HashiCorp HashiCorp Certifications VA-002-P Questions & Answers

• Question 61:

  When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state does not become corrupt?

  A. state locking

  B. object storage

  C. encryption

  D. workspaces

  Correct Answer: A

  If supported by your backend, Terraform will lock your state for all operations that could write state. This prevents others from acquiring the lock and potentially corrupting your state. State locking happens automatically on all operations that could write state. You won't see any message that it is happening. If state locking fails, Terraform will not continue. You can disable state locking for most commands with the lock flag but it is not recommended.

• Question 62:

  Which of the following allows Terraform users to apply policy as code to enforce standardized configurations for resources being deployed via infrastructure as code?

  A. functions

  B. workspaces

  C. module registry

  D. sentinel

  Correct Answer: D

  Sentinel is an embedded policy-as-code framework integrated with the HashiCorp Enterprise products. It enables fine-grained, logic-based policy decisions, and can be extended to use information from external sources.

• Question 63:

  Which of the following actions are performed during a terraform init? (select three)

  A. provisions the declared resources in your configuration

  B. download the declared providers which are supported by HashiCorp

  C. initializes the backend configuration

  D. initializes downloaded and/or installed providers

  Correct Answer: BCD

  The terraform init command is used to initialize a working directory containing Terraform configuration files. This is the first command that should be run after writing a new Terraform configuration or cloning an existing one from version control. It is safe to run this command multiple times.

• Question 64:

  True or False: You can migrate the Terraform backend but only if there are no resources currently being managed.

  A. False

  B. True

  Correct Answer: A

  If you are already using Terraform to manage infrastructure, you probably want to transfer to another backend, such as Terraform Cloud, so you can continue managing it. By migrating your Terraform state, you can hand off infrastructure without de-provisioning anything.

• Question 65:

  Which of the following connection types are supported by the remote-exec provisioner? (select two)

  A. rdp

  B. smb

  C. ssh

  D. winrm

  Correct Answer: CD

  The remote-exec provisioner invokes a script on a remote resource after it is created. The remote- exec provisioner supports both ssh and winrm type connections.

• Question 66:

  What is the best and easiest way for Terraform to read and write secrets from HashiCorp Vault?

  A. CLI access from the same machine running Terraform

  B. API access using the AppRole auth method

  C. Vault provider

  D. Integration with a tool like Jenkins

  Correct Answer: C

  The Vault provider allows Terraform to read from, write to, and configure Harshicorp Vault.

• Question 67:

  What Terraform command can be used to inspect the current state file?

  

  A. terraform inspect

  B. terraform show

  C. terraform read

  D. terraform state

  Correct Answer: B

  The terraform show command is used to provide human-readable output from a state or plan file. This can be used to inspect a plan to ensure that the planned operations are expected, or to inspect the current state as Terraform sees it. Machine-readable output can be generated by adding the -json command-line flag. Note: When using the json command-line flag, any sensitive values in Terraform state will be displayed in plain text.

• Question 68:

  Which of the following represents a feature of Terraform Cloud that is NOT free to customers?

  A. private module registry

  B. VCS integration

  C. roles and team management

  D. workspace management

  Correct Answer: C

• Question 69:

  In Terraform Enterprise, a workspace can be mapped to how many VCS repos?

  A. 5

  B. 3

  C. 2

  D. 1

  Correct Answer: D

  A workspace can only be configured to a single VCS repo, however, multiple workspaces can use the same repo, if needed. A good Explanation: of how to configure your code repositories can be found here.

• Question 70:

  Given the Terraform configuration below, in which order will the resources be created?

  1.

  resource "aws_instance" "web_server" {

  2.

  ami = "i-abdce12345"

  3.

  instance_type = "t2.micro"

  4.

  }

  5.

  resource "aws_eip" "web_server_ip" {

  6.

  vpc = true

  7.

  instance = aws_instance.web_server.id

  8.

  }

  A. aws_eip will be created first aws_instance will be created second

  B. no resources will be created

  C. aws_instance will be created first aws_eip will be created second

  D. resources will be created simultaneously

  Correct Answer: C

  The aws_instance will be created first, and then aws_eip will be created second due to the aws_eip's resource dependency of the aws_instance id