Question 1

When using a module block to reference a module stored on the public Terraform Module Registry such as:   How do you specify version 1.0.0?

Accepted Answer

A)  Modules stored on the public Terraform Module Registry do not support versioning 
B)  Append ?ref=v1.0.0 argument to the source path 
C)  Add version = "1.0.0" attribute to module block 
D)  Nothing - modules stored on the public Terraform Module Registry always default to version 1.0.0 
A)  Modules stored on the public Terraform Module Registry do not support versioning 
B)  Append ?ref=v1.0.0 argument to the source path 
C)  Add version = "1.0.0" attribute to module block 
D)  Nothing - modules stored on the public Terraform Module Registry always default to version 1.0.0 A

Question 2

What is one disadvantage of using dynamic blocks in Terraform?

Accepted Answer

A)  They cannot be used to loop through a list of values 
B)  Dynamic blocks can construct repeatable nested blocks 
C)  They make configuration harder to read and understand 
D)  Terraform will run more slowly 
A)  They cannot be used to loop through a list of values 
B)  Dynamic blocks can construct repeatable nested blocks 
C)  They make configuration harder to read and understand 
D)  Terraform will run more slowly A

Question 3

What is the name assigned by Terraform to reference this resource?

Accepted Answer

A)  dev 
B)  azurerm_resource_group 
C)  azurerm 
D)  test 
A)  dev 
B)  azurerm_resource_group 
C)  azurerm 
D)  test D

Question 4

If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?

Accepted Answer

A)  Run terraform refresh 
B)  It will happen automatically 
C)  Manually update the state fire 
D)  Run terraform import 
A)  Run terraform refresh 
B)  It will happen automatically 
C)  Manually update the state fire 
D)  Run terraform import

Question 5

One remote backend configuration always maps to a single remote workspace.

Accepted Answer

A) True 
 B)False

Question 6

What features does the hosted service Terraform Cloud provide? (Choose two.)

Accepted Answer

A)  Automated infrastructure deployment visualization 
B)  Automatic backups 
C)  Remote state storage 
D)  A web-based user interface (UI) 
A)  Automated infrastructure deployment visualization 
B)  Automatic backups 
C)  Remote state storage 
D)  A web-based user interface (UI)

Question 7

Which of the following is the correct way to pass the value in the variable num_servers into a module with the input servers?

Accepted Answer

A)  servers = num_servers 
B)  servers = variable.num_servers 
C)  servers = var(num_servers) 
D)  servers = var.num_servers 
A)  servers = num_servers 
B)  servers = variable.num_servers 
C)  servers = var(num_servers) 
D)  servers = var.num_servers

Question 8

When does terraform apply reflect changes in the cloud environment?

Accepted Answer

A)  Immediately 
B)  However long it takes the resource provider to fulfill the request 
C)  After updating the state file 
D)  Based on the value provided to the -refresh command line argument 
E)  None of the above 
A)  Immediately 
B)  However long it takes the resource provider to fulfill the request 
C)  After updating the state file 
D)  Based on the value provided to the -refresh command line argument 
E)  None of the above

Question 9

What value does the Terraform Cloud/Terraform Enterprise private module registry provide over the public Terraform Module Registry?

Accepted Answer

A)  The ability to share modules with public Terraform users and members of Terraform Enterprise Organizations 
B)  The ability to tag modules by version or release 
C)  The ability to restrict modules to members of Terraform Cloud or Enterprise organizations 
D)  The ability to share modules publicly with any user of Terraform 
A)  The ability to share modules with public Terraform users and members of Terraform Enterprise Organizations 
B)  The ability to tag modules by version or release 
C)  The ability to restrict modules to members of Terraform Cloud or Enterprise organizations 
D)  The ability to share modules publicly with any user of Terraform

Question 10

What does the default "local" Terraform backend store?

Accepted Answer

A)  tfplan files 
B)  Terraform binary 
C)  Provider plugins 
D)  State file 
A)  tfplan files 
B)  Terraform binary 
C)  Provider plugins 
D)  State file

Question 11

You have recently started a new job at a retailer as an engineer. As part of this new role, you have been tasked with evaluating multiple outages that occurred during peak shopping time during the holiday season. Your investigation found that the team is manually deploying new compute instances and configuring each compute instance manually. This has led to inconsistent configuration between each compute instance. How would you solve this using infrastructure as code?

Accepted Answer

A)  Implement a ticketing workflow that makes engineers submit a ticket before manually provisioning and configuring a resource 
B)  Implement a checklist that engineers can follow when configuring compute instances 
C)  Replace the compute instance type with a larger version to reduce the number of required deployments 
D)  Implement a provisioning pipeline that deploys infrastructure configurations committed to your version control system following code reviews 
A)  Implement a ticketing workflow that makes engineers submit a ticket before manually provisioning and configuring a resource 
B)  Implement a checklist that engineers can follow when configuring compute instances 
C)  Replace the compute instance type with a larger version to reduce the number of required deployments 
D)  Implement a provisioning pipeline that deploys infrastructure configurations committed to your version control system following code reviews

Question 12

You have used Terraform to create an ephemeral development environment in the cloud and are now ready to destroy all the infrastructure described by your Terraform configuration. To be safe, you would like to first see all the infrastructure that will be deleted by Terraform. Which command should you use to show all of the resources that will be deleted? (Choose two.)

Accepted Answer

A)  Run terraform plan -destroy. 
B)  This is not possible. You can only show resources that will be created. 
C)  Run terraform state rm *. 
D)  Run terraform destroy and it will first output all the resources that will be deleted before prompting for approval. 
A)  Run terraform plan -destroy. 
B)  This is not possible. You can only show resources that will be created. 
C)  Run terraform state rm *. 
D)  Run terraform destroy and it will first output all the resources that will be deleted before prompting for approval.

Question 13

If a module uses a local variable, you can expose that value with a terraform output.

Accepted Answer

A) True 
 B)False

Question 14

You have multiple team members collaborating on infrastructure as code (IaC) using Terraform, and want to apply formatting standards for readability. How can you format Terraform HCL (HashiCorp Configuration Language) code according to standard Terraform style convention?

Accepted Answer

A)  Run the terraform fmt command during the code linting phase of your CI/CD process 
B)  Designate one person in each team to review and format everyone's code 
C)  Manually apply two spaces indentation and align equal sign "=" characters in every Terraform file (*.tf) 
D)  Write a shell script to transform Terraform files using tools such as AWK, Python, and sed Write a shell script to transform Terraform files using tools such as AWK, Python, and sed 
A)  Run the terraform fmt command during the code linting phase of your CI/CD process 
B)  Designate one person in each team to review and format everyone's code 
C)  Manually apply two spaces indentation and align equal sign "=" characters in every Terraform file (*.tf) 
D)  Write a shell script to transform Terraform files using tools such as AWK, Python, and sed Write a shell script to transform Terraform files using tools such as AWK, Python, and sed

Question 15

Only the user that generated a plan may apply it.

Accepted Answer

A) True 
 B)False

Question 16

You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead. What are the two things you must do to achieve this? (Choose two.)

Accepted Answer

A)  Provision new VMs using Terraform with the same VM names 
B)  Use the terraform import command for the existing VMs 
C)  Write Terraform configuration for the existing VMs 
D)  Run the terraform import-gcp command 
A)  Provision new VMs using Terraform with the same VM names 
B)  Use the terraform import command for the existing VMs 
C)  Write Terraform configuration for the existing VMs 
D)  Run the terraform import-gcp command

Question 17

Which of the following is available only in Terraform Enterprise or Cloud workspaces and not in Terraform CLI?

Accepted Answer

A)  Secure variable storage 
B)  Support for multiple cloud providers 
C)  Dry runs with terraform plan 
D)  Using the workspace as a data source 
A)  Secure variable storage 
B)  Support for multiple cloud providers 
C)  Dry runs with terraform plan 
D)  Using the workspace as a data source

Question 18

What information does the public Terraform Module Registry automatically expose about published modules?

Accepted Answer

A)  Required input variables 
B)  Optional inputs variables and default values 
C)  Outputs 
D)  All of the above 
E)  None of the above 
A)  Required input variables 
B)  Optional inputs variables and default values 
C)  Outputs 
D)  All of the above 
E)  None of the above

Question 19

Which option can not be used to keep secrets out of Terraform configuration files?

Accepted Answer

A)  A Terraform provider 
B)  Environment variables 
C)  A -var flag 
D)  secure string 
A)  A Terraform provider 
B)  Environment variables 
C)  A -var flag 
D)  secure string

Question 20

Examine the following Terraform configuration, which uses the data source for an AWS AMI. What value should you enter for the ami argument in the AWS instance resource?

Accepted Answer

A)  aws_ami.ubuntu 
B)  data.aws_ami.ubuntu 
C)  data.aws_ami.ubuntu.id 
D)  aws_ami.ubuntu.id 
A)  aws_ami.ubuntu 
B)  data.aws_ami.ubuntu 
C)  data.aws_ami.ubuntu.id 
D)  aws_ami.ubuntu.id

Exam 1: HashiCorp Certified: Terraform Associate

When using a module block to reference a module stored on the public Terraform Module Registry such as: How do you specify version 1.0.0?

What is one disadvantage of using dynamic blocks in Terraform?

What is the name assigned by Terraform to reference this resource?

If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?

One remote backend configuration always maps to a single remote workspace.

What features does the hosted service Terraform Cloud provide? (Choose two.)

Which of the following is the correct way to pass the value in the variable num_servers into a module with the input servers?

When does terraform apply reflect changes in the cloud environment?

What value does the Terraform Cloud/Terraform Enterprise private module registry provide over the public Terraform Module Registry?

What does the default "local" Terraform backend store?

If a module uses a local variable, you can expose that value with a terraform output.

You have multiple team members collaborating on infrastructure as code (IaC) using Terraform, and want to apply formatting standards for readability. How can you format Terraform HCL (HashiCorp Configuration Language) code according to standard Terraform style convention?

Only the user that generated a plan may apply it.

You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead. What are the two things you must do to achieve this? (Choose two.)

Which of the following is available only in Terraform Enterprise or Cloud workspaces and not in Terraform CLI?

What information does the public Terraform Module Registry automatically expose about published modules?

Which option can not be used to keep secrets out of Terraform configuration files?

Examine the following Terraform configuration, which uses the data source for an AWS AMI. What value should you enter for the ami argument in the AWS instance resource?

Filters