QUESTION: 177

Hanah is writing a terraform configuration with nested modules, there are multiple places where she has to use the same conditional expression but she wants to avoid repeating the same values or expressions multiple times in the configuration,. What is a better approach to dealing with this?

Expressions
Local Values
Variables
Functions

Answer(s): B

Reference:

https://www.terraform.io/docs/configuration/locals.html

Reveal Solution Next Question

QUESTION: 178

Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
1. terraform 2. {
3. required_providers 4. {
5. aws = "~> 1.0"
6. }
7. }

To remove older versions of the provider.
To ensure that the provider version matches the version of Terraform you are using.
Providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes.
To match the version number of your application being deployed via Terraform.

Answer(s): C

Reveal Solution Next Question

QUESTION: 179

In regards to Terraform state file, select all the statements below which are correct?

When using local state, the state file is stored in plain-text.
The state file is always encrypted at rest.
Storing state remotely can provide better security.
Using the mask feature, you can instruct Terraform to mask sensitive data in the state file.
The Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access.
Terraform Cloud always encrypts state at rest.

Answer(s): A,C,E,F

Explanation:

Terraform state can contain sensitive data, depending on the resources in use and your definition of "sensitive." The state contains resource IDs and all resource attributes. For resources such as databases, this may contain initial passwords.
When using local state, state is stored in plain-text JSON files.
When using remote state, state is only ever held in memory when used by Terraform. It may be encrypted at rest, but this depends on the specific remote state backend.
Storing Terraform state remotely can provide better security. As of Terraform 0.9, Terraform does not persist state to the local disk when remote state is in use, and some backends can be configured to encrypt the state data at rest.
Recommendations
If you manage any sensitive data with Terraform (like database passwords, user passwords, or private keys), treat the state itself as sensitive data.
Storing state remotely can provide better security. As of Terraform 0.9, Terraform does not persist state to the local disk when remote state is in use, and some backends can be configured to encrypt the state data at rest.
For example:
* Terraform Cloud always encrypts state at rest and protects it with TLS in transit. Terraform Cloud also knows the identity of the user requesting state and maintains a history of state changes. This can be used to control access and track activity. Terraform Enterprise also supports detailed audit logging.
* The S3 backend supports encryption at rest when the encrypt option is enabled. IAM policies and logging can be used to identify any invalid access. Requests for the state go over a TLS connection.

Reveal Solution Next Question

QUESTION: 180

Your manager has instructed you to start using terraform for your day-to-day operations, but your security team is concerned about the terraform state files. They have heard it contains confidential information, and are worried that it will not be securely protected. What should be your response to the security team in this regard?

Inform the security team that using terraform state is optional . There are ways to avoid it , and you will do the same.
Ensure that the state is managed in a remote backend , preferably an enterprise grade state management system like Terraform Cloud.
Mask the confidential entries in the terraform state file , using Vault Enterprise, another Hashicorp product , while keeping it locally.
Keep the state file locally on each developer machine , and ensure that there is a local protection software like KeyPass protecting it.

Answer(s): B

Explanation:

State is very important topic for exam. Please read all of the below subtopics Purpose
Import Existing Resources Locking
Workspaces Remote State Sensitive Data

Reference:

https://www.terraform.io/docs/state/index.html

Reveal Solution Next Question

Free Terraform Associate Exam Braindumps (page: 45)

QUESTION: 177

Reference:

QUESTION: 178

QUESTION: 179

Explanation:

QUESTION: 180

Explanation:

Reference: