QUESTION: 125

Terraform has detailed logs which can be enabled by setting the environmental variable.

TF_TRACE
TF_DEBUG
TF_LOG
TF_INFO

Answer(s): C

Explanation:

Terraform has detailed logs that can be enabled by setting the TF_LOG environment variable to any value. This will cause detailed logs to appear on stderr.
You can set TF_LOG to one of the log levels TRACE, DEBUG, INFO, WARN or ERROR to change the verbosity of the logs. TRACE is the most verbose and it is the default if TF_LOG is set to something other than a log level name.

Reference:

https://www.terraform.io/docs/internals/debugging.html

Reveal Solution Next Question

QUESTION: 126

Which of the following best describes a Terraform provider?

A plugin that Terraform uses to translate the API interactions with the service or provider.
Serves as a parameter for a Terraform module that allows a module to be customized.
Describes an infrastructure object, such as a virtual network, compute instance, or other components.
A container for multiple resources that are used together.

Answer(s): A

Explanation:

A provider is responsible for understanding API interactions and exposing resources. Providers generally are an IaaS (e.g. Alibaba Cloud, AWS, GCP, Microsoft Azure, OpenStack), PaaS (e.g. Heroku), or SaaS services (e.g. Terraform Cloud, DNSimple, Cloudflare). https://www.terraform.io/docs/providers/index.html

Reveal Solution Next Question

QUESTION: 127

Which one of the following will run echo 0 and echo 1 on a newly created host?

provisioner "local-exec" { command = "echo 0"
command = "echo 1"
}
provisioner "remote-exec" {
inline = [
echo 0,
echo 1
]
}
provisioner "remote-exec" {
command = "${echo 0}"
command = "${echo 1}"
}
provisioner "remote-exec" {
inline = [
"echo 0",
"echo 1"
]
}

Answer(s): D

Explanation:

remote-exec Provisioner Example usage
resource "aws_instance" "web" { # ...
provisioner "remote-exec" { inline = [
"puppet apply",
"consul join ${aws_instance.web.private_ip}",
]
}
}

Reveal Solution Next Question

QUESTION: 128

How can you ensure that the engineering team who has access to git repo will not create any non- compliant resources that might lead to a security audit failure in future. your team is using Hashicorp Terraform Enterprise Edition.

Use Terraform OSS Sentinel Lite version , which will save cost , since there is no charge for OSS , but it can still check for most non-compliant rules using Policy-As-Code.
Implement a review process where every code will be reviewed before merging to the master branch.
Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and write Policy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.
Create a design /security document (in PDF) and share to the team , and ask them to always follow that document , and never deviate from it.

Answer(s): C

Reference:

https://www.terraform.io/docs/cloud/sentinel/index.html

Reveal Solution Next Question

Free Terraform Associate Exam Braindumps (page: 32)

QUESTION: 125

Explanation:

Reference:

QUESTION: 126

Explanation:

QUESTION: 127

Explanation:

QUESTION: 128

Reference: