Terraform Associate Practice Questions (Part-1)

Image Source

Quiz Questions

1.
Your company has been using Terraform Cloud for a some time now . But every team is creating their own modules , and there is no standardization of the modules , with each team creating the resources in their own unique way . You want to enforce a standardization of the modules across the enterprise . What should be your approach.
- A.
  Implement a Private module registry in Terraform cloud , and ask teams to reference them.
- B.
  Use module composition to use the same module across all projects , and workspaces
- C.
  Create individual workspaces for each team , and ask them to share modules across workspaces
- D.
  Upgrade to Terraform enterprise , since this is not possible in terraform cloud.
- E.
  Upload the modules in the terraform public module registry , and ask teams to reference them.
2.
Your team has started using terraform OSS in a big way , and now wants to deploy multi region deployments (DR) in aws using the same terraform files . You want to deploy the same infra (VPC,EC2 …) in both us-east-1 ,and us-west-2 using the same script , and then peer the VPCs across both the regions to enable DR traffic. But , when you run your script , all resources are getting created in only the default provider region. What should you do? Your provider setting is as below -
- A.
  Manually create the DR region , once the Primary has been created , since you are using terraform OSS , and multi region deployment is only available in Terraform Enterprise.
- B.
  No way to enable this via a single script . Write 2 different scripts with different default providers in the 2 scripts , one for us-east , another for us-west.
- C.
  Use provider alias functionality , and add another provider for us-west region . While creating the resources using the tf script , reference the appropriate provider (using the alias).
- D.
  Create a list of regions , and then use a for-each to iterate over the regions , and create the same resources ,one after the one , over the loop.
3.
Which one is the right way to import a local module names consul
- A.
  module "consul" { source = "./consul" }
- B.
  module "consul" { source = "module/consul"}
- C.
  module "consul" { source = "../consul" }
- D.
  module "consul" { source = "consul" }
4.
Your team lead does not trust the junior terraform engineers who now have access to the git repo . So , he wants you to have some sort of a checking layer , whereby , you can ensure that the juniors will not create any non-compliant resources that might lead to a security audit failure in future. What can you do to efficiently enforce this ?
- A.
  Use Terraform OSS Sentinel Lite version , which will save cost , since there is no charge for OSS , but it can still check for most non-compliant rules using Policy-As-Code.
- B.
  Create a design /security document (in PDF) and share to the team , and ask them to always follow that document , and never deviate from it.
- C.
  Create a git master branch , and implement PR . Every change needs to be reviewed by you , before being merged to the master branch.
- D.
  Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and write Policy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.
5.
Given the below resource configuration. What does the terraform resource address aws_instance.web refer to?
Image Source
- A.
  It refers to all 4 web instances , together , for further individual segregation , indexing is required , with a 0 based index.
- B.
  It refers to the last web EC2 instance , as by default , if no index is provided , the last / N-1 index is used.
- C.
  It refers to the first web EC2 instance out of the 4 ,as by default , if no index is provided , the first / 0th index is used.
- D.
  The above will result in a syntax error , as it is not syntactically correct . Resources defined using count , can only be referenced using indexes.
6.
Named workspaces are not a suitable isolation mechanism for strong separation between staging and production?
- A.
  True
- B.
  False
7.
Your developers are facing a lot of problem while writing complex expressions involving difficult interpolations. They have to run the terraform plan every time and check whether there are errors, and also check terraform apply to print the value as a temporary output for debugging purposes. What should be done to avoid this?
- A.
  Add a breakpoint in your code, using the watch keyword , and output the value to console for temporary debugging.
- B.
  Use terraform console command to have an interactive UI , but you can only use it with local state , and it does not work with remote state.
- C.
  Use terraform console command to have an interactive UI with full access to the underlying terraform state to run your interpolations , and debug at real-time
- D.
  Use terraform zipmap function , it will be able to easily do the interpolations without complex code.
8.
You have written a terraform IaC script which was working till yesterday , but is giving some vague error from today , which you are unable to understand . You want more detailed logs that could potentially help you troubleshoot the issue , and understand the root cause. What can you do to enable this setting? Please note , you are using terraform OSS.
- A.
  Detailed logs are not available in terraform OSS, except the crash message. You need to upgrade to terraform enterprise for this point.
- B.
  Enable TF_LOG to the log level DEBUG, and then set TF_LOG_PATH to the log sink file location. Terraform debug logs will be dumped to the sink path, even in terraform OSS.
- C.
  Terraform OSS can push all its logs to a syslog endpoint. As such, you have to set up the syslog sink, and enable TF_LOG_PATH env variable to the syslog endpoint and all logs will automatically start streaming.
- D.
  Enable the TF_LOG_PATH to the log sink file location, and logging output will automatically be stored there.
9.
Terraform will sync all resources in state by default for every plan and apply, hence for larger infrastructures this can slow down terraform plan and terraform apply commands?
- A.
  False
- B.
  True
10.
Due to the way that the application code iswritten , the s3 bucket must be created before the test role is created , otherwise there will be a problem. How can you ensure that?
Image Source
- A.
  Add explicit dependency using depends on . This will ensure the correct order of resource creation.
- B.
  Create 2 separate terraform config scripts , and run them one by one , 1 for s3 bucket , and another for IAM role , run the S3 bucket script first.
- C.
  This is not possible to control in terraform . Terraform will take care of it in a native way , and create a dependency graph that is best suited for the parallel resource creation.
- D.
  This will already be taken care of by terraform native implicit dependency. Nothing else needs to be done from your end.
11.
Which of the following Terraform files should be ignored by Git when committing code to a repository? (select two)
- A.
  terraform.tfstate
- B.
  variables.tf
- C.
  output.tf
- D.
  terraform.tfvars
12.
Given the Terraform configuration below, in which order will the resources be created?
Image Source
- A.
  aws_eip will be created first aws_instance will be created second
- B.
  aws_instance will be created first aws_eip will be created second
- C.
  Resources will be created simultaneously
13.
Which of the following actions are performed during a terraform init?
- A.
  Initializes the backend configuration
- B.
  Download the declared providers which are supported by HashiCorp
- C.
  Initializes downloaded and/or installed providers
- D.
  Provisions the declared resources in your configuration
14.
When using parent/child modules to deploy infrastructure, how would you export a value from one module to import into another module. For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.
- A.
  Configure an output value in the application module in order to use that value for the DNS module
- B.
  Preconfigure the IP address as a parameter in the DNS module
- C.
  Configure the pertinent provider's configuration with a list of possible IP addresses to use
- D.
  Export the value using terraform export and input the value using terraform input
15.
Multiple providers can be declared within a single Terraform configuration file.
- A.
  False
- B.
  True
16.
In regards to deploying resources in multi-cloud environments, what are some of the benefits of using Terraform rather than a provider's native tooling? (select three)
- A.
  Terraform can help businesses deploy applications on multiple clouds and on-premises infrastructure
- B.
  Terraform is not cloud-agnostic and can be used to deploy resources across a single public cloud
- C.
  Terraform can manage cross-cloud dependencies
- D.
  Terraform simplifies management and orchestration, helping operators build large-scale, multi-cloud infrastructure
17.
True or False: A list(...) contain a number of values of the same type while an object(...) can contain a number of values of different types.
- A.
  True
- B.
  False
18.
Your organization has moved to AWS and has manually deployed infrastructure using the console. Recently, a decision has been made to standardize on Terraform for all deployments moving forward. What can you do to ensure that all existing is managed by Terraform moving forward without interruption to existing services?
- A.
  using terraform import, import the existing infrastructure into your Terraform state
- B.
  resources that are manually deployed in the AWS console cannot be imported by Terraform
- C.
  submit a ticket to AWS and ask them to export the state of all existing resources and use terraform import to import them into the state file
- D.
  delete the existing resources and recreate them using new a Terraform configuration so Terraform can manage them moving forward
19.
Using multi-cloud and provider-agnostic tools provides which of the following benefits?
- A.
  Increased risk due to all infrastructure relying on a single tool for management
- B.
  Slower provisioning speed allows the operations team to catch mistakes before they are applied
- C.
  Can be used across major cloud providers and VM hypervisors
- D.
  Operations teams only need to learn and manage a single tool to manage infrastructure, regardless of where the infrastructure is deployed
20.
In regards to Terraform state file, select all the statements below which are correct.
- A.
  When using local state, the state file is stored in plain-text
- B.
  Terraform Cloud always encrypts state at rest
- C.
  The state file is always encrypted at rest
- D.
  The Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access
- E.
  Using the mask feature, you can instruct Terraform to mask sensitive data in the state file
- F.
  Storing state remotely can provide better security
21.
In Terraform Enterprise, a workspace can be mapped to how many VCS repos?
- A.
  1
- B.
  2
- C.
  5
- D.
  3
22.
What is the best and easiest way for Terraform to read and write secrets from HashiCorp Vault?
- A.
  Integration with a tool like Jenkins
- B.
  Vault provider
- C.
  CLI access from the same machine running Terraform
- D.
  API access using the AppRole auth method
23.
What does the command terraform fmt do?
- A.
  Rewrite Terraform configuration files to a canonical format and style
- B.
  Deletes the existing configuration file
- C.
  Updates the font of the configuration file to the official font supported by HashiCorp
- D.
  Formats the state file in order to ensure the latest state of resources can be obtained
24.
Refer to the following Terraform code variable If count.index is set to 2, which of the following values will be used?
Image Source
- A.
  ami
- B.
  ami-3
- C.
  ami-1
- D.
  ami-2
25.
Terraform-specific settings and behaviors are declared in which configuration block type?
- A.
  terraform
- B.
  resource
- C.
  provider
- D.
  data
26.
After running into issues with Terraform, you need to enable verbose logging to assist with troubleshooting the error. Which of the following values provides the MOST verbose logging?
- A.
  INFO
- B.
  WARN
- C.
  ERROR
- D.
  TRACE
- E.
  DEBUG
27.
You can migrate the Terraform backend but only if there are no resources currently being managed.
- A.
  True
- B.
  False
28.
Which of the following is considered a Terraform plugin?
- A.
  Terraform logic
- B.
  Terraform provider
- C.
  Terraform language 
- D.
  Terraform tooling
29.
Which flag would be used within a Terraform configuration block to identify the specific version of a provider required?
- A.
  required-version
- B.
  required_versions
- C.
  required_providers
- D.
  required-provider
30.
What are some of the features of Terraform state?
- A.
  Determining the correct order to destroy resources
- B.
  Increased performance
- C.
  Mapping configuration to real-world resources
- D.
  Inspection of cloud resources
31.
Which configuration file formats are supported by Terraform? (Select all that apply)
- A.
  JSON
- B.
  Node
- C.
  YAML
- D.
  HCL
- E.
  Go
32.
You've been given requirements to create a security group for a new application. Since your organization standardizes on Terraform, you want to add this new security group with the fewest number of lines of code. What feature could you use to iterate over a list of required tcp ports to add to the new security group?
- A.
  dynamic block
- B.
  terraform import
- C.
  dynamic backend
- D.
  splat expression
33.
Which of the following best describes a Terraform provider?
- A.
  A container for multiple resources that are used together
- B.
  Serves as a parameter for a Terraform module that allows a module to be customized
- C.
  A plugin that Terraform uses to translate the API interactions with the service or provider
- D.
  Describes an infrastructure object, such as a virtual network, compute instance, or other components
34.
You want terraform plan and terraform apply to be executed in Terraform Cloud's run environment but the output is to be streamed locally. Which one of the below you will choose ?
- A.
  This can be done using any of the local or remote backends
- B.
  Local Backends
- C.
  Remote Backends
- D.
  Terraform Backends
35.
Provisioners should only be used as a last resort.
- A.
  False
- B.
  True
36.
What Terraform feature is most applicable for managing small differences between different environments, for example development and production?
- A.
  Environment Variables
- B.
  Backends
- C.
  Workspaces
- D.
  Repositories
37.
After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?
- A.
  The resource will be destroyed and recreated
- B.
  The resource will be created
- C.
  Terraform can't determine how to proceed due to a problem with the state file
- D.
  The resource will be updated in place
38.
Select the answer below that completes the following statement: Terraform Cloud can be managed from the CLI but requires __________?
- A.
  Authentication using MFA
- B.
  An API token
- C.
  Authentication using MFA
- D.
  A TOTP token
39.
What happens when a terraform apply command is executed?
- A.
  creates the execution plan for the deployment of resources
- B.
  reconciles the state Terraform knows about with the real-world infrastructure
- C.
  the backend is initialized and the working directory is prepped
- D.
  applies the changes required in the target infrastructure in order to reach the desired configuration
40.
In the example below, where is the value of the DNS record's IP address originating from?
Image Source
- A.
  Value of the web_server parameter from the variables.tf file
- B.
  The regular expression named module.web_server
- C.
  By querying the AWS EC2 API to retrieve the IP address
- D.
  The output of a module named web_server

Quiz Outcomes

1.

Check out more Practice Exams on our website