Terraform Associate Practice Questions (Part-2)

Image Source

Quiz Questions

1.
A single terraform resource file that defines an aws_instance resource can simple be renamed to azurerm_virtual_machine in order to switch cloud providers
- A.
  False
- B.
  True
2.
Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
Image Source
- A.
  To ensure that the provider version matches the version of Terraform you are using
- B.
  To remove older versions of the provider
- C.
  Providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes
- D.
  To match the version number of your application being deployed via Terraform
3.
What is the default backend for Terraform?
- A.
  Default
- B.
  Local
- C.
  Consul
- D.
  S3
4.
Select two answers to complete the following sentence: Before a new provider can be used, it must be ______ and _______.
- A.
  initialized
- B.
  approved by HashiCorp
- C.
  declared in the configuration
- D.
  uploaded to source control
5.
What Terraform feature is shown in the example below?
Image Source
- A.
  data source
- B.
  local values
- C.
  dynamic block
- D.
  conditional expression
6.
What is the purpose of using the local-exec provisioner?
- A.
  Ensures that the resource is only executed in the local infrastructure where Terraform is deployed
- B.
  To execute one or more commands on the machine running Terraform
- C.
  Executes a command on the resource to invoke an update to the Terraform state
- D.
  To invoke a local executable
7.
In order to make a Terraform configuration file dynamic and/or reusable, static values should be converted to use what?
- A.
  output value
- B.
  regular expressions
- C.
  input parameters
- D.
  module
8.
Which of the following best describes the default local backend?
- A.
  The local backend is how Terraform connects to public cloud services, such as AWS, Azure, or GCP.
- B.
  The local backend stores state on the local filesystem, locks the state using system APIs, and performs operations locally.
- C.
  The local backend is the directory where resources deployed by Terraform have direct access to in order to update their current state.
- D.
  The local backend is where Terraform Enterprise stores logs to be processed by an log collector.
9.
Which of the following allows Terraform users to apply policy as code to enforce standardized configurations for resources being deployed via infrastructure as code?
- A.
  Sentinel
- B.
  Workspaces
- C.
  Functions
- D.
  Module registry
10.
Which of the following represents a feature of Terraform Cloud that is NOT free to customers?
- A.
  roles and team management
- B.
  private module registry
- C.
  workspace management
- D.
  VCS integration
11.
What happens when a terraform plan is executed?
- A.
  Reconciles the state Terraform knows about with the real-world infrastructure
- B.
  Applies the changes required in the target infrastructure in order to reach the desired configuration
- C.
  Creates an execution plan and determines what changes are required to achieve the desired state in the configuration files.
- D.
  The backend is initialized and the working directory is prepped
12.
HashiCorp offers multiple versions of Terraform, including Terraform open-source, Terraform Cloud, and Terraform Enterprise. Which of the following Terraform features are only available in the Enterprise edition?
- A.
  Audit Logs
- B.
  Clustering
- C.
  Private Module Registry
- D.
  Private Network Connectivity
- E.
  Sentinel
- F.
  SAML/SSO
13.
You have been asked to review Terraform configurations for multiple projects in your company. You noticed that there are several identical sets of resources that appear in multiple projects. What feature of Terraform would you recommend to use to reduce the amount of cloned configuration between the projects?
- A.
  Packages
- B.
  Backends
- C.
  Provisioners
- D.
  Modules
14.
Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?
- A.
  terraform destroy
- B.
  terraform refresh
- C.
  terraform taint
- D.
  terrform fmt
15.
You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?
- A.
  Run terraform refresh to ensure that the state file has the latest information for existing resources.
- B.
  Update the configuration file to include the new resources
- C.
  Shut down or stop using the resources being imported so no changes are inadvertently missed
- D.
  Modify the Terraform state file to add the new resources
16.
What are some of the problems of how infrastructure was traditionally managed before Infrastructure as Code? (select three)
- A.
  Pointing and clicking in a management console is a scalable approach and reduces human error as businesses are moving to a multi-cloud deployment model
- B.
  Traditional deployment methods are not able to meet the demands of the modern business where resources tend to live days to weeks, rather than months to years
- C.
  Traditionally managed infrastructure can't keep up with cyclic or elastic applications
- D.
  Requests for infrastructure or hardware required a ticket, increasing the time required to deploy applications
17.
What is a downside to using the Vault provider to read secrets from Vault?
- A.
  Secrets are persisted to the state file and plans
- B.
  Terraform requires a unique auth method to work with Vault
- C.
  Terraform and Vault must be running on the same version
- D.
  Terraform and Vault must be running on the same physical host
18.
Which of the following connection types are supported by the remote-exec provisioner?
- A.
  smb
- B.
  rdp
- C.
  ssh
- D.
  winrm
19.
When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state doesn't become corrupt?
- A.
  Encryption
- B.
  State locking
- C.
  Workspaces
- D.
  Object storage
20.
State is a requirement for Terraform to function.
- A.
  True
- B.
  False
21.
By default, where does Terraform store its state file?
- A.
  Remotely using Terraform Cloud
- B.
  Current working directory
- C.
  Shared directory
- D.
  Amazon S3 bucket
22.
When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other important data aren't inadvertently shared with others. What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)
- A.
  directly querying HashiCorp Vault for the secrets
- B.
  interactively on the command line
- C.
  use the -backend-config=PATH to specify a separate config file
- D.
  command-line key/value pairs
23.
From the answers below, select the advantages of using Infrastructure as Code.
- A.
  Easily change and update existing infrastructure
- B.
  Provide a codified workflow to develop customer-facing applications
- C.
  Safely test modifications using a "dry run" before applying any actual changes
- D.
  Easily integrate with application workflows (GitLab Actions, Azure DevOps, CI/CD tools)
- E.
  Provide reusable modules for easy sharing and collaboration
24.
You have created two workspaces PROD and DEV. You have switched to DEV and provisioned DEV infrastructure from this workspace. Where is your state file stored?
- A.
  terraform.tfstate.DEV
- B.
  terraform.tfstate
- C.
  .terraform.d
- D.
  terraform.tfstate.d
25.
Select the feature below that best completes the sentence: The following list represents the different types of __________ available in Terraform. 1)max 2)min 3)join 4)replace 5)list 6)length 7)range
- A.
  Backends
- B.
  Named values
- C.
  Functions
- D.
  Data sources
26.
Command terraform refresh will update state file?
- A.
  True
- B.
  False
27.
What allows you to conveniently switch between multiple instances of a single configuration within its single backend?
- A.
  Providers
- B.
  Remote Backends
- C.
  Local Backends
- D.
  Workspaces
28.
Complete the following sentence: For local state, the workspaces are stored directly in a...
- A.
  a file called terraform.tfstate.backup
- B.
  directory called terraform.tfstate.d
- C.
  a file called terraform.tfstate
- D.
  directory called terraform.workspaces.tfstate
29.
A user has created a module called "my_test_module" and committed it to GitHub. Over time, several commits have been made with updates to the module, each tagged in GitHub with an incremental version number. Which of the following lines would be required in a module configuration block in terraform to select tagged version v1.0.4?
- A.
  source = "git::https://example.com/my_test_module.git@tag=v1.0.4"
- B.
  source = "git::https://example.com/my_test_module.git&ref=v1.0.4"
- C.
  source = "git::https://example.com/my_test_module.git#tag=v1.0.4"
- D.
  source = "git::https://example.com/my_test_module.git?ref=v1.0.4"
30.
When using providers that require the retrieval of data, such as the HashiCorp Vault provider, in what phase does Terraform actually retrieve the data required?
- A.
  terraform plan
- B.
  terraform delete
- C.
  terraform apply
- D.
  terraform init
31.
If you delete a remote backend from the configuration you will need to rebuild your state files locally.
- A.
  True
- B.
  False
32.
A colleague has informed you that a new version of a Terraform module that your team hosts on an Amazon S3 bucket is broken. The Amazon S3 bucket has versioning enabled. Your colleague tells you to make sure you are not using the latest version in your configuration. You have the following configuration block in your code that refers to the below module. Of the available choices, what is the best way to ensure that you are not using the latest version of the module?
Image Source
- A.
  Add a module version constraint in your configuration's backend block and specify a previous version
- B.
  Add a version key to the module configuration and specify a previous version
- C.
  Add a version property to the module in Terraform's state file and specify a previous version
- D.
  Delete the latest version of the module in S3 to rollback to the previous version
33.
State locking does not happen automatically and must be specified at run
- A.
  True
- B.
  False
34.
True or False. The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.
- A.
  False
- B.
  True
35.
You cannot publish your own modules on the Terraform Registry.
- A.
  False
- B.
  True
36.
Select all features which are exclusive to Terraform Enterprise. (select three)
- A.
  Cost Estimation
- B.
  SAML/SSO
- C.
  Sentinel
- D.
  Audit Logs
- E.
  Clustering
37.
John is writing a module and within the module, there are multiple places where he has to use the same conditional expression but he wants to avoid repeating the same values or expressions multiple times in a configuration,. What is a better approach to dealing with this?
- A.
  Variables
- B.
  Functions
- C.
  Expressions
- D.
  Local Values
38.
You do not need to specify every required argument in the backend configuration. Omitting certain arguments may be desirable to avoid storing secrets, such as access keys, within the main configuration. When some or all of the arguments are omitted, we call this a _____________.
- A.
  Partial configuration
- B.
  Default configuration
- C.
  Incomplete configuration
- D.
  Changing configuration
39.
The terraform state command can be used to ____
- A.
  Update current state
- B.
  Print the current state file in console
- C.
  It is not a valid command
- D.
  Refresh existing state file
40.
Which of the below features of Terraform can be used for managing small differences between different environments which can act more like completely separate working directories.
- A.
  Repositories
- B.
  Backends
- C.
  Workspaces
- D.
  Environment Variables
41.
Question 41
- A.
  Answer A
- B.
  Answer B

Quiz Outcomes

1.

Check out more Practice Exams on our website