HashiCorp Certified: Terraform Associate TA-002-P Dumps Questions

test2022-07-19T06:28:25+00:00

TA-002-P Dumps Questions are available to assist you in expanding your knowledge and preparing for the HashiCorp Certified: Terraform Associate Exam. FreeTestShare TA-002-P Dumps Questions offer 100% real exam questions and answers that you’ll encounter on the real exam. TA-002-P Dumps Questions allow you to practice the types of questions that may occur on the exam and to think about the answers ahead of time. TA-002-P Dumps Questions are exactly the right study tools that contain genuine exam questions and answers to help you pass the HashiCorp Certified: Terraform Associate exam on the first try!

To put your skills to the test, try free TA-002-P free dumps!

Page 1 of 10

1. You have recently started a new job at a retailer as an engineer. As part of this new role, you have been tasked with evaluating multiple outages that occurred during peak shopping time during the holiday season. Your investigation found that the team is manually deploying new compute instances and configuring each compute instance manually. This has led to inconsistent configuration between each compute instance.

How would you solve this using infrastructure as code?

Implement a ticketing workflow that makes engineers submit a ticket before manually provisioning and configuring a resource

Implement a checklist that engineers can follow when configuring compute instances

Replace the compute instance type with a larger version to reduce the number of required deployments

Implement a provisioning pipeline that deploys infrastructure configurations committed to your version control system following code reviews

2. Terraform variables and outputs that set the "description" argument will store that description in the state file.

True

False

3. Given the below resource configuration -

resource "aws_instance" "web" { # ... count = 4 }

What does the terraform resource address aws_instance.web refer to?

It refers to all 4 web instances, together, for further individual segregation, indexing is required, with a 0 based index.

It refers to the last web EC2 instance, as by default, if no index is provided, the last / N-1 index is used.

It refers to the first web EC2 instance out of the 4, as by default, if no index is provided, the first / 0th index is used.

The above will result in a syntax error, as it is not syntactically correct. Resources defined using count, can only be referenced using indexes.

4. What is the purpose of using the local-exec provisioner? (Select Two)

To invoke a local executable.

Executes a command on the resource to invoke an update to the Terraform state.

To execute one or more commands on the machine running Terraform.

Ensures that the resource is only executed in the local infrastructure where Terraform is deployed.

5. You cannot publish your own modules on the Terraform Registry.

False

True

6. What type of block is used to construct a collection of nested configuration blocks?

for_each

repeated

nesting

dynamic

7. When using parent/child modules to deploy infrastructure, how would you export a value from one module to import into another module.

For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

Export the value using terraform export and input the value using terraform input.

Configure the pertinent provider's configuration with a list of possible IP addresses to use.

Configure an output value in the application module in order to use that value for the DNS module.

Preconfigure the IP address as a parameter in the DNS module.

8. Terraform has detailed logs which can be enabled by setting the _________ environmental variable.

TF_TRACE

TF_DEBUG

TF_LOG

TF_INFO

9. Multiple provider instances blocks for AWS can be part of a single configuration file?

False

True

10. Which of the below terraform commands do not run terraform refresh implicitly before taking actual action of the command?

terraform apply

terraform destroy

terraform init

terraform import

terraform plan

Page 2 of 10

11. How is terraform import run?

As a part of terraform init

As a part of terraform plan

As a part of terraform refresh

By an explicit call

All of the above

12. Which one is the right way to import a local module names consul?

module "consul" { source = "consul"}

module "consul" { source = "./consul"}

module "consul" { source = "../consul"}

module "consul" { source = "module/consul"}

13. Only the user that generated a plan may apply it.

True

False

14. True or False. The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.

False

True

15. Which of the following challenges would Terraform be a candidate for solving? (Select THREE)

Enable self-service infrastructure to allocate resources on your proprietary private cloud.

Reduce the number of workflows needed for managing infrastructure across each of the companies public and private clouds.

Utilize a single tool for all of the infrastructure and configuration management needs.

Have a single interoperable tool to manage the variety of services including GitHub repositories, MySQL database, and Kubernetes clusters.

16. You write a new Terraform configuration and immediately run terraform apply in the CLI using the local backend.

Why will the apply fail?

Terraform needs you to format your code according to best practices first

Terraform needs to install the necessary plugins first

The Terraform CLI needs you to log into Terraform cloud first

Terraform requires you to manually run terraform plan first

17. A Terraform provisioner must be nested inside a resource configuration block.

True

False

18. You have created an AWS EC2 instance of type t2.micro through your terraform configuration file ec2.tf . Now you want to change the instance type from t2.micro to

t2.medium. Accordingly you have changed your configuration file and and ran terraform plan. After running terraform plan you check the output and saw one instance will be updated from t2.micro --> t2.medium. After this you went to grab a coffee without running terraform apply and meanwhile a member of your team changed the instance type of that EC2 instance to t2.medium from aws console. After coming to your desk you run terraform apply.

What will happen?

No resource will be updated and you will see the message: Apply Complete ! Resources: 0 added, 0 changed, 0 destroyed.

The instance type will be changed to t2.micro and again will be changed to t2.medium

terraform apply will through an error.

1 resource will be updated and you will see the message: Apply Complete ! Resources: 0 added, 1 changed, 0 destroyed.

19. Refer to the below code where developer is outputting the value of the database password but has used sensitive parameter to hide the output value in the CLI.

output "db_password" { value = aws_db_instance.db.password description = "The password for logging in to the database." sensitive = true}

Since sensitive is set to true, the value associated with db password will not be present in state file as plain-text?

False

True

20. Your team uses terraform OSS. You have created a number of resuable modules for important, independent network components that you want to share with your team to enhance consistency.

What is the correct option/way to do that?

Terraform modules cannot be shared in OSS version. Each developer needs to maintain their own modules and leverage them in the main tf file.

Upload your modules with proper versioning in the terraform public module registry. Terraform OSS is directly integrated with the public module registry, and can reference the modules from the code in the main tf file.

Terraform module sharing is only available in Enterprise version via terraform private module registry, so no way to enable it in OSS version.

Store your modules in a NAS/ shared file server, and ask your team members to directly reference the code from there. This is the only viable option in terraform OSS, which is better than individually maintaining module versions for every developer.

Page 3 of 10

21. Multiple configurations for the same provider can be used in a single configuration file.

False

True

22. Your manager has instructed you to start using terraform for the entire infra provisioning of the application stack. There are 4 environments C DEV, QA, UAT, and PROD. The application team has asked for complete segregation between these environments including the backend, state, and also configurations, since there will be unique resources in different environments.

What is the possible way to structure the terraform code to facilitate that?

Completely separate the working directories, keep one for each environment. For each working directory, maintain a separate configuration file, variables file, and map to a different backend.

Completely separate the working directories, keep one for each environment. For each working directory, maintain a separate configuration file, variables file, and map to the same backend.

Implement terraform workspaces, and map each environment with one workspace.

Enable remote backend storage. Configure 4 different backend storages, one for each environment.

23. Terra form installs its providers during which phase?

Man

Init

Refresh

All of the above

24. terraform validate validate validates that your infrastructure matches the Terraform state file.

True

False

25. Examine the following Terraform configuration, which uses the data source for an AWS AMI.

What value should you enter for the ami argument in the AWS instance resource?

aws_ami.ubuntu

data.aws_ami.ubuntu

data.aws_ami.ubuntu.id

aws_ami.ubuntu.id

26. If writing Terraform code that adheres to the Terraform style conventions, how would you properly indent each nesting level compared to the one above it?

With four spaces

With a tab

With three spaces

With two spaces

27. When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

a private install

disconnected

air-gapped

non-traditional

28. What does the default "local" Terraform backend store?

tfplan files

Terraform binary

Provider plugins

State file

29. All standard backend types support state storage, locking, and remote operations like plan.

apply and destroy.

True

False

30. Module variable assignments are inherited from the parent module and do not need to be explicitly set.

True

False

Page 4 of 10

31. Forcing the recreation of a resource is useful when you want a certain side effect of recreation that is not visible in the attributes of a resource.

What command will do this?

terraform taint

terraform apply

terraform graph

terraform refresh

32. Your team has started using terraform OSS in a big way, and now wants to deploy multi region deployments (DR) in aws using the same terraform files . You want to deploy the same infra (VPC,EC2 …) in both us-east-1 ,and us-west-2 using the same script, and then peer the VPCs across both the regions to enable DR traffic. But, when you run your script, all resources are getting created in only the default provider region.

What should you do? Your provider setting is as below -

# The default provider configuration provider "aws" { region = "us-east-1" }

No way to enable this via a single script . Write 2 different scripts with different default providers in the 2 scripts, one for us-east, another for us-west.

Create a list of regions, and then use a for-each to iterate over the regions, and create the same resources ,one after the one, over the loop.

Use provider alias functionality, and add another provider for us-west region . While creating the resources using the tf script, reference the appropriate provider (using the alias).

Manually create the DR region, once the Primary has been created, since you are using terraform OSS, and multi region deployment is only available in Terraform Enterprise.

33. Terraform providers are always installed from the Internet.

True

False

34. Where does the Terraform local backend store its state?

In the /tmp directory

In the terraform.tfvars file

In the terraform.tfstate file

In the user's .terraformrc file

35. HashiCorp offers multiple versions of Terraform, including Terraform open-source, Terraform Cloud, and Terraform Enterprise.

Which of the following Terraform features are only available in the Enterprise edition? (select four)

SAML/SSO

Sentinel

Audit Logs

Clustering

Private Module Registry

Private Network Connectivity

36. In the following code snippet, the block type is identified by which string?

"aws_instance"

resource

"db"

instance_type

37. You have created a custom variable definition file testing.tfvars.

How will you use it for provisioning infrastructure?

terraform apply -var-state-file ="testing.tfvars"

terraform plan -var-file="testing.tfvar"

terraform apply -var-file="testing.tfvars"

terraform apply var-file="testing.tfvars"

38. Any user can publish modules to the public Terraform Module Registry.

True

False

39. Workspaces in Terraform provides similar functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

True

False

40. When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other important data aren't inadvertently shared with others.

What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)

directly querying HashiCorp Vault for the secrets

command-line key/value pairs

use the -backend-config=PATH to specify a separate config file

interactively on the command line

Page 5 of 10

41. What is one disadvantage of using dynamic blocks in Terraform?

They cannot be used to loop through a list of values

Dynamic blocks can construct repeatable nested blocks

They make configuration harder to read and understand

Terraform will run more slowly

42. In the example below, the depends_on argument creates what type of dependency?

implicit dependency

internal dependency

explicit dependency

non-dependency resource

43. Select the most accurate statement to describe the Terraform language from the following list.

Terraform is an immutable, declarative, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally JSO

Terraform is a mutable, declarative, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSO

Terraform is an immutable, procedural, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSO

Terraform is a mutable, procedural, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally YAM

44. By default, a defined provisioner is a creation-time provisioner.

True

False

45. 1.Terraform can run on Windows or Linux, but it requires a Server version of the Windows operating system.

True

False

46. terraform refresh command will not modify infrastructure, but does modify the state file.

True

False

47. Which of the below are paid features of Terraform Cloud?

Full API Coverage

Secure variable Storage

Roles/ Team management

Cost Estimation

Private Module Registry

Sentinel policies

48. Terraform plan updates your state file.

True

False

49. When writing Terraform code, HashiCorp recommends that you use how many spaces between each nesting level?

50. By default, where does Terraform store its state file?

Amazon S3 bucket

shared directory

remotely using Terraform Cloud

current working directory

Page 6 of 10

51. Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

terraform fmt

terraform destroy

terraform taint

terraform refresh

52. Why should secrets not be hard coded into Terraform code? Choose two correct answers

All passwords should be rotated on a quarterly basis.

The Terraform code is copied to the target resources to be applied locally and could expose secrets if a target resource is compromised.

Terraform code is typically stored in version control, as well as copied to the systems from h it's run. Any of those may not have robust security mechanisms.

It makes the code less reusable.

53. A provider configuration block is required in every Terraform configuration.

Example:

True

False

54. Please identify the offerings which are unique to Terraform Enterprise, and not available in either Terraform OSS, or Terraform Cloud. Select four.

Audit Logs

Private Network Connectivity

VCS Integration

Sentinel

Clustering

55. You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully.

What will happen if you delete the VM using the cloud provider console, and run terraform apply again without changing any Terraform code?

Terraform will remove the VM from state file

Terraform will report an error

Terraform will not make any changes

Terraform will recreate the VM

56. True or False? When using the Terraform provider for Vault, the tight integration between these HashiCorp tools provides the ability to mask secrets in the terraform plan and state files.

False

True

57. terraform validate reports HCL syntax errors.

True

False

58. Multiple providers can be declared within a single Terraform configuration file.

True

False

59. You want to get involved in the development of Terraform. As this is an open source project, you would like to contribute a fix for an open issue of Terraform.

What programming language will need to use to write the fix?

It depends on which command issue related to.

Python

Java

60. Using multi-cloud and provider-agnostic tools provides which of the following benefits?

Operations teams only need to learn and manage a single tool to manage infrastructure, regardless of where the infrastructure is deployed.

Increased risk due to all infrastructure relying on a single tool for management.

Can be used across major cloud providers and VM hypervisors.

Slower provisioning speed allows the operations team to catch mistakes before they are applied.

Page 7 of 10

61. You want to define multiple data disks as nested blocks inside the resource block for a virtual machine.

What Terraform feature would help you define the blocks using the values in a variable?

Local values

Dynamic blocks

Count arguments

Collection functions

62. Which of the following is the right substitute for static values that can make Terraform configuration file more dynamic and reusable?

Output value

Input parameters

Functions

Modules

63. You have multiple developers working on a terraform project (using terraform OSS), and have saved the terraform state in a remote S3 bucket. However, team is intermittently experiencing inconsistencies in the provisioned infrastructure / failure in the code. You have traced this problem to simultaneous/concurrent runs of terraform apply command for 2/more developers.

What can you do to fix this problem?

Use terraform workspaces feature, this will fix this problem by default, as every developer will have their own state file, and terraform will merge them on server side on its own.

Structure your team in such a way that only one individual will run terraform apply, everyone will just make changes and share with him. Then there will be no chance of any inconsistencies.

Stop using remote state, and store the developer tfstate in their own machine. Once a day, all developers should sit together and merge the state files manually, to avoid any inconsistencies.

Enable terraform state locking for the S3 backend using DynamoDB table. This prevents others from acquiring the lock and potentially corrupting your state.

64. What features does the hosted service Terraform Cloud provide? (Choose two.)

Automated infrastructure deployment visualization

Automatic backups

Remote state storage

A web-based user interface (UI)

65. When running the command terraform taint against a managed resource you want to force recreation upon, Terraform will immediately destroy and recreate the resource.

True

False

66. When using Terraform in a team it is important for everyone to be working with the same state so that operations will be applied to the same remote objects.

Which of the below option is a recommended solution for this?

Remote State

Module

Use the cached state and treat this as the record of truth.

Workspace

67. How would you be able to reference an attribute from the vsphere_datacenter data source for use with the argument within the vsprere_folder resource in the following configuration?

vsphere_datacenter.dc.id

data.vsphere_datacenter.dc

data.dc,id

data.vsphere_datacenter.dc.id

68. Matt wants to import a manually created EC2 instance into terraform so that he can manage the EC2 instance through terraform going forward. He has written the configuration file of the EC2 instance before importing it to Terraform. Following is the code:

resource "aws_instance" "matt_ec2" { ami = "ami-bg2640de" instance_type = "t2.micro" vpc_security_group_ids = ["sg-6ae7d613", "sg-53370035"] key_name = "mysecret" subnet_id = "subnet-9e3cfbc5" }

The instance id of that EC2 instance is i-0260835eb7e9bd40 How he can import data of EC2 to state file?

terraform import aws_instance.id = i-0260835eb7e9bd40

terraform import i-0260835eb7e9bd40

terraform import aws_instance.i-0260835eb7e9bd40

terraform import aws_instance.matt_ec2 i-0260835eb7e9bd40

69. Which of the following best describes a Terraform provider?

A plugin that Terraform uses to translate the API interactions with the service or provider.

Serves as a parameter for a Terraform module that allows a module to be customized.

Describes an infrastructure object, such as a virtual network, compute instance, or other components.

A container for multiple resources that are used together.

70. How would you reference the "name" value of the second instance of this fictitious resource?

element(aws_instance.web, 2)

aws_instance.web[1].name

aws_instance.web[1]

aws_instance.web[2].name

aws_instance.web.*.name

Page 8 of 10

71. Terraform configuration (including any module references) can contain only one Terraform provider type.

True

False

72. terraform init initializes a sample main.tf file in the current directory.

True

False

73. Terraform init can indeed be run only a few times, because, every time terraform init will initialize the project, and download all plugins from the internet repository, regardless of whether they were present or not, and this increases the waiting time

True

False

74. You want terraform plan and terraform apply to be executed in Terraform Cloud's run environment but the output is to be streamed locally.

Which one of the below you will choose?

Local Backends.

Terraform Backends.

This can be done using any of the local or remote backends.

Remote Backends.

75. The Terraform CLI will print output values from a child module after running terraform apply.

True

False

76. When using remote state, state is only ever held in memory when used by Terraform.

False

True

77. CORRECT TEXT

FILL BLANK

Which flag would you add to terraform plan to save the execution plan to a file? Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

78. Select the answer below that completes the following statement: Terraform Cloud can be managed from the CLI but requires __________?

an API token

a TOTP token

a username and password

authentication using MFA

79. Which of the following best describes the default local backend?

The local backend is where Terraform Enterprise stores logs to be processed by an log collector.

The local backend stores state on the local filesystem, locks the state using system APIs, and performs operations locally.

The local backend is the directory where resources deployed by Terraform have direct access to in order to update their current state.

The local backend is how Terraform connects to public cloud services, such as AWS, Azure, or GC

80. You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need to rerun the script.

Which of the following commands would you use first?

terraform taint null_resource.run_script

terraform apply -target=null_resource.run_script

terraform validate null_resource.run_script

terraform plan -target=null_resource.run_script

Page 9 of 10

81. In order to make a Terraform configuration file dynamic and/or reusable, static values should be converted to use what?

Input Parameters

Module

Regular Expressions

Output Value

82. Refer below code where pessimistic constraint operator has been used to specify a version of a provider.

terraform { required_providers { aws = "~> 1.1.0" }}

Which of the following options are valid provider versions that satisfy the above constraint. (select two)

1.1.1

1.2.9

1.1.8

1.2.0

83. terraform apply will fail if you have not run terraform plan first to update the plan output.

True

False

84. Which of the following are string functions? Select three

tostring

tonumber

Chomp

format

join

85. A variable az has the following default value.

What will be the datatype of the variable?

az=["us-west-1a","us-east-1a"]

Object

List

Map

String

86. What kind of configuration block will create an infrastructure object with settings specified in the block?

state

provider

resource

data

87. Hanah is writing a terraform configuration with nested modules, there are multiple places where she has to use the same conditional expression but she wants to avoid repeating the same values or expressions multiple times in the configuration.

What is a better approach to dealing with this?

Expressions

Local Values

Variables

Functions

88. Which of the following is an invalid variable name?

count

web

var1

instance_name

89. You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (files). You need to enable debug messages to find this out.

Which of the following would achieve this?

Set the environment variable TF_LOG=TRACE

Set verbose logging for each provider in your Terraform configuration

Set the environment variable TF_VAR_log=TRACE

Set the environment variable TF_LOG_PATH

90. terraform refresh will update the state file?

True

False

Page 10 of 10

91. All modules published on the official Terraform Module Registry have been verified by HashiCorp.

True

False

92. What does terraform refresh modify?

Your cloud infrastructure

Your Terraform plan

Your state file

Your Terraform configuration

93. If you delete a remote backend from the configuration, will you need to rebuild your state files locally?

False

True