Page 16 of 19 · 368 total questions.
Which option can not keep secrets out of Terraform configuration files?
The correct answer is B. Option B: Mark the variable as sensitive
Explanation
Marking a value sensitive redacts it from routine CLI output, though it can still be stored in state.
Which of the following is not true of Terraform providers?
The correct answer is E. Option E: None of the above
Which Terraform command checks that your configuration syntax is correct?
The correct answer is B. Option B: terraform validate
Explanation
terraform validate checks configuration syntax and internal consistency without accessing remote services.
terraform validate uses provider APIs to verify your infrastructure settings.
The correct answer is B. Option B: False
You add a new provider to your configuration and immediately run terraform apply in the CLI using the local backend. Why does the apply fail?
The correct answer is D. Option D: Terraform needs to install the necessary plugins first
Which of these statements about Terraform Cloud workspaces is false?
The correct answer is C. Option C: You must use the CLI to switch between workspaces
What value does the Terraform Cloud private registry provide over the public Terraform Module Registry?
The correct answer is A. Option A: The ability to restrict modules to members of Terraform Cloud or Enterprise organizations
Explanation
A Terraform module packages related resources into a reusable configuration with defined inputs and outputs. Terraform Cloud, now HCP Terraform, provides managed remote runs, state, collaboration, policy, and governance. This option keeps traffic private / properly secured as required.
Terraform providers are part of the Terraform core binary.
The correct answer is B. Option B: False
Which of the following is not a benefit of adopting infrastructure as code?
The correct answer is C. Option C: Graphical User Interface
Where does the Terraform local backend store its state?
The correct answer is A. Option A: In the terraform.tfstate file
Explanation
Terraform state maps resource addresses to remote objects and stores metadata needed to calculate changes efficiently.
Which of these is true about Terraform's plugin-based architecture?
The correct answer is B. Option B: You can create a provider for your API if none exists
Explanation
A provider plugin implements resource types and data sources that communicate with an external API.
Your risk management organization requires that new AWS S3 buckets must be private and encrypted at rest. How can Terraform Cloud automatically and proactively enforce this security control?
The correct answer is B. Option B: With a Sentinel policy, which runs before every apply
Explanation
Sentinel evaluates policy as code against Terraform run data to enforce organizational guardrails. This option keeps traffic private / properly secured as required.
If you don't use the local backend, where does Terraform save resource state?
The correct answer is A. Option A: In the remote backend or Terraform Cloud
Explanation
A Terraform backend determines where state is stored and, for supported backends, how operations and locking are performed. Terraform Cloud, now HCP Terraform, provides managed remote runs, state, collaboration, policy, and governance.
When does Sentinel enforce policy logic during a Terraform Cloud run?
The correct answer is C. Option C: Before the apply phase
What is terraform refresh-only intended to detect?
The correct answer is D. Option D: State file drift
Explanation
Terraform state maps resource addresses to remote objects and stores metadata needed to calculate changes efficiently. Infrastructure drift occurs when remote objects change outside Terraform so their real attributes differ from configuration and state.
You should run terraform fmt to rewrite all Terraform configurations within the current working directory to conform to Terraform-style conventions.
The correct answer is A. Option A: True
Why would you use the -replace flag for terraform apply?
The correct answer is C. Option C: You want to force Terraform to destroy and recreate a resource on the next apply
You can configure Terraform to log to a file using the TF_LOG environment variable.
The correct answer is B. Option B: False
When does Terraform create the .terraform.lock.hcl file?
The correct answer is C. Option C: After your first terraform init
Explanation
terraform init initializes a working directory, installs required providers and modules, and configures the backend.
You have been working in a Cloud provider account that is shared with other team members. You previously used Terraform to create a load balancer that is listening on port 80. After some application changes, you updated the Terraform code to change the port to 443. You run terraform plan and see that the execution plan shows the port changing from 80 to 443 like you intended, and step away to grab some coffee. In the meantime, another team member manually changes the load balancer port to 443 through the Cloud provider console before you get back to your desk. What will happen when you terraform apply upon returning to your desk?
The correct answer is C. Option C: Terraform will not make any changes to the Load Balancer and will update the state file to reflect any changes made.
Explanation
Terraform state maps resource addresses to remote objects and stores metadata needed to calculate changes efficiently.
Showing questions 301–320 of 368 · Page 16 of 19