Terraform associate exam 101-150

Terraform associate exam 101-150
If a module declares a variable with a default, that variable must also be defined
within the module.

A. True
B. False
B
Which option cannot be used to keep secrets out of Terraform configuration
files?

A. Environment Variables
B. Mark the variable as sensitive
C. A Terraform provider
D. A -var flag
B
Which of the following arguments are required when declaring a Terraform
output?

A. sensitive
B. description
C. default
D. value
D
Your risk management organization requires that new AWS S3 buckets must be
private and encrypted at rest. How can Terraform Enterprise automatically and
proactively enforce this security control?

A. With a Sentinel policy, which runs before every apply
B. By adding variables to each TFE workspace to ensure these settings are
always enabled
C. With an S3 module with proper settings for buckets
D. Auditing cloud storage buckets with a vulnerability scanning tool
A
Most Terraform providers interact with ____________.

A. API
B. VCS Systems
C. Shell scripts
D. None of the above
A
terraform validate validates that your infrastructure matches the Terraform state
file.

, A. True
B. False
B
What does terraform import allow you to do?

A. Import a new Terraform module
B. Use a state file to import infrastructure to the cloud
C. Import provisioned infrastructure to your state file
D. Import an existing state file to a new Terraform workspace
C
FILL BLANK -
In the below configuration, how would you reference the module output vpc_id?

module "vpc" {
source = "terraform-and-modules/vpc/aws"
cidr = "10.0.0.0/16"
name = "test-vpc".
}

Type your answer in the field provided. The text field is not case sensitive and all
variations of the correct answer are accepted.
module.vpc.id
How would you reference the Volume IDs associated with the ebs_block_device
blocks in this configuration?

resource "aws_instance" "example" {
ami = "ami-abc123"
instance_type = "t2.micro"
}

ebs_block_device {
device_name = "sda2"
volume_size = 16
}

ebs_block_device {
device_name = "sda3"
volume_size = 20
}

A. aws_instance.example.ebs_block_device.[*].volume_id
B. aws_instance.example.ebs_block_device.volume_id
C. aws_instance.example.ebs_block_device[sda2,sda3].volume_id
D. aws_instance.example.ebs_block_device.*.volume_id
A(57%) - D(43%)