HashiCorp HashiCorp Certifications VA-002-P Questions & Answers

• Question 51:

  What is the purpose of using the local-exec provisioner? (select two)

  A. ensures that the resource is only executed in the local infrastructure where Terraform is deployed

  B. to execute one or more commands on the machine running Terraform

  C. to invoke a local executable

  D. executes a command on the resource to invoke an update to the Terraform state

  Correct Answer: BC

  The local-exec provisioner invokes a local executable after a resource is created. This invokes a process on the machine running Terraform, not on the resource. Note that even though the resource will be fully created when the provisioner is run, there is no guarantee that it will be in an operable state - for example, system services such as sshd may not be started yet on compute resources.

• Question 52:

  Which flag would be used within a Terraform configuration block to identify the specific version of a provider required?

  A. required-provider

  B. required_versions

  C. required_providers

  D. required-version

  Correct Answer: C

  For production use, you should constrain the acceptable provider versions via configuration file to ensure

  that new versions with breaking changes will not be automatically installed by terraform init in the future.

  When terraform init is run without provider version constraints, it prints a suggested version constraint

  string for each provider

  For example:

  terraform {

  required_providers {

  aws = ">= 2.7.0"

  }

  }

• Question 53:

  Terraform-specific settings and behaviors are declared in which configuration block type?

  A. data

  B. resource

  C. terraform

  D. provider

  Correct Answer: C

  The special terraform configuration block type is used to configure some behaviors of Terraform itself, such as requiring a minimum Terraform version to apply your configuration.

• Question 54:

  Select the answer below that completes the following statement: Terraform Cloud can be managed from the CLI but requires __________?

  A. a TOTP token

  B. a username and password

  C. authentication using MFA

  D. an API token

  Correct Answer: D

  API and CLI access are managed with API tokens, which can be generated in the Terraform Cloud UI. Each user can generate any number of personal API tokens, which allow access with their own identity and permissions. Organizations and teams can also generate tokens for automating tasks that aren't tied to an individual user.

• Question 55:

  Why is it a good idea to declare the required version of a provider in a Terraform configuration file?

  1.

  terraform {

  2.

  required_providers {

  3.

  aws = "~> 1.0"

  4.

  }

  5.

  }

  A. to remove older versions of the provider

  B. to ensure that the provider version matches the version of Terraform you are using

  C. providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes

  D. to match the version number of your application being deployed via Terraform

  Correct Answer: C

  Providers are plugins released on a separate rhythm from Terraform itself, and so they have their own version numbers. For production use, you should constrain the acceptable provider version via configuration. This helps to ensure that new versions with potentially breaking changes will not be automatically installed by terraform init in the future.

• Question 56:

  By default, where does Terraform store its state file?

  A. shared directory

  B. current working directory

  C. Amazon S3 bucket D. remotely using Terraform Cloud

  Correct Answer: B

  By default, the state file is stored in a local file named "terraform.tfstate", but it can also be stored remotely, which works better in a team environment.

• Question 57:

  You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?

  A. run terraform refresh to ensure that the state file has the latest information for existing resources.

  B. update the configuration file to include the new resources

  C. modify the Terraform state file to add the new resources

  D. shut down or stop using the resources being imported so no changes are inadvertently missed

  Correct Answer: B

  The current implementation of Terraform import can only import resources into the state. It does not

  generate a configuration. Because of this, and prior to running terraform import, it is necessary to manually

  write a resource configuration block for the resource to which the imported object will be mapped.

  First, add the resources to the configuration file:

  resource "aws_instance" "example" {

  # ...instance configuration...

  }

  Then run the following command:

  $ terraform import aws_instance.example i-abcd1234

• Question 58:

  Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)

  A. output.tf

  B. terraform.tfstate

  C. terraform.tfvars

  D. variables.tf

  Correct Answer: BC

  The .gitignore file should be configured to ignore Terraform files that either contain sensitive data or aren't required to save. The terraform.tfstate file contains the terraform state of a specific environment and doesn't need to be preserved in a repo. The terraform.tfvars file may contain sensitive data, such as passwords or IP addresses of an environment that you may not want to share with others.

• Question 59:

  What happens when a terraform plan is executed?

  A. the backend is initialized and the working directory is prepped

  B. creates an execution plan and determines what changes are required to achieve the desired state in the configuration files.

  C. applies the changes required in the target infrastructure in order to reach the desired configuration

  D. reconciles the state Terraform knows about with the real-world infrastructure

  Correct Answer: B

  The terraform plan command is used to create an execution plan. Terraform performs a refresh, unless explicitly disabled, and then determines what actions are necessary to achieve the desired state specified in the configuration files. After a plan has been run, it can be executed by running a terraform apply

• Question 60:

  Your organization has moved to AWS and has manually deployed infrastructure using the console. Recently, a decision has been made to standardize on Terraform for all deployments moving forward. What can you do to ensure that all existing is managed by Terraform moving forward without interruption to existing services?

  A. resources that are manually deployed in the AWS console cannot be imported by Terraform

  B. using terraform import, import the existing infrastructure into your Terraform state

  C. delete the existing resources and recreate them using new a Terraform configuration so Terraform can manage them moving forward

  D. submit a ticket to AWS and ask them to export the state of all existing resources and use terraform import to import them into the state file

  Correct Answer: B

  Terraform is able to import existing infrastructure. This allows you to take resources you've created by some other means and bring it under Terraform management. This is a great way to slowly transition infrastructure to Terraform or to be sure you're confident that you can use Terraform in the future if it currently doesn't support every AWS service or feature you need today.