Question 1

Which statements about sensitive data and Terraform state are correct? (select two)

Options :

A : Marking a variable sensitive = true does not prevent it from being written to state.

B : Using local state automatically encrypts secrets on disk without extra steps.

C : Sensitive outputs are never stored in state, only displayed at apply time.

D : The state file can contain sensitive values in plaintext by default.

Answer: A,D

Question 2

In Terraform, how are input variables scoped with respect to modules?

Options :

A : By default, all parent variables are automatically visible inside child modules, even without being passed explicitly

B : Variables are local to each module, and child modules can only access parent values when passed to them.

C : Variables in the root module are considered "global" and can be used by any referenced module by default.

D : Child variables become available to the parent automatically after the apply completes.

Answer: B

Question 3

You have an existing VPC in your account and have added the data block to your configuration, as shown below. How would you reference the id of the VPC?data "aws_vpc" "production" { tags = { Name = "prod" }}

Options :

A : aws_vpc.production.id

B : var.vpc_id

C : data.aws_vpc.production.vpc.id

D : data.aws_vpc.production.id

Answer: D

Question 4

Your teammate runs terraform plan and shares the output showing 15 resources to be created. You review it and approve the changes. However, before applying, your teammate runs terraform plan again. What will happen?

Options :

A : Terraform will generate a new plan that may differ from the first one if any state or configuration changes occurred

B : Terraform will skip the planning phase since a plan was just generated and Terraform already understands the changes that need to be made

C : Terraform will throw an error stating that a plan already exists and the first plan must be applied first

D : Terraform will automatically execute the previously generated plan since it was generated first

Answer: A

Question 5

In HCP Terraform, what is the purpose of using a run trigger?

Options :

A : to require human approval before applying changes in specific workspaces, such as production environments

B : to automatically queue a new run in one workspace after another workspace applies successfully

C : to provide temporary cloud credentials so a workspace can authenticate with least privilege during runs

D : to force a workspace to always run from the newest commit of its VCS branch

Answer: B