Question 1

Which of these is true about Terraform's plugin-based architecture?

Options :

A : Terraform can only source providers from the internet

B : Every provider in a configuration has its own state file for its resources

C : You can create a provider for your API if none exists

D : All providers are part of the Terraform core binary

Answer: C

Question 2

Which of these are benefits of using Sentinel with HCP Terraform/Terraform Cloud? (Pick the 3 correct responses)

Options :

A : You can enforce a list of approved AWS AMIs.

B : Sentinel Policies can be written in HashiCorp Configuration Language (HCL).

C : You can check out and check in cloud access keys.

D : Policy-as-code can enforce security best practices.

Answer: A,C,D

Question 3

A developer accidentally launched a VM (virtual machine) outside of the Terraform workflow and ended up with two servers with the same name. They don't know which VM Terraform manages but do have a list of all active VM IDs. Which of the following methods could you use to discover which instance Terraform manages?

Options :

A :

Run terraform state list to find the names of all VMs, then run terraform state show for each of them to find which VM ID Terraform manages

B : Update the code to include outputs for the ID of all VMs, then run terraform plan to view the outputs

C : Run terraform taint/code on all the VMs to recreate them

D : Use terraform refresh/code to find out which IDs are already part of state

Answer: A

Question 4

Which method for sharing Terraform modules fulfills the following criteria: Keeps the module configurations confidential within your organization. Supports Terraform's semantic version constraints. Provides a browsable directory of your modules.

Options :

A : A Git repository containing your modules.

B : Public Terraform module registry.

C : A subfolder within your workspace.

D : HCP Terraform/Terraform Cloud private registry.

Answer: D

Question 5

Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files. How can you protect that data?

Options :

A : Edit your state file to scrub out the sensitive data

B : Always store your secrets in a secrets.tfvars file

C : Delete the state file every time you run Terraform

D : Store the state in an encrypted backend

Answer: D