HashiCorp Terraform Associate TA-002-P Exam Study Guide Updated

dumps2022-10-18T08:35:53+08:00

Give your HashiCorp Certified: Terraform Associate certification by using the updated TA-002-P study guide of Itfreedumps. The current TA-002-P exam guide contains 449 practice exam questions and answers, which are based on the actual HashiCorp Certified: Terraform Associate TA-002-P exam objectives. You will be confidence to pass the TA-002-P exam smoothly. At Itfreedumps, you will have chance to read TA-002-P free demo first.

Page 1 of 16

1. If a module declares a variable with a default, that variable must also be defined within the module.

True

False

2. Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files.

How can you protect sensitive data stored in Terraform state files?

Delete the state file every time you run Terraform

Store the state in an encrypted backend

Edit your state file to scrub out the sensitive data

Always store your secrets in a secrets.tfvars file.

3. What does the default "local" Terraform backend store?

tfplan files

Terraform binary

Provider plugins

State file

4. What is the name assigned by Terraform to reference this resource?

dev

azurerm_resource_group

azurerm

test

5. You have declared an input variable called environment in your parent module.

What must you do to pass the value to a child module in the configuration?

Add node_count = var.node_count

Declare the variable in a terraform.tfvars file

Declare a node_count input variable for child module

Nothing, child modules inherit variables of parent module

6. You have declared a variable called var.list which is a list of objects that all have an attribute id.

Which options will produce a list of the IDs? (Choose two.)

{ for o in var.list: o => o.id }

var.list[*].id

[ var.list[*].id ]

[ for o in var.list: o.id ]

7. Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?

Defined in Environment variables

Inside the backend block within the Terraform configuration

Defined in a connection configuration outside of Terraform

None of above

8. Which argument(s) is (are) required when declaring a Terraform variable?

type

default

description

All of the above

None of the above

9. If writing Terraform code that adheres to the Terraform style conventions, how would you properly indent each nesting level compared to the one above it?

With four spaces

With a tab

With three spaces

With two spaces

10. Terraform can import modules from a number of sources C which of the following is not a valid source?

FTP server

GitHub repository

Local path

Terraform Module Registry

Page 2 of 16

11. What is the workflow for deploying new infrastructure with Terraform?

terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure

Write a Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure.

terraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure

Write a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure changes, and terraform apply to create new infrastructure.

12. You have used Terraform to create an ephemeral development environment in the cloud and are now ready to destroy all the infrastructure described by your Terraform configuration. To be safe, you would like to first see all the infrastructure that will be deleted by Terraform.

Which command should you use to show all of the resources that will be deleted? (Choose two.)

Run terraform plan -destroy.

This is not possible. You can only show resources that will be created.

Run terraform state rm *.

Run terraform destroy and it will first output all the resources that will be deleted before prompting for approval.

13. What features does the hosted service Terraform Cloud provide? (Choose two.)

Automated infrastructure deployment visualization

Automatic backups

Remote state storage

A web-based user interface (UI)

14. Only the user that generated a plan may apply it.

True

False

15. You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need to rerun the script.

Which of the following commands would you use first?

terraform taint null_resource.run_script

terraform apply -target=null_resource.run_script

terraform validate null_resource.run_script

terraform plan -target=null_resource.run_script

16. Which of the following is not a valid string function in Terraform?

split

join

slice

chomp

17. terraform validate validates the syntax of Terraform files.

True

False

18. One remote backend configuration always maps to a single remote workspace.

True

False

19. A Terraform local value can reference other Terraform local values.

True

False

20. Terraform providers are always installed from the Internet.

True

False

Page 3 of 16

21. What command should you run to display all workspaces for the current configuration?

terraform workspace

terraform workspace show

terraform workspace list

terraform show workspace

22. Terraform and Terraform providers must use the same major version number in a single configuration.

True

False

23. Terraform requires the Go runtime as a prerequisite for installation.

True

False

24. Terraform validate reports syntax check errors from which of the following scenarios?

Code contains tabs indentation instead of spaces

There is missing value for a variable

The state files does not match the current infrastructure

None of the above

25. Terraform provisioners can be added to any resource block.

True

False

26. You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (files). You need to enable debug messages to find this out.

Which of the following would achieve this?

Set the environment variable TF_LOG=TRACE

Set verbose logging for each provider in your Terraform configuration

Set the environment variable TF_VAR_log=TRACE

Set the environment variable TF_LOG_PATH

27. How can you trigger a run in a Terraform Cloud workspace that is connected to a Version Control System (VCS) repository?

Only Terraform Cloud organization owners can set workspace variables on VCS connected workspaces

Commit a change to the VCS working directory and branch that the Terraform Cloud workspace is connected to

Only members of a VCS organization can open a pull request against repositories that are connected to Terraform Cloud workspaces

Only Terraform Cloud organization owners can approve plans in VCS connected workspaces

28. Examine the following Terraform configuration, which uses the data source for an AWS AMI.

What value should you enter for the ami argument in the AWS instance resource?

aws_ami.ubuntu

data.aws_ami.ubuntu

data.aws_ami.ubuntu.id

aws_ami.ubuntu.id

29. The terraform.tfstate file always matches your currently built infrastructure.

True

False

30. What is not processed when running a terraform refresh?

State file

Configuration file

Credentials

Cloud provider

Page 4 of 16

31. What type of block is used to construct a collection of nested configuration blocks?

for_each

repeated

nesting

dynamic

32. How is terraform import run?

As a part of terraform init

As a part of terraform plan

As a part of terraform refresh

By an explicit call

All of the above

33. When using Terraform to deploy resources into Azure, which scenarios are true regarding state files? (Choose two.)

When a change is made to the resources via the Azure Cloud Console, the changes are recorded in a new state file

When a change is made to the resources via the Azure Cloud Console, Terraform will update the state file to reflect them during the next plan or apply

When a change is made to the resources via the Azure Cloud Console, the current state file will not be updated

When a change is made to the resources via the Azure Cloud Console, the changes are recorded in the current state file

34. When using a module block to reference a module stored on the public Terraform Module Registry such as:

How do you specify version 1.0.0?

Modules stored on the public Terraform Module Registry do not support versioning

Append ?ref=v1.0.0 argument to the source path

Add version = "1.0.0" attribute to module block

Nothing C modules stored on the public Terraform Module Registry always default to version 1.0.0

35. A Terraform provider is not responsible for:

Understanding API interactions with some service

Provisioning infrastructure in multiple clouds

Exposing resources and data sources based on an API

Managing actions to take based on resource differences

36. Which of the following is allowed as a Terraform variable name?

count

name

source

version

37. You have never used Terraform before and would like to test it out using a shared team account for a cloud provider. The shared team account already contains 15 virtual machines (VM). You develop a Terraform configuration containing one VM, perform terraform apply, and see that your VM was created successfully.

What should you do to delete the newly-created VM with Terraform?

The Terraform state file contains all 16 VMs in the team account. Execute terraform destroy and select the newly-created V

The Terraform state file only contains the one new V

Execute terraform destroy.

Delete the Terraform state file and execute Terraform apply.

Delete the VM using the cloud provider console and terraform apply to apply the changes to the Terraform state file.

38. How can terraform plan aid in the development process?

Validates your expectations against the execution plan without permanently modifying state

Initializes your working directory containing your Terraform configuration files

Formats your Terraform configuration files

Reconciles Terraform’s state against deployed resources and permanently modifies state using the current status of deployed resources

39. Which backend does the Terraform CLI use by default?

Terraform Cloud

Consul

Remote

Local

40. When does terraform apply reflect changes in the cloud environment?

Immediately

However long it takes the resource provider to fulfill the request

After updating the state file

Based on the value provided to the -refresh command line argument

None of the above

Page 5 of 16

41. When you initialize Terraform, where does it cache modules from the public Terraform Module Registry?

On disk in the /tmp directory

In memory

On disk in the .terraform sub-directory

They are not cached

42. A terraform apply can not _________ infrastructure.

change

destroy

provision

import

43. What information does the public Terraform Module Registry automatically expose about published modules?

Required input variables

Optional inputs variables and default values

Outputs

All of the above

None of the above

44. Terraform can only manage resource dependencies if you set them explicitly with the depends_on argument.

True

False

45. When running the command terraform taint against a managed resource you want to force recreation upon, Terraform will immediately destroy and recreate the resource.

True

False

46. How is the Terraform remote backend different than other state backends such as S3, Consul, etc.?

It can execute Terraform runs on dedicated infrastructure on premises or in Terraform Cloud

It doesn't show the output of a terraform apply locally

It is only available to paying customers

All of the above

47. You need to deploy resources into two different cloud regions in the same Terraform configuration.

To do that, you declare multiple provider configurations as follows:

What meta-argument do you need to configure in a resource block to deploy the resource to the “us-west-2” AWS region?

alias = west

provider = west

provider = aws.west

alias = aws.west

48. Where in your Terraform configuration do you specify a state backend?

The terraform block

The resource block

The provider block

The datasource block

49. Which of the following is not a valid Terraform collection type?

list

map

tree

set

50. A Terraform provisioner must be nested inside a resource configuration block.

True

False

Page 6 of 16

51. Where does the Terraform local backend store its state?

In the /tmp directory

In the terraform.tfvars file

In the terraform.tfstate file

In the user's .terraformrc file

52. Terraform variables and outputs that set the "description" argument will store that description in the state file.

True

False

53. Module variable assignments are inherited from the parent module and do not need to be explicitly set.

True

False

54. If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?

Run terraform refresh

It will happen automatically

Manually update the state fire

Run terraform import

55. All standard backend types support state storage, locking, and remote operations like plan.

apply and destroy.

True

False

56. What command does Terraform require the first time you run it within a configuration directory?

terraform import

terraform init

terraform plan

terraform workspace

57. Which task does terraform init not perform?

Sources all providers present in the configuration and ensures they are downloaded and available locally

Connects to the backend

Sources any modules and copies the configuration locally

Validates all required variables are present

58. Terraform can run on Windows or Linux, but it requires a Server version of the Windows operating system.

True

False

59. What is terraform refresh intended to detect?

Terraform configuration code changes

Empty state files

State file drift

Corrupt state files

60. Which of the following is available only in Terraform Enterprise or Cloud workspaces and not in Terraform CLI?

Secure variable storage

Support for multiple cloud providers

Dry runs with terraform plan

Using the workspace as a data source

Page 7 of 16

61. CORRECT TEXT

FILL BLANK

What is the name of the default file where Terraform stores the state?

Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

62. Which of these is the best practice to protect sensitive values in state files?

Blockchain

Secure Sockets Layer (SSL)

Enhanced remote backends

Signed Terraform providers

63. You have deployed a new webapp with a public IP address on a clod provider. However, you did not create any outputs for your code.

What is the best method to quickly find the IP address of the resource you deployed?

Run terraform output ip_address to view the result

In a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file

Run terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address

Run terraform destroy then terraform apply and look for the IP address in stdout

64. CORRECT TEXT

FILL BLANK

Which flag would you add to terraform plan to save the execution plan to a file?

Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

65. You have multiple team members collaborating on infrastructure as code (IaC) using Terraform, and want to apply formatting standards for readability.

How can you format Terraform HCL (HashiCorp Configuration Language) code according to standard Terraform style convention?

Run the terraform fmt command during the code linting phase of your CI/CD process

Designate one person in each team to review and format everyone's code

Manually apply two spaces indentation and align equal sign "=" characters in every Terraform file (*.tf)

Write a shell script to transform Terraform files using tools such as AWK, Python, and sed

66. You would like to reuse the same Terraform configuration for your development and production environments with a different state file for each.

Which command would you use?

terraform import

terraform workspace

terraform state

terraform init

67. Which of the following is not an action performed by terraform init?

Create a sample main.tf file

Initialize a configured backend

Retrieve the source code for all referenced modules

Load required provider plugins

68. What is the name assigned by Terraform to reference this resource?

compute_instance

main

google

test

69. If a module uses a local variable, you can expose that value with a terraform output.

True

False

70. Which provisioner invokes a process on the resource created by Terraform?

remote-exec

null-exec

local-exec

file

Page 8 of 16

71. HashiCorp Configuration Language (HCL) supports user-defined functions.

True

False

72. You’re building a CI/CD (continuous integration/ continuous delivery) pipeline and need to inject sensitive variables into your Terraform run.

How can you do this safely?

Pass variables to Terraform with a Cvar flag

Copy the sensitive variables into your Terraform code

Store the sensitive variables in a secure_vars.tf file

Store the sensitive variables as plain text in a source code repository

73. Terraform provisioners that require authentication can use the ______ block.

connection

credentials

secrets

ssh

74. You have recently started a new job at a retailer as an engineer. As part of this new role, you have been tasked with evaluating multiple outages that occurred during peak shopping time during the holiday season. Your investigation found that the team is manually deploying new compute instances and configuring each compute instance manually. This has led to inconsistent configuration between each compute instance.

How would you solve this using infrastructure as code?

Implement a ticketing workflow that makes engineers submit a ticket before manually provisioning and configuring a resource

Implement a checklist that engineers can follow when configuring compute instances

Replace the compute instance type with a larger version to reduce the number of required deployments

Implement a provisioning pipeline that deploys infrastructure configurations committed to your version control system following code reviews

75. In Terraform 0.13 and above, outside of the required_providers block, Terraform configurations always refer to providers by their local names.

True

False

76. What is one disadvantage of using dynamic blocks in Terraform?

They cannot be used to loop through a list of values

Dynamic blocks can construct repeatable nested blocks

They make configuration harder to read and understand

Terraform will run more slowly

77. You write a new Terraform configuration and immediately run terraform apply in the CLI using the local backend.

Why will the apply fail?

Terraform needs you to format your code according to best practices first

Terraform needs to install the necessary plugins first

The Terraform CLI needs you to log into Terraform cloud first

Terraform requires you to manually run terraform plan first

78. When should you use the force-unlock command?

You see a status message that you cannot acquire the lock

You have a high priority change

Automatic unlocking failed

Your apply failed due to a state lock

79. What is the provider for this fictitious resource?

vpc

main

aws

test

80. You should store secret data in the same version control repository as your Terraform configuration.

True

False

Page 9 of 16

81. Which option can not be used to keep secrets out of Terraform configuration files?

A Terraform provider

Environment variables

A -var flag

secure string

82. Why would you use the terraform taint command?

When you want to force Terraform to destroy a resource on the next apply

When you want to force Terraform to destroy and recreate a resource on the next apply

When you want Terraform to ignore a resource on the next apply

When you want Terraform to destroy all the infrastructure in your workspace

83. Setting the TF_LOG environment variable to DEBUG causes debug messages to be logged into syslog.

True

False

84. A fellow developer on your team is asking for some help in refactoring their Terraform code. As part of their application’s architecture, they are going to tear down an existing deployment managed by Terraform and deploy new. However, there is a server resource named aws_instance.ubuntu[1] they would like to keep to perform some additional analysis.

What command should be used to tell Terraform to no longer manage the resource?

terraform apply rm aws_instance.ubuntu[1]

terraform state rm aws_instance.ubuntu[1]

terraform plan rm aws_instance.ubuntu[1]

terraform delete aws_instance.ubuntu[1]

85. Which two steps are required to provision new infrastructure in the Terraform workflow? (Choose two.)

Destroy

Apply

Import

Init

Validate

86. Which of the following is the correct way to pass the value in the variable num_servers into a module with the input servers?

servers = num_servers

servers = variable.num_servers

servers = var(num_servers)

servers = var.num_servers

87. Which statement describes a goal of infrastructure as code?

An abstraction from vendor specific APIs

Write once, run anywhere

A pipeline process to test and deliver software

The programmatic configuration of resources

88. What value does the Terraform Cloud/Terraform Enterprise private module registry provide over the public Terraform Module Registry?

The ability to share modules with public Terraform users and members of Terraform Enterprise Organizations

The ability to tag modules by version or release

The ability to restrict modules to members of Terraform Cloud or Enterprise organizations

The ability to share modules publicly with any user of Terraform

89. You need to constrain the GitHub provider to version 2.1 or greater.

Which of the following should you put into the Terraform 0.12 configuration’s provider block?

version >= 2.1

version ~> 2.1

version = “<= 2.1”

version = “>= 2.1”

90. CORRECT TEXT

FILL BLANK

You need to specify a dependency manually.

What resource meta-parameter can you use to make sure Terraform respects the dependency?

Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

Page 10 of 16

91. A provider configuration block is required in every Terraform configuration.

Example:

True

False

92. Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to begin storing the state file in a central location.

Which of the following backends would not work?

Amazon S3

Artifactory

Git

Terraform Cloud

93. What features stops multiple admins from changing the Terraform state at the same time?

Version control

Backend types

Provider constraints

State locking

94. You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully.

What will happen if you delete the VM using the cloud provider console, and run terraform apply again without changing any Terraform code?

Terraform will remove the VM from state file

Terraform will report an error

Terraform will not make any changes

Terraform will recreate the VM

95. In contrast to Terraform Open Source, when working with Terraform Enterprise and Cloud Workspaces, conceptually you could think about them as completely separate working directories.

True

False

96. You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead.

What are the two things you must do to achieve this? (Choose two.)

Provision new VMs using Terraform with the same VM names

Use the terraform import command for the existing VMs

Write Terraform configuration for the existing VMs

Run the terraform import-gcp command

97. Which of the following is not a key principle of infrastructure as code?

Versioned infrastructure

Golden images

Idempotence

Self-describing infrastructure

98. Which of the following is not true of Terraform providers?

Providers can be written by individuals

Providers can be maintained by a community of users

Some providers are maintained by HashiCorp

Major cloud vendors and non-cloud vendors can write, maintain, or collaborate on Terraform providers

None of the above

99. How would you reference the "name" value of the second instance of this fictitious resource?

element(aws_instance.web, 2)

aws_instance.web[1].name

aws_instance.web[1]

aws_instance.web[2].name

aws_instance.web.*.name

100. terraform init initializes a sample main.tf file in the current directory.

True

False

Page 11 of 16

101. You just scaled your VM infrastructure and realized you set the count variable to the wrong value. You correct the value and save your change.

What do you do next to make your infrastructure match your configuration?

Run an apply and confirm the planned changes

Inspect your Terraform state because you want to change it

Reinitialize because your configuration has changed

Inspect all Terraform outputs to make sure they are correct

102. You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code.

Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?

Run terraform refresh to ensure that the state file has the latest information for existing resources.

Update the configuration file to include the new resources.

Shut down or stop using the resources being imported so no changes are inadvertently missed.

Modify the Terraform state file to add the new resources.

103. If you enable TF_LOG = DEBUG, the log will be stored in syslog.log file in the currect directory.

False

True

104. You have declared a variable name my_var in terraform configuration without a value associated with it.

variable my_var {}

After running terraform plan it will show an error as variable is not defined.

True

False

105. Please identify the offerings which are unique to Terraform Enterprise, and not available in either Terraform OSS, or Terraform Cloud. Select four.

Audit Logs

Private Network Connectivity

VCS Integration

Sentinel

Clustering

106. Terraform works well in Windows but a Windows server is required.

False

True

107. Refer to the below code where developer is outputting the value of the database password but has used sensitive parameter to hide the output value in the CLI.

output "db_password" { value = aws_db_instance.db.password description = "The password for logging in to the database." sensitive = true}

Since sensitive is set to true, the value associated with db password will not be present in state file as plain-text?

False

True

108. John wants to use two different regions to deploy two different EC2 instances. He has specified two provider blocks in his providers.tf file.

provider "aws" { region = "us-east-1" }

provider "aws" { region = "us-west-2" }

When he run terraform plan he encountered an error.

How to fix this?

Use another provider version

Use alias for region = "us-west-2"

Use default keyword with region = "us-east-1"

It can not be fixed

109. When TF_LOG_PATH is set, TF_LOG must be set in order for any logging to be enabled.

False

True

110. How can you ensure that the engineering team who has access to git repo will not create any non-compliant resources that might lead to a security audit failure in future. your team is using Hashicorp Terraform Enterprise Edition.

Use Terraform OSS Sentinel Lite version, which will save cost, since there is no charge for OSS, but it can still check for most non-compliant rules using Policy-As-Code.

Implement a review process where every code will be reviewed before merging to the master branch.

Since your team is using Hashicorp Terraform Enterprise Edition, enable Sentinel, and write Policy-As-Code rules that will check for non-compliant resource provisioning, and prevent/report them.

Create a design /security document (in PDF) and share to the team, and ask them to always follow that document, and never deviate from it.

Page 12 of 16

111. The current implementation of Terraform import can only import resources into the state. It does not generate configuration.

False

True

112. What is the command you can use to set an environment variable named "var1"of type String?

export TF_VAR_VAR1

set TF_VAR_var1

variable "var1" { type = "string"}

export TF_VAR_var1

113. }

What of the following approaches needs to be followed in order to select image-4589?

var.images["us-west-1"]

var.images[3]

var.images[2]

lookup(var.images["us-west-1"]

114. Which of the following represents a feature of Terraform Cloud that is NOT free to customers?

Roles and Team Management

WorkSpace Management

Private Module Registry

VCS Integration

115. Which one of the following command will rewrite Terraform configuration files to a canonical format and style.

terraform graph -h

terraform init

terraform graph

terraform fmt

116. terraform refresh will update the state file?

True

False

117. Which of the following command can be used to view the specified version constraints for all providers used in the current configuration.

terraform providers

terraform state show

terraform provider

terraform plan

118. Which of the following Terraform files should be ignored by Git when committing code to a repo? (select Three)

Files named exactly terraform.tfvars or terraform.tfvars.json.

Any files with names ending in .auto.tfvars or .auto.tfvars.json.

input.tf

terraform.tfstate

output.tf

119. You have created a custom variable definition file testing.tfvars.

How will you use it for provisioning infrastructure?

terraform apply -var-state-file ="testing.tfvars"

terraform plan -var-file="testing.tfvar"

terraform apply -var-file="testing.tfvars"

terraform apply var-file="testing.tfvars"

120. What is the default backend for Terraform?

consul

gcs

local

etcd

Page 13 of 16

121. The terraform init command is always safe to run multiple times, to bring the working directory up to date with changes in the configuration. Though subsequent runs may give errors, this command will never delete your existing configuration or state.

False

True

122. Which of the following best describes the default local backend?

The local backend is where Terraform Enterprise stores logs to be processed by an log collector.

The local backend stores state on the local filesystem, locks the state using system APIs, and performs operations locally.

The local backend is the directory where resources deployed by Terraform have direct access to in order to update their current state.

The local backend is how Terraform connects to public cloud services, such as AWS, Azure, or GC

123. The Terraform language does not support user-defined functions, and so only the functions built in to the language are available for use.

False

True

124. While using generic git repository as a module source, which of the below options allows terraform to select a specific version or tag instead of selecting the HEAD.

Append ref argument as module "vpc" { source = "git::https://example.com/vpc.git?ref=v1.2.0"}

Append version argument as module "vpc" { source = "git::https://example.com/vpc.git?version=v1.2.0"}

Append ref argument as module "vpc" { source = "git::https://example.com/vpc.git#ref=v1.2.0"}

By default, Terraform will clone and use the default branch (referenced by HEAD) in the selected repository and you can not override this.

125. Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

terraform fmt

terraform destroy

terraform taint

terraform refresh

126. What does terrafom plan do ?

Create an execution plan by evaluating the difference between configuration file and state file.

Performs a refresh, unless explicitly disabled, and then apply the changes that are necessary to achieve the desired state specified in the configuration files.

Create an execution plan by evaluating the difference between configuration file and actual infrastructure.

Checks whether the execution plan for a set of changes matches your expectations by making changes to real resources or to the state.

127. Terraform must track metadata such as resource dependencies. Where is this data stored?

workspace

backend

state file

metadata store

128. Terraform has detailed logs which can be enabled by setting the _________ environmental variable.

TF_TRACE

TF_DEBUG

TF_LOG

TF_INFO

129. You have created 2 workspaces PROD and RQA. You have switched to RQA and provisioned RQA infrastructure from this workspace. Where is your state file stored?

terraform.tfstate.d

terraform.d

terraform.tfstate.RQA

terraform.tfstate

130. Provisioners should only be used as a last resort.

False

True

Page 14 of 16

131. Which one of the following will run echo 0 and echo 1 on a newly created host?

provisioner "local-exec" { command = "echo 0" command = "echo 1" }

provisioner "remote-exec" { inline = [ echo 0, echo 1 ] }

provisioner "remote-exec" { command = "${echo 0}" command = "${echo 1}" }

provisioner "remote-exec" { inline = [ "echo 0", "echo 1" ] }

132. How does Terraform handle working with so many providers?

Terraform ships with all of the plugins embedded in the Terraform binary.

Terraform uses a plugin architecture for providers and only installs the provider plugins required by your configuration in the configuration's working directory.

Terraform uses a plugin architecture for providers and only installs the provider plugins required by your configuration in a shared, system-wide plugins directory.

Terraform allows you to select the providers you want to support during the Terraform installation process.

133. terraform state subcommands such as list are read-only commands, do read-only commands create state backup files?

Yes

134. In regards to deploying resources in multi-cloud environments, what are some of the benefits of using Terraform rather than a provider's native tooling? (select three)

Terraform can help businesses deploy applications on multiple clouds and on-premises infrastructure.

Terraform is not cloud-agnostic and can be used to deploy resources across a single public cloud.

Terraform simplifies management and orchestration, helping operators build large-scale, multi-cloud infrastructure.

Terraform can manage cross-cloud dependencies.

135. Terraform init can indeed be run only a few times, because, every time terraform init will initialize the project, and download all plugins from the internet repository, regardless of whether they were present or not, and this increases the waiting time

True

False

136. lookup retrieves the value of a single element from which of the below data type?

map

set

string

list

137. You want to get involved in the development of Terraform. As this is an open source project, you would like to contribute a fix for an open issue of Terraform.

What programming language will need to use to write the fix?

It depends on which command issue related to.

Python

Java

138. Which of the following type of variable allows multiple values of several distinct types to be grouped together as a single value?

Map

Object

Tuple

List

139. ABC Enterprise has recently tied up with multiple small organizations for exchanging database information. Due to this, the firewall rules are increasing and are more than 100 rules. This is leading firewall configuration file that is difficult to manage.

What is the way this type of configuration can be managed easily?

Terraform Backends

Terraform Functions

Dynamic Blocks

Terraform Expression

140. Terraform import command can import resources into modules as well directly into the root of your state.

True

False

Page 15 of 16

141. What allows you to conveniently switch between multiple instances of a single configuration within its single backend?

Local backends

Providers

Remote backends

Workspaces

142. Workspaces in Terraform provides similar functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

True

False

143. True or False: A list(...) contain a number of values of the same type while an object(...) can contain a number of values of different types.

False

True

144. Which of the following clouds does not have a provider maintained HashiCorp?

IBM Cloud

DigitalOcean

OpenStack

AWS

145. terraform refresh command will not modify infrastructure, but does modify the state file.

True

False

146. Environment variables can be used to set variables. The environment variables must be in the format "____"_<variablename>. Select the correct prefix string from the following list.

TF_CLI_ARGS

TF_VAR

TF_VAR_

TF_VAR_ENV

147. Matt wants to import a manually created EC2 instance into terraform so that he can manage the EC2 instance through terraform going forward. He has written the configuration file of the EC2 instance before importing it to Terraform.

Following is the code:

resource "aws_instance" "matt_ec2" { ami = "ami-bg2640de" instance_type = "t2.micro" vpc_security_group_ids = ["sg-6ae7d613", "sg-53370035"] key_name = "mysecret" subnet_id = "subnet-9e3cfbc5" }

The instance id of that EC2 instance is i-0260835eb7e9bd40

How he can import data of EC2 to state file?

terraform import aws_instance.id = i-0260835eb7e9bd40

terraform import i-0260835eb7e9bd40

terraform import aws_instance.i-0260835eb7e9bd40

terraform import aws_instance.matt_ec2 i-0260835eb7e9bd40

148. You are using a terraform operation that writes state. Unfortunately automatic state unlocking has failed for that operation.

Which of the below commands can be used to remove the already acquired lock on the state?

terraform unlock

terraform force-unlock

terraform state unlock

None of the above

149. Which of the below configuration file formats are supported by Terraform? (Select TWO)

Node

JSON

YAML

HCL

150. When using remote state, state is only ever held in memory when used by Terraform.

False

True

Page 16 of 16

151. What is the purpose of using the local-exec provisioner? (Select Two)

To invoke a local executable.

Executes a command on the resource to invoke an update to the Terraform state.

To execute one or more commands on the machine running Terraform.

Ensures that the resource is only executed in the local infrastructure where Terraform is deployed.

HashiCorp Terraform Associate TA-002-P Exam Study Guide Updated

HashiCorp Terraform Associate TA-002-P Exam Study Guide Updated

Share this post

Leave a Reply Cancel reply

Related Posts

HashiCorp TA-002-P Exam New Updated Material

HashiCorp Certified: Consul Associate Exam Study Guides

HashiCorp Certified: Terraform Associate TA-002-P Updated Dumps – Help You Pass

Terraform Associate 003 HashiCorp Certified Exam Online Dumps

HashiCorp Certified: Vault Associate VA-002-P Exam Dumps