HashiCorp Terraform-Associate-003 Exam Dumps

Which of the following is not a way to trigger terraform destroy?

A. Using the destroy command with auto-approve.
B. Passing --destroy at the end of a plan request.
C. Running terraform destroy from the correct directory and then typing yes when prompted in the CLI.

Answer: B

Which of these are features of HCP Terraform/Terraform Cloud? Pick the 2 correct responses below.

A. Automated infrastructure deployment visualization.
B. A web-based user interface (UI).
C. Automatic backups of configuration and state..
D. Remote state storage.

Answer: A,D

Which command(s) adds existing resources in a public cloud into Terraform state?

A. terraform init
B. terraform plan
C. terraform refresh
D. terraform import
E. All of these

Answer: D

In a HCP Terraform/Terraform Cloud workspace linked to a version control repository, speculativeplan runs start automatically when you merge or commit changes to version control.

A. True
B. False

Answer: A

What is the Terraform style convention for indenting a nesting level compared to the one above it?

A. With two spaces.
B. With four spaces.
C. With three spaces.
D. With a tab.

Answer: A

A module block is shown in the Exhibit space of this page. When you use a module block to referencea module from the Terraform Registry such as the one in the example, how do you specify version1.0.0 of the module?

A. Append ?ref=v1.0.0 argument to the source path.
B. You cannot. Modules stored on the public Terraform Registry do not support versioning.
C. Add a version = "1.0.0" attribute to the module block.
D. Nothing. Modules stored on the public Terraform module Registry always default to version 1.0.0.

Answer: C

When do you need to explicitly execute Terraform in refresh-only mode?

A. Before every terraform plan..
B. Before every terraform apply.
C. Before every terraform import.
D. None of the above.

Answer: C

Which method for sharing Terraform modules fulfills the following criteria:Keeps the module configurations confidential within your organization.Supports Terraform's semantic version constraints.Provides a browsable directory of your modules.

A. A Git repository containing your modules.
B. Public Terraform module registry.
C. A subfolder within your workspace.
D. HCP Terraform/Terraform Cloud private registry.

Answer: D

What is the provider for the resource shown in the Exhibit?resource "aws_vpc" "main" {name = "test"}

A. VPC
B. test
C. main
D. aws

Answer: D

Your root module contains a variable named num_servers. Which is the correct way to pass its valueto a child module with an input named servers?

A. servers = num_servers
B. servers = var(num_servers)
C. servers = var.num_servers
D. servers = ${var.num_servers}

Answer: C

When you include a module block in your configuration that references a module from the TerraformRegistry, the "version" attribute is required.

A. True
B. False

Answer: B

You want to use API tokens and other secrets within your team's Terraform workspaces. Where doesHashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

A. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.
B. In HashiCorp Vault.
C. In a terraform.tfvars file, securely managed and shared with your team.
D. In a terraform.tfvars file, checked into your version control system.
E. In a plaintext document on a shared drive.

Answer: A,B,C

Terraform configuration can only call modules from the public registry.

A. True
B. False

Answer: B

You used Terraform to create an ephemeral development environment in the cloud and are nowready to destroy all the infrastructure described by your Terraform configuration. To be safe, youwould like to first see all the infrastructure that Terraform will delete.Which command should you use to show all the resources that will be deleted? (Pick the 2 correctresponses)

A. Run terraform destroy. This will output all the resources that will be deleted before prompting forapproval.
B. Run terraform show -destroy.
C. Run terraform state rm *.

Answer: A,B

Which of these are benefits of using Sentinel with HCP Terraform/Terraform Cloud? (Pick the 3correct responses)

A. You can enforce a list of approved AWS AMIs.
B. Sentinel Policies can be written in HashiCorp Configuration Language (HCL).
C. You can check out and check in cloud access keys.
D. Policy-as-code can enforce security best practices.

Answer: A,C,D

Which of these statements about HCP Terraform/Terraform Cloud workspaces is false?

A. They can securely store cloud credentials.
B. They have role-based access controls.
C. Plans and applies can be triggered via version control system integrations.
D. You must use the CLI to switch between workspaces.

Answer: D

Which of these actions are forbidden when the Terraform state file is locked? (Pick the 3 correctresponses)

A. terraform apply
B. terraform state list
C. terraform destroy
D. terraform fmt

Answer: A,B,C

Which of these are features of HCP Terraform/Terraform Cloud? (Pick the 2 correct responses)

A. Automatic backups of configuration and state.
B. Remote state storage.
C. Automated infrastructure deployment visualization.
D. A web-based user interface (UI).

Answer: B,D