Terraform Associate 003 HashiCorp Certified Exam Online Dumps

dumps2024-07-04T16:28:43+08:00

Terraform Associate 003 HashiCorp Certified exam basic information is available for you to study. The assessment type is multiple-choice. Each candidate has 1 hour to complete all the questions. The Terraform Associate 003 exam price is $70.5. The available language is English. HashiCorp Certified Terraform Associate 003 certification is valid for 2 years. We provide the latest HashiCorp Certified Terraform Associate 003 exam online dumps, which are valuable in your preparation. Free HashiCorp Terraform Associate 003 exam online dumps are below.

Page 1 of 6

1. Module version is required to reference a module on the Terraform Module Registry.

True

False

2. You ate creating a Terraform configuration which needs to make use of multiple providers, one for AWS and one for Datadog.

Which of the following provider blocks would allow you to do this?

A)

Option A

Option B

Option C

Option D

3. terraform validate confirms that your infrastructure matches the Terraform state file.

True

False

4. Which command must you first run before performing further Terraform operations in a working directory?

terraform import

terraform workspace

terraform plan

terraform init

5. A developer accidentally launched a VM (virtual machine) outside of the Terraform workflow and ended up with two servers with the same name. They don't know which VM Terraform manages but do have a list of all active VM IDs.

Which of the following methods could you use to discover which instance Terraform manages?

Run terraform state list to find the names of all VMs, then run terraform state show for each of them to find which VM ID Terraform manages

Update the code to include outputs for the ID of all VMs, then run terraform plan to view the outputs

Run terraform taint/code on all the VMs to recreate them

Use terraform refresh/code to find out which IDs are already part of state

6. When does Sentinel enforce policy logic during a Terraform Cloud run?

Before the plan phase

During the plan phase

Before the apply phase

After the apply phase

7. You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead.

What are the two things you must do to achieve this? Choose two correct answers.

Run the terraform Import-gcp command

Write Terraform configuration for the existing VMs

Use the terraform import command for the existing VMs

Provision new VMs using Terraform with the same VM names

8. Which of the following ate advantages of using infrastructure as code (laC) instead of provisioning with a graphical user interface (GUI)? Choose two correct answers.

Lets you version, reuse, and share infrastructure configuration

Provisions the same resources at a lower cost

Secures your credentials

Reduces risk of operator error

Prevents manual modifications to your resources

9. Outside of the required_providers block, Terraform configurations always refer to providers by their local names.

True

False

10. Terraform providers are always installed from the Internet.

True

False

Page 2 of 6

11. What feature stops multiple users from operating on the Terraform state at the same time?

State locking

Version control

Provider constraints

Remote backends

12. Which of the following is not a valid siring function in Terraform?

choaf

join

Split

slice

13. What does the default "local" Terraform backend store?

tfplan files

State file

Provider plugins

Terraform binary

14. How can you trigger a run in a Terraform Cloud workspace that is connected to a Version Control System (VCS) repository?

Only Terraform Cloud organization owners can set workspace variables on VCS connected workspaces

Commit a change to the VCS working directory and branch that the Terraform Cloud workspace is connected to

Only Terraform Cloud organization owners can approve plans in VCS connected workspaces

Only members of a VCS organization can open a pull request against repositories that are connected to Terraform Cloud workspaces

15. You're building a CI/CD (continuous integration/continuous delivery) pipeline and need to inject sensitive variables into your Terraform run.

How can you do this safely?

Copy the sensitive variables into your Terraform code

Store the sensitive variables in a secure_var

tf file

Store the sensitive variables as plain text in a source code repository

Pass variables to Terraform with a -var flag

16. When should you write Terraform configuration files for existing infrastructure that you want to start managing with Terraform?

You can import infrastructure without corresponding Terraform code

Terraform will generate the corresponding configuration files for you

Before you run terraform Import

After you run terraform import

17. Variables declared within a module are accessible outside of the module.

True

False

18. Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files.

How can you protect that data?

Edit your state file to scrub out the sensitive data

Always store your secrets in a secrets.tfvars file

Delete the state file every time you run Terraform

Store the state in an encrypted backend

19. If you update the version constraint in your Terraform configuration, Terraform will update your lock file the next time you run terraform Init.

True

False

20. Once you configure a new Terraform backend with a terraform code block, which command(s) should you use to migrate the state file?

terraform destroy, then terraform apply

terraform init

terraform push

terraform apply

Page 3 of 6

21. What does Terraform use the .terraform.lock.hc1 file for?

There is no such file

Tracking specific provider dependencies

Preventing Terraform runs from occurring

Storing references to workspaces which are locked

22. Why does this backend configuration not follow best practices?

An alias meta-argument should be included in backend blocks whenever possible

You should use the local enhanced storage backend whenever possible

You should not store credentials in Terraform configuration

The backend configuration should contain multiple credentials so that more than one user can execute terraform plan and terraform apply

23. Module variable assignments are inherited from the parent module and you do not need to explicitly set them.

True

False

24. What are some benefits of using Sentinel with Terraform Cloud/Terra form Cloud? Choose three correct answers.

You can enforce a list of approved AWS AMIs

Policy-as-code can enforce security best practices

You can check out and check in cloud access keys

You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.

Sentinel Policies can be written in HashiCorp Configuration Language (HCL)

25. What does Terraform not reference when running a terraform apply -refresh-only?

State file

Credentials

Cloud provider

Terraform resource definitions in configuration files

26. Which of the following is not a valid Terraform variable type?

list

array

nap

string

27. You decide to move a Terraform state file to Amazon S3 from another location.

You write the code below into a file called backend.tf.

Which command will migrate your current state file to the new S3 remote backend?

terraform state

terraform init

terraform push

terraform refresh

28. Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to store the state file in a central location.

Which of the following backends would not work?

Artifactory

Amazon S3

Terraform Cloud

Git

29. You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create any outputs for your code.

What is the best method to quickly find the IP address of the resource you deployed?

In a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file

Run terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address

Run terraform output ip_address to view the result

Run terraform destroy then terraform apply and look for the IP address in stdout

30. As a developer, you want to ensure your plugins are up to date with the latest versions.

Which Terraform command should you use?

terraform refresh -upgrade

terraform apply -upgrade

terraform init -upgrade

terraform providers -upgrade

Page 4 of 6

31. What information does the public Terraform Module Registry automatically expose about published modules?

Required input variables

Optional inputs variables and default values

Outputs

All of the above

None of the above

32. You must use different Terraform commands depending on the cloud provider you use.

True

False

33. As a member of an operations team that uses infrastructure as code (lac) practices, you are tasked with making a change to an infrastructure stack running in a public cloud.

Which pattern would follow laC best practices for making a change?

Make the change via the public cloud API endpoint

Clone the repository containing your infrastructure code and then run the code

Use the public cloud console to make the change after a database record has been approved

Make the change programmatically via the public cloud CLI

Submit a pull request and wait for an approved merge of the proposed changes

34. You ate making changes to existing Terraform code to add some new infrastructure.

When is the best time to run terraform validate?

After you run terraform apply so you can validate your infrastructure

Before you run terraform apply so you can validate your provider credentials

Before you run terraform plan so you can validate your code syntax

After you run terraform plan so you can validate that your state file is consistent with your infrastructure

35. How would you reference the volume IDs associated with the ebs_block_device blocks in this configuration?

aws_instance.example.ebs_block_device[sda2,sda3).volume_id

aws_lnstance.example.ebs_block_device.[*].volume_id

aws_lnstance.example.ebs_block_device.volume_ids

aws_instance.example-ebs_block_device.*.volume_id

36. Which command should you run to check if all code in a Terraform configuration that references multiple modules is properly formatted without making changes?

terraform fmt -write-false

terraform fmt -list -recursive

terraform fmt -check -recursive

terraform fmt -check

37. What kind of configuration block will create an infrastructure object with settings specified within the block?

provider

state

data

resource

38. What is the Terraform style convention for indenting a nesting level compared to the one above it?

With a tab

With two spaces

With four spaces

With three spaces

39. You have never used Terraform before and would like to test it out using a shared team account for a cloud provider. The shared team account already contains 15 virtual machines (VM). You develop a Terraform configuration containing one VM. perform terraform apply, and see that your VM was created successfully.

What should you do to delete the newly-created VM with Terraform?

The Terraform state file contains all 16 VMs in the team account. Execute terraform destroy and select the newly-created V

Delete the Terraform state file and execute terraform apply.

The Terraform state file only contains the one new V

Execute terraform destroy.

Delete the VM using the cloud provider console and terraform apply to apply the changes to the Terraform state file.

40. When do changes invoked by terraform apply take effect?

After Terraform has updated the state file

Once the resource provider has fulfilled the request

Immediately

None of the above are correct

Page 5 of 6

41. What is the workflow for deploying new infrastructure with Terraform?

Write Terraform configuration, run terraform init to initialize the working directory or workspace, and run terraform apply

Write Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure

Write Terraform configuration, run terraform apply to create infrastructure, use terraform validate to confirm Terraform deployed resources correctly

Write Terraform configuration, run terraform plan to initialize the working directory or workspace, and terraform apply to create the infrastructure

42. You can develop a custom provider to manage its resources using Terraform.

True

False

43. What is one disadvantage of using dynamic blocks in Terraform?

Dynamic blocks can construct repeatable nested blocks

Terraform will run more slowly

They cannot be used to loop through a list of values

They make configuration harder to read and understand

44. Which backend does the Terraform CU use by default?

Depends on the cloud provider configured

HTTP

Remote

Terraform Cloud

Local

45. How does Terraform manage most dependencies between resources?

Terraform will automatically manage most resource dependencies

Using the depends_on parameter

By defining dependencies as modules and including them in a particular order

The order that resources appear in Terraform configuration indicates dependencies

46. You have declared a variable called var.list which is a list of objects that all have an attribute id .

Which options will produce a list of the IDs? Choose two correct answers.

[ var.list [ * ] , id ]

[ for o in var.list : o.Id ]

var.list[*].id

{ for o in var.llst : o => o.id }

47. It is best practice to store secret data in the same version control repository as your Terraform configuration.

True

False

48. _______backends support state locking.

All

Some

Only local

49. You want to define a single input variable to capture configuration values for a server. The values must represent memory as a number, and the server name as a string.

Which variable type could you use for this input?

List

Object

Map

Terraform does not support complex input variables of different types

50. Which of the following statements about Terraform modules is not true?

Modules can call other modules

A module is a container for one or more resources

Modules must be publicly accessible

You can call the same module multiple times

Page 6 of 6

51. When you use a remote backend that needs authentication, HashiCorp recommends that you:

Write the authentication credentials in the Terraform configuration files

Keep the Terraform configuration files in a secret store

Push your Terraform configuration to an encrypted git repository

Use partial configuration to load the authentication credentials outside of the Terraform code

52. You can reference a resource created with for_each using a Splat ( *) expression.

True

False

53. Only the user that generated a plan may apply it.

True

False

54. You cannot install third party plugins using terraform init.

True

False

Terraform Associate 003 HashiCorp Certified Exam Online Dumps

Terraform Associate 003 HashiCorp Certified Exam Online Dumps

Share this post

Leave a Reply Cancel reply

Related Posts

HashiCorp Certified: Consul Associate Exam Study Guides

HashiCorp Certified: Terraform Associate TA-002-P Updated Dumps – Help You Pass

HashiCorp Terraform Associate TA-002-P Exam Study Guide Updated

HashiCorp Certified: Vault Associate VA-002-P Exam Dumps

HashiCorp TA-002-P Exam New Updated Material