TA-003 practice questions 91–100

1. Question 91 · 342 in bank

   Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files?

   • ADelete the state file every time you run Terraform
   • BStore the state in an encrypted backend
   • CEdit your state file to scrub out the sensitive data
   • DAlways store your secrets in a secrets.tfvars file.

   Show answer

   Answer: B

   Next question

2. Question 92 · 342 in bank

   In contrast to Terraform Open Source, when working with Terraform Enterprise and Cloud Workspaces, conceptually you could think about them as completely separate working directories.

   • ATrue
   • BFalse

   Show answer

   Answer: A

   Next question

3. Question 93 · 342 in bank

   You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (*.tf files). You need to enable debug messages to find this out. Which of the following would achieve this?

   • ASet the environment variable TF_LOG=TRACE
   • BSet verbose logging for each provider in your Terraform configuration
   • CSet the environment variable TF_VAR_log=TRACE
   • DSet the environment variable TF_LOG_PATH

   Show answer

   Answer: A

   Next question

4. Question 94 · 342 in bank

   How is terraform import run?

   • AAs a part of terraform init
   • BAs a part of terraform plan
   • CAs a part of terraform refresh
   • DBy an explicit call
   • EAll of the above

   Show answer

   Answer: D

   Next question

5. Question 95 · 342 in bank

   You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully. What will happen if you delete the VM using the cloud provider console, and run terraform apply again without changing any Terraform code?

   • ATerraform will remove the VM from state file
   • BTerraform will report an error
   • CTerraform will not make any changes
   • DTerraform will recreate the VM

   Show answer

   Answer: D

   Next question

6. Question 96 · 342 in bank

   Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?

   • ADefined in Environment variables
   • BInside the backend block within the Terraform configuration
   • CDefined in a connection configuration outside of Terraform
   • DNone of above

   Show answer

   Answer: A

   Next question

7. Question 97 · 342 in bank

   You must initialize your working directory before running terraform validate.

   • ATrue
   • BFalse

   Show answer

   Answer: A

   Next question

8. Question 98 · 342 in bank

   Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to begin storing the state file in a central location. Which of the following backends would not work?

   • AAmazon S3
   • BArtifactory
   • CGit
   • DTerraform Cloud

   Show answer

   Answer: C

   Next question

9. Question 99 · 342 in bank

   When does Terraform create the .terraform.lock.hcl file?

   • AAfter your first terraform plan.
   • BAfter your first terraform apply.
   • CAfter your first terraform init.
   • DWhenever you enable state locking.

   Show answer

   Answer: C

   Next question

10. Question 100 · 342 in bank

    Which backend does the Terraform CLI use by default?

    • ATerraform Cloud
    • BConsul
    • CRemote
    • DLocal

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

TA-003 practice, question 91. 342 questions available.