TERRAFORM ASSOCIATE EXAM COMPLETE
WITH CORRECT ANSWERS
The terraform.tfstate file always matches your currently built infrastructure.
A. True
B. False
B
One remote backend configuration always maps to a single remote workspace.
A. True
B. False
B
How is the Terraform remote backend different than other state backends such as S3, Consul, etc.?
A. It can execute Terraform runs on dedicated infrastructure on premises or in Terraform Cloud
B. It doesn't show the output of a terraform apply locally
C. It is only available to paying customers
D. All of the above
A
What is the workflow for deploying new infrastructure with Terraform?
A. terraform plan to import the current infrastructure to the state file, make code changes, and terraform
apply to update the infrastructure.
B. Write a Terraform configuration, run terraform show to view proposed changes, and terraform apply to
create new infrastructure.
C. terraform import to import the current infrastructure to the state file, make code changes, and terraform
apply to update the infrastructure.
D. Write a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure
changes, and terraform apply to create new infrastructure.
D
A provider configuration block is required in every Terraform configuration. Example:
,pvorider "provider_name" {
...
}
A.True
B.False
B(58%) - A(42%)
You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need
to rerun the script. Which of the following commands would you use first?
A. terraform taint null_resource.run_script
B. terraform apply -target=null_resource.run_script
C. terraform validate null_resource.run_script
D. terraform plan -target=null_resource.run_script
A
Which provisioner invokes a process on the resource created by Terraform?
A. remote-exec
B. null-exec
C. local-exec
D. file
A
Which of the following is not true of Terraform providers?
A. Providers can be written by individuals
B. Providers can be maintained by a community of users
C. Some providers are maintained by HashiCorp
D. Major cloud vendors and non-cloud vendors can write, maintain, or collaborate on Terraform providers E.
None of the above
E
What command does Terraform require the first time you run it within a configuration directory?
A. terraform import
B. terraform init
C. terraform plan
D. terraform workspace
,B
You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create
any outputs for your code. What is the best method to quickly find the IP address of the resource you
deployed?
A. Run terraform output ip_address to view the result
B. In a new folder, use the terraform_remote_state data source to load in the state file, then write an output
for each resource that you find the state file
C. Run terraform state list to find the name of the resource, then terraform state show to find the attributes
including public IP address
D. Run terraform destroy then terraform apply and look for the IP address in stdout
C
Which of the following is not a key principle of infrastructure as code?
A. Versioned infrastructure
B. Golden images
C. Idempotence
D. Self-describing infrastructure
B
Terraform variables and outputs that set the "description" argument will store that description in the state
file.
A. True
B. False
B
What is the provider for this fictitious resource?
resource "aws_vpc" "main" {
name = "test"
}
A. vpc
B. main
C. aws
D. test
...
, If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?
A. Run terraform refresh
B. It will happen automatically
C. Manually update the state fire
D. Run terraform import
A
What is not processed when running a terraform refresh?
A. State file
B. Configuration file
C. Credentials
D. Cloud provider
B
What information does the public Terraform Module Registry automatically expose about published modules?
A. Required input variables
B. Optional inputs variables and default values
C. Outputs
D. All of the above
E. None of the above
D
If a module uses a local values, you can expose that value with a terraform output.
A. True
B. False
A
You should store secret data in the same version control repository as your Terraform configuration.
A. True
B. False
B
Which of the following is not a valid string function in Terraform?
A. split
B. join
WITH CORRECT ANSWERS
The terraform.tfstate file always matches your currently built infrastructure.
A. True
B. False
B
One remote backend configuration always maps to a single remote workspace.
A. True
B. False
B
How is the Terraform remote backend different than other state backends such as S3, Consul, etc.?
A. It can execute Terraform runs on dedicated infrastructure on premises or in Terraform Cloud
B. It doesn't show the output of a terraform apply locally
C. It is only available to paying customers
D. All of the above
A
What is the workflow for deploying new infrastructure with Terraform?
A. terraform plan to import the current infrastructure to the state file, make code changes, and terraform
apply to update the infrastructure.
B. Write a Terraform configuration, run terraform show to view proposed changes, and terraform apply to
create new infrastructure.
C. terraform import to import the current infrastructure to the state file, make code changes, and terraform
apply to update the infrastructure.
D. Write a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure
changes, and terraform apply to create new infrastructure.
D
A provider configuration block is required in every Terraform configuration. Example:
,pvorider "provider_name" {
...
}
A.True
B.False
B(58%) - A(42%)
You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need
to rerun the script. Which of the following commands would you use first?
A. terraform taint null_resource.run_script
B. terraform apply -target=null_resource.run_script
C. terraform validate null_resource.run_script
D. terraform plan -target=null_resource.run_script
A
Which provisioner invokes a process on the resource created by Terraform?
A. remote-exec
B. null-exec
C. local-exec
D. file
A
Which of the following is not true of Terraform providers?
A. Providers can be written by individuals
B. Providers can be maintained by a community of users
C. Some providers are maintained by HashiCorp
D. Major cloud vendors and non-cloud vendors can write, maintain, or collaborate on Terraform providers E.
None of the above
E
What command does Terraform require the first time you run it within a configuration directory?
A. terraform import
B. terraform init
C. terraform plan
D. terraform workspace
,B
You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create
any outputs for your code. What is the best method to quickly find the IP address of the resource you
deployed?
A. Run terraform output ip_address to view the result
B. In a new folder, use the terraform_remote_state data source to load in the state file, then write an output
for each resource that you find the state file
C. Run terraform state list to find the name of the resource, then terraform state show to find the attributes
including public IP address
D. Run terraform destroy then terraform apply and look for the IP address in stdout
C
Which of the following is not a key principle of infrastructure as code?
A. Versioned infrastructure
B. Golden images
C. Idempotence
D. Self-describing infrastructure
B
Terraform variables and outputs that set the "description" argument will store that description in the state
file.
A. True
B. False
B
What is the provider for this fictitious resource?
resource "aws_vpc" "main" {
name = "test"
}
A. vpc
B. main
C. aws
D. test
...
, If you manually destroy infrastructure, what is the best practice reflecting this change in Terraform?
A. Run terraform refresh
B. It will happen automatically
C. Manually update the state fire
D. Run terraform import
A
What is not processed when running a terraform refresh?
A. State file
B. Configuration file
C. Credentials
D. Cloud provider
B
What information does the public Terraform Module Registry automatically expose about published modules?
A. Required input variables
B. Optional inputs variables and default values
C. Outputs
D. All of the above
E. None of the above
D
If a module uses a local values, you can expose that value with a terraform output.
A. True
B. False
A
You should store secret data in the same version control repository as your Terraform configuration.
A. True
B. False
B
Which of the following is not a valid string function in Terraform?
A. split
B. join
