HashiCorp Terraform-Associate-003 Exam Dumps

HashiCorp Terraform-Associate-003 Sample Question Answers

HashiCorp Terraform-Associate-003 Sample Questions

Question # 1

Which of the following is not a way to trigger terraform destroy?

A. Using the destroy command with auto-approve.
B. Passing --destroy at the end of a plan request.
C. Running terraform destroy from the correct directory and then typing yes when prompted in the CLI.

Answer: B

Show Answer

Question # 2

Which of these are features of HCP Terraform/Terraform Cloud? Pick the 2 correct responses below.

A. Automated infrastructure deployment visualization.
B. A web-based user interface (UI).
C. Automatic backups of configuration and state..
D. Remote state storage.

Answer: A,D

Show Answer

Question # 3

Which command(s) adds existing resources in a public cloud into Terraform state?

A. terraform init
B. terraform plan
C. terraform refresh
D. terraform import
E. All of these

Answer: D

Show Answer

Question # 4

In a HCP Terraform/Terraform Cloud workspace linked to a version control repository, speculativeplan runs start automatically when you merge or commit changes to version control.

A. True
B. False

Answer: A

Show Answer

Question # 5

What is the Terraform style convention for indenting a nesting level compared to the one above it?

A. With two spaces.
B. With four spaces.
C. With three spaces.
D. With a tab.

Answer: A

Show Answer

Question # 6

A module block is shown in the Exhibit space of this page. When you use a module block to referencea module from the Terraform Registry such as the one in the example, how do you specify version1.0.0 of the module?

A. Append ?ref=v1.0.0 argument to the source path.
B. You cannot. Modules stored on the public Terraform Registry do not support versioning.
C. Add a version = "1.0.0" attribute to the module block.
D. Nothing. Modules stored on the public Terraform module Registry always default to version 1.0.0.

Answer: C

Show Answer

Question # 7

When do you need to explicitly execute Terraform in refresh-only mode?

A. Before every terraform plan..
B. Before every terraform apply.
C. Before every terraform import.
D. None of the above.

Answer: C

Show Answer

Question # 8

Which method for sharing Terraform modules fulfills the following criteria:Keeps the module configurations confidential within your organization.Supports Terraform's semantic version constraints.Provides a browsable directory of your modules.

A. A Git repository containing your modules.
B. Public Terraform module registry.
C. A subfolder within your workspace.
D. HCP Terraform/Terraform Cloud private registry.

Answer: D

Show Answer

Question # 9

What is the provider for the resource shown in the Exhibit?resource "aws_vpc" "main" {name = "test"}

A. VPC
B. test
C. main
D. aws

Answer: D

Show Answer

Question # 10

Your root module contains a variable named num_servers. Which is the correct way to pass its valueto a child module with an input named servers?

A. servers = num_servers
B. servers = var(num_servers)
C. servers = var.num_servers
D. servers = ${var.num_servers}

Answer: C

Show Answer

Question # 11

When you include a module block in your configuration that references a module from the TerraformRegistry, the "version" attribute is required.

A. True
B. False

Answer: B

Show Answer

Question # 12

You want to use API tokens and other secrets within your team's Terraform workspaces. Where doesHashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

A. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.
B. In HashiCorp Vault.
C. In a terraform.tfvars file, securely managed and shared with your team.
D. In a terraform.tfvars file, checked into your version control system.
E. In a plaintext document on a shared drive.

Answer: A,B,C

Show Answer

Question # 13

Terraform configuration can only call modules from the public registry.

A. True
B. False

Answer: B

Show Answer

Question # 14

You used Terraform to create an ephemeral development environment in the cloud and are nowready to destroy all the infrastructure described by your Terraform configuration. To be safe, youwould like to first see all the infrastructure that Terraform will delete.Which command should you use to show all the resources that will be deleted? (Pick the 2 correctresponses)

A. Run terraform destroy. This will output all the resources that will be deleted before prompting forapproval.
B. Run terraform show -destroy.
C. Run terraform state rm *.

Answer: A,B

Show Answer

Question # 15

Which of these are benefits of using Sentinel with HCP Terraform/Terraform Cloud? (Pick the 3correct responses)

A. You can enforce a list of approved AWS AMIs.
B. Sentinel Policies can be written in HashiCorp Configuration Language (HCL).
C. You can check out and check in cloud access keys.
D. Policy-as-code can enforce security best practices.

Answer: A,C,D

Show Answer