HashiCorp HashiCorp Certifications TERRAFORM-ASSOCIATE-003 Questions & Answers

• Question 111:

  You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create any outputs for your code. What is the best method to quickly find the IP address of the resource you deployed?

  A. In a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file

  B. Run terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address

  C. Run terraform output ip_address to view the result

  D. Run terraform destroy then terraform apply and look for the IP address in stdout

  Correct Answer: B

  This is a quick way to inspect the state file and find the information you need without modifying anything5. The other options are either incorrect or inefficient.

• Question 112:

  What value does the Terraform Cloud private registry provide over the public Terraform Module Registry?

  A. The ability to share modules publicly with any user of Terraform

  B. The ability to restrict modules to members of Terraform Cloud or Enterprise organizations

  C. The ability to tag modules by version or release

  D. The ability to share modules with public Terraform users and members of Terraform Cloud Organizations

  Correct Answer: B

  The Terraform Cloud private registry provides the ability to restrict modules to members of Terraform Cloud or Enterprise organizations. This allows you to share modules within your organization without exposing them to the public. The private registry also supports importing modules from your private VCS repositories. The public Terraform Module Registry, on the other hand, publishes modules from public Git repositories and makes them available to any user of Terraform. References = : Private Registry - Terraform Cloud : Terraform Registry - Provider Documentation

• Question 113:

  Which of the following commands would you use to access all of the attributes and details of a resource managed by Terraform?

  A. terraform state list `provider_type.name'

  B. terraform state show `provider_type.name'

  C. terraform get `provider_type.name'

  D. terraform state list

  Correct Answer: B

  The terraform state show command allows you to access all of the attributes and details of a resource managed by Terraform. You can use the resource address (e.g. provider_type.name) as an argument to show the information about a

  specific resource. The terraform state list command only shows the list of resources in the state, not their attributes. The terraform get command downloads and installs modules needed for the configuration. It does not show any information

  about resources. References = [Command:

  state show] and [Command: state list]

• Question 114:

  Which of the following command would be use to access all of the attributes and details of a resource managed by Terraform?

  A. Terraform state show ` provider_type_name

  B. Terraform state list

  C. Terraform get provider_type_name

  D. Terraform state list provider_type_name

  Correct Answer: A

  This is the command that you would use to access all of the attributes and details of a resource managed by Terraform, by providing the resource address as an argument. For example, terraform state show 'aws_instance.example' will show you all the information about the AWS instance named example.

• Question 115:

  What does Terraform not reference when running a terraform apply -refresh-only ?

  A. State file

  B. Credentials

  C. Cloud provider

  D. Terraform resource definitions in configuration files

  Correct Answer: D

  When running a terraform apply -refresh-only, Terraform does not reference the configuration files, but only the state file, credentials, and cloud provider. The purpose of this command is to update the state file with the current status of the real resources, without making any changes to them1.

• Question 116:

  Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files. How can you protect that data?

  A. Edit your state file to scrub out the sensitive data

  B. Always store your secrets in a secrets.tfvars file

  C. Delete the state file every time you run Terraform

  D. Store the state in an encrypted backend

  Correct Answer: D

  This is a secure way to protect sensitive data in the state file, as it will be encrypted at rest and in transit2. The other options are not recommended, as they could lead to data loss, errors, or security breaches.

• Question 117:

  As a developer, you want to ensure your plugins are up to date with the latest versions. Which Terraform command should you use?

  A. terraform refresh -upgrade

  B. terraform apply -upgrade

  C. terraform init -upgrade

  D. terraform providers -upgrade

  Correct Answer: C

  This command will upgrade the plugins to the latest acceptable version within the version constraints specified in the configuration. The other commands do not have an - upgrade option.

• Question 118:

  You must use different Terraform commands depending on the cloud provider you use.

  A. True

  B. False

  Correct Answer: B

  You do not need to use different Terraform commands depending on the cloud provider you use. Terraform commands are consistent across different providers, as they operate on the Terraform configuration files and state files, not on the provider APIs directly.

• Question 119:

  When do changes invoked by terraform apply take effect?

  A. After Terraform has updated the state file

  B. Once the resource provider has fulfilled the request

  C. Immediately

  D. None of the above are correct

  Correct Answer: B

  Changes invoked by terraform apply take effect once the resource provider has fulfilled the request, not after Terraform has updated the state file or immediately. The state file is only a reflection of the real resources, not a source of truth.

• Question 120:

  Which provider authentication method prevents credentials from being stored in the state file?

  A. Using environment variables

  B. Specifying the login credentials in the provider block

  C. Setting credentials as Terraform variables

  D. None of the above

  Correct Answer: D

  None of the above methods prevent credentials from being stored in the state file. Terraform stores the provider configuration in the state file, which may include sensitive information such as credentials. This is a potential security risk and should be avoided if possible. To prevent credentials from being stored in the state file, you can use one of the following methods: Use environment variables to pass credentials to the provider. This way, the credentials are not part of the provider configuration and are not stored in the state file. However, this method may not work for some providers that require credentials to be set in the provider block. Use dynamic credentials to authenticate with your cloud provider. This way, Terraform Cloud or Enterprise will request temporary credentials from your cloud provider for each run and use them to provision your resources. The credentials are not stored in the state file and are revoked after the run is completed. This method is supported for AWS, Google Cloud Platform, Azure, and Vault. References = : [Sensitive Values in State] : Authenticate providers with dynamic credentials