HashiCorp HashiCorp Certifications VA-002-P Questions & Answers

• Question 91:

  What is a downside to using a Terraform provider, such as the Vault provider, to interact with sensitive data, such as reading secrets from Vault?

  A. Terraform and Vault must be running on the same physical host

  B. Terraform and Vault must be running on the same version

  C. Terraform requires a unique auth method to work with Vault

  D. Secrets are persisted to the state file and plans

  Correct Answer: D

  Interacting with Vault from Terraform causes any secrets that you read and write to be persisted in both Terraform's state file and in any generated plan files. For any Terraform module that reads or writes Vault secrets, these files should be treated as sensitive and protected accordingly.

• Question 92:

  Which of the following best describes a Terraform provider?

  A. describes an infrastructure object, such as a virtual network, compute instance, or other components

  B. a container for multiple resources that are used together

  C. serves as a parameter for a Terraform module that allows a module to be customized

  D. a plugin that Terraform uses to translate the API interactions with the service or provider

  Correct Answer: D

  A provider is responsible for understanding API interactions and exposing resources. Providers generally are an IaaS (e.g., Alibaba Cloud, AWS, GCP, Microsoft Azure, OpenStack), PaaS (e.g., Heroku), or SaaS services (e.g., Terraform Cloud, DNSimple, CloudFlare).

• Question 93:

  What happens when a terraform apply command is executed?

  A. applies the changes required in the target infrastructure in order to reach the desired configuration

  B. creates the execution plan for the deployment of resources

  C. reconciles the state Terraform knows about with the real-world infrastructure

  D. the backend is initialized and the working directory is prepped

  Correct Answer: A

  The terraform apply command is used to apply the changes required to reach the desired state of the configuration, or the pre-determined set of actions generated by a terraform plan execution plan.

• Question 94:

  Which of the following is considered a Terraform plugin?

  A. Terraform logic

  B. Terraform language

  C. Terraform tooling

  D. Terraform provider

  Correct Answer: D

  Terraform is built on a plugin-based architecture. All providers and provisioners that are used in Terraform configurations are plugins, even the core types such as AWS and Heroku. Users of Terraform are able to write new plugins in order to support new functionality in Terraform.

• Question 95:

  From the answers below, select the advantages of using Infrastructure as Code. (select four)

  A. Easily integrate with application workflows (GitLab Actions, Azure DevOps, CI/CD tools)

  B. Safely test modifications using a "dry run" before applying any actual changes

  C. Provide reusable modules for easy sharing and collaboration

  D. Easily change and update existing infrastructure

  E. Provide a codified workflow to develop customer-facing applications

  Correct Answer: ABCD

  Infrastructure as Code is not used to develop applications, but it can be used to help deploy or provision those applications to a public cloud provider or on-premises infrastructure. All of the others are benefits to using Infrastructure as Code over the traditional way of managing infrastructure, regardless if it's public cloud or on-premises.

• Question 96:

  When using parent/child modules to deploy infrastructure, how would you export value from one module to import into another module? For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

  A. configure an output value in the application module in order to use that value for the DNS module

  B. preconfigure the IP address as a parameter in the DNS module

  C. configure the pertinent provider's configuration with a list of possible IP addresses to use

  D. export the value using terraform export and input the value using terraform input

  Correct Answer: A

  Output values are like the return values of a Terraform module and have several uses such as a child module using those outputs to expose a subset of its resource attributes to a parent module.

• Question 97:

  You have been given requirements to create a security group for a new application. Since your organization standardizes on Terraform, you want to add this new security group with the fewest number of lines of code. What feature could you use to iterate over a list of required tcp ports to add to the new security group?

  A. terraform import

  B. splat expression

  C. dynamic block

  D. dynamic backend

  Correct Answer: C

  A dynamic block acts much like a for expression but produces nested blocks instead of a complex typed value. It iterates over a given complex value and generates a nested block for each element of that complex value.

• Question 98:

  Select the feature below that best completes the sentence:

  The following list represents the different types of __________ available in Terraform.

  1.

  max

  2.

  min

  3.

  join

  4.

  replace

  5.

  list

  6.

  length

  7.

  range

  A. named values

  B. backends

  C. functions

  D. data sources

  Correct Answer: C

  The Terraform language includes a number of built-in functions that you can call from within expressions to transform and combine values. The Terraform language does not support user-defined functions, and only the functions built into the language are available for use.

• Question 99:

  After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?

  A. the resource will be destroyed and recreated

  B. the resource will be created

  C. Terraform can't determine how to proceed due to a problem with the state file

  D. the resource will be updated in place

  Correct Answer: D

  The prefix -/+ means that Terraform will destroy and recreate the resource, rather than updating it in-place. Some attributes and resources can be updated in-place and are shown with the ~ prefix.

• Question 100:

  What does the command terraform fmt do?

  A. formats the state file in order to ensure the latest state of resources can be obtained

  B. updates the font of the configuration file to the official font supported by HashiCorp

  C. rewrite Terraform configuration files to a canonical format and style

  D. deletes the existing configuration file

  Correct Answer: C

  The terraform fmt command is used to rewrite Terraform configuration files to a canonical format and style.

  This command applies a subset of the Terraform language style conventions, along with other minor

  adjustments for readability.

  Other Terraform commands that generate Terraform configuration will produce configuration files that

  conform to the style imposed by terraform fmt, so using this style in your own files will ensure consistency.