TA-003-P

How would you reference the volume IDs associated with the ebs_block_device blocks in this configuration? A . aws_instance.example.ebs_block_device[sda2,sda3).volume_idB . aws_lnstance.example.ebs_block_device.[*].volume_idC . aws_lnstance.example.ebs_block_device.volume_idsD . aws_instance.example-ebs_block_device.*.volume_idView AnswerAnswer: D Explanation: This is the correct way to reference the volume IDs associated with the ebs_block_device blocks in this configuration, using the splat expression syntax....

When should you write Terraform configuration files for existing infrastructure that you want to start managing with Terraform?A . You can import infrastructure without corresponding Terraform codeB . Terraform will generate the corresponding configuration files for youC . Before you run terraform ImportD . After you run terraform importView AnswerAnswer:...

You decide to move a Terraform state file to Amazon S3 from another location. You write the code below into a file called backend.tf. Which command will migrate your current state file to the new S3 remote backend?A . terraform stateB . terraform initC . terraform pushD . terraform refreshView...

When do changes invoked by terraform apply take effect?A . After Terraform has updated the state fileB . Once the resource provider has fulfilled the requestC . ImmediatelyD . None of the above are correctView AnswerAnswer: B Explanation: Changes invoked by terraform apply take effect once the resource provider has...

Which backend does the Terraform CU use by default?A . Depends on the cloud provider configuredB . HTTPC . RemoteD . Terraform CloudE . LocalView AnswerAnswer: E Explanation: This is the backend that the Terraform CLI uses by default, unless you specify a different backend in your configuration. The local...

Which command must you first run before performing further Terraform operations in a working directory?A . terraform importB . terraform workspaceC . terraform planD . terraform initView AnswerAnswer: D Explanation: terraform init is the first command that should be run after writing a new Terraform configuration or cloning an existing...

What are some benefits of using Sentinel with Terraform Cloud/Terra form Cloud? Choose three correct answers.A . You can enforce a list of approved AWS AMIsB . Policy-as-code can enforce security best practicesC . You can check out and check in cloud access keysD . You can restrict specific resource...

Which of the following ate advantages of using infrastructure as code (laC) instead of provisioning with a graphical user interface (GUI)? Choose two correct answers.A . Lets you version, reuse, and share infrastructure configurationB . Provisions the same resources at a lower costC . Secures your credentialsD . Reduces risk...

Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files. How can you protect that data?A . Edit your state file to scrub out the sensitive dataB . Always store your secrets in a secrets.tfvars fileC . Delete the state file every time you...

When does Sentinel enforce policy logic during a Terraform Cloud run?A . Before the plan phaseB . During the plan phaseC . Before the apply phaseD . After the apply phaseView AnswerAnswer: C Explanation: Sentinel policies are checked after the plan stage of a Terraform run, but before it can...