resource B, Terraform will create resource B first and then pass its attributes to resource A.

• Question 98:

  Which of the following should you put into the required_providers block?

  A. version >= 3.1

  B. version = ">= 3.1"

  C. version ~> 3.1

  Correct Answer: B

  The required_providers block is used to specify the provider versions that the configuration can work with. The version argument accepts a version constraint string, which must be enclosed in double quotes. The version constraint string can use operators such as >=, ~>, =, etc. to specify the minimum, maximum, or exact version of the provider. For example, version = ">= 3.1" means that the configuration can work with any provider version that is 3.1 or higher. References = [Provider Requirements] and [Version Constraints]

• Question 99:

  What type of block is used to construct a collection of nested configuration blocks?

  A. Dynamic

  B. For_each

  C. Nesting

  D. repeated.

  Correct Answer: A

  This is the type of block that is used to construct a collection of nested configuration blocks, by using a for_each argument to iterate over a collection value and generate a nested block for each element. For example, you can use a dynamic block to create multiple ingress rules for a security group resource.

• Question 100:

  Which of the following statements about Terraform modules is not true?

  A. Modules can call other modules

  B. A module is a container for one or more resources

  C. Modules must be publicly accessible

  D. You can call the same module multiple times

  Correct Answer: C

  This is not true, as modules can be either public or private, depending on your needs and preferences. You can use the Terraform Registry to publish and consume public modules, or use Terraform Cloud or Terraform Enterprise to host and manage private modules.