Free Terraform Associate Exam Braindumps (page: 19)

Page 18 of 113

What is the name assigned by Terraform to reference this resource?

  1. compute_instance
  2. main
  3. google
  4. test

Answer(s): B



You’re building a CI/CD (continuous integration/ continuous delivery) pipeline and need to inject sensitive variables into your Terraform run.
How can you do this safely?

  1. Pass variables to Terraform with a –var flag
  2. Copy the sensitive variables into your Terraform code
  3. Store the sensitive variables in a secure_vars.tf file
  4. Store the sensitive variables as plain text in a source code repository

Answer(s): A


Reference:

https://blog.gruntwork.io/a-comprehensive-guide-to-managing-secrets-in-your-terraform-code- 1d586955ace1



Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files?

  1. Delete the state file every time you run Terraform
  2. Store the state in an encrypted backend
  3. Edit your state file to scrub out the sensitive data
  4. Always store your secrets in a secrets.tfvars file.

Answer(s): B



In contrast to Terraform Open Source, when working with Terraform Enterprise and Cloud Workspaces, conceptually you could think about them as completely separate working directories.

  1. True
  2. False

Answer(s): A

Explanation:

"When run locally, Terraform manages each collection of infrastructure with a persistent working directory, which contains a configuration, state data, and variables. Since Terraform CLI uses content from the directory it runs in, you can organize infrastructure resources into meaningful groups by keeping their configurations in separate directories.


Reference:

https://www.terraform.io/cloud-docs/workspaces






Post your Comments and Discuss HashiCorp Terraform Associate exam with other Community members:

Terraform Associate Discussions & Posts