2024 Easily pass Terraform-Associate-003 Exam with our Dumps & PDF Test Engine
Terraform-Associate-003 PDF Pass Leader, Terraform-Associate-003 Latest Real Test
NEW QUESTION # 11
What type of block is used to construct a collection of nested configuration blocks?
- A. Dynamic
- B. Nesting
- C. repeated.
- D. For_each
Answer: A
Explanation:
Explanation
This is the type of block that is used to construct a collection of nested configuration blocks, by using a for_each argument to iterate over a collection value and generate a nested block for each element. For example, you can use a dynamic block to create multiple ingress rules for a security group resource.
NEW QUESTION # 12
A module can always refer to all variables declared in its parent module.
- A. False
- B. True
Answer: A
Explanation:
Explanation
A module cannot always refer to all variables declared in its parent module, as it needs to explicitly declare input variables and assign values to them from the parent module's arguments. A module cannot access the parent module's variables directly, unless they are passed as input arguments.
NEW QUESTION # 13
Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files.
How can you protect that data?
- A. Always store your secrets in a secrets.tfvars file
- B. Store the state in an encrypted backend
- C. Delete the state file every time you run Terraform
- D. Edit your state file to scrub out the sensitive data
Answer: B
Explanation:
Explanation
This is a secure way to protect sensitive data in the state file, as it will be encrypted at rest and in transit2. The other options are not recommended, as they could lead to data loss, errors, or security breaches.
NEW QUESTION # 14
You modified your Terraform configuration and run Terraform plan to review the changes. Simultaneously, your teammate manually modified the infrastructure component you are working on. Since you already ran terraform plan locally, the execution plan for terraform apply will be the same.
- A. False
- B. True
Answer: A
Explanation:
Explanation
The execution plan for terraform apply will not be the same as the one you ran locally with terraform plan, if your teammate manually modified the infrastructure component you are working on. This is because Terraform will refresh the state file before applying any changes, and will detect any differences between the state and the real resources.
NEW QUESTION # 15
terraform validate confirms that your infrastructure matches the Terraform state file.
- A. False
- B. True
Answer: A
Explanation:
Explanation
terraform validate does not confirm that your infrastructure matches the Terraform state file. It only checks whether the configuration files in a directory are syntactically valid and internally consistent3. To confirm that your infrastructure matches the Terraform state file, you need to use terraform plan or terraform apply with the
-refresh-only option.
NEW QUESTION # 16
Which configuration consistency errors does terraform validate report?
- A. Terraform module isn't the latest version
- B. A mix of spaces and tabs in configuration files
- C. Declaring a resource identifier more than once
- D. Differences between local and remote state
Answer: C
Explanation:
Explanation
Terraform validate reports configuration consistency errors, such as declaring a resource identifier more than once. This means that the same resource type and name combination is used for multiple resource blocks, which is not allowed in Terraform. For example, resource "aws_instance" "example" {...} cannot be used more than once in the same configuration. Terraform validate does not report errors related to module versions, state differences, or formatting issues, as these are not relevant for checking the configuration syntax and structure. References = [Validate Configuration], [Resource Syntax]
NEW QUESTION # 17
Which of the following statements about Terraform modules is not true?
- A. Modules can call other modules
- B. A module is a container for one or more resources
- C. Modules must be publicly accessible
- D. You can call the same module multiple times
Answer: C
Explanation:
Explanation
This is not true, as modules can be either public or private, depending on your needs and preferences. You can use the Terraform Registry to publish and consume public modules, or use Terraform Cloud or Terraform Enterprise to host and manage private modules.
NEW QUESTION # 18
You have created a main.tf Terraform configuration consisting of an application server, a database and a load balanced. You ran terraform apply and Terraform created all of the resources successfully.
Now you realize that you do not actually need the load balancer, so you run terraform destroy without any flags. What will happen?
- A. Terraform will destroy the main, tf file
- B. Terraform will prompt you to pick which resource you want to destroy
- C. Terraform will prompt you to confirm that you want to destroy all the infrastructure
- D. Terraform will immediately destroy all the infrastructure
- E. Terraform will destroy the application server because it is listed first in the code
Answer: C
Explanation:
Explanation
This is what will happen if you run terraform destroy without any flags, as it will attempt to delete all the resources that are associated with your current working directory or workspace. You can use the -target flag to specify a particular resource that you want to destroy.
NEW QUESTION # 19
You've used Terraform to deploy a virtual machine and a database. You want to replace this virtual machine instance with an identical one without affecting the database. What is the best way to achieve this using Terraform?
- A. Use the terraform taint command targeting the VMs then run terraform plan and terraform apply
- B. Delete the Terraform VM resources from your Terraform code then run terraform plan and terraform apply
- C. Use the terraform apply command targeting the VM resources only
- D. Use the terraform state rm command to remove the VM from state file
Answer: A
Explanation:
Explanation
The terraform taint command marks a resource as tainted, which means it will be destroyed and recreated on the next apply. This way, you can replace the VM instance without affecting the database or other resources. References = [Terraform Taint]
NEW QUESTION # 20
What Terraform command always causes a state file to be updated with changes that might have been made outside of Terraform?
- A. Terraform apply -lock-false
- B. Terraform plan target-state
- C. Terraform plan -refresh-only
- D. Terraform show -json
Answer: C
Explanation:
Explanation
This is the command that always causes a state file to be updated with changes that might have been made outside of Terraform, as it will only refresh the state file with the current status of the real resources, without making any changes to them or creating a plan.
NEW QUESTION # 21
When should you run terraform init?
- A. After you run terraform plan for the time in a new terraform project and before you run terraform apply
- B. After you start coding a new terraform project and before you run terraform plan for the first time.
- C. Before you start coding a new Terraform project
- D. Every time you run terraform apply
Answer: B
Explanation:
Explanation
You should run terraform init after you start coding a new Terraform project and before you run terraform plan for the first time. This command will initialize the working directory by downloading the required providers and modules, creating the initial state file, and performing other necessary tasks. References = :
Initialize a Terraform Project
NEW QUESTION # 22
You have declared a variable called var.list which is a list of objects that all have an attribute id . Which options will produce a list of the IDs? Choose two correct answers.
- A. { for o in var.llst : o => o.id }
- B. [ var.list [ * ] , id ]
- C. [ for o in var.list : o.Id ]
- D. var.list[*].id
Answer: C,D
Explanation:
Explanation
These are two ways to produce a list of the IDs from a list of objects that have an attribute id, using either a for expression or a splat expression syntax.
NEW QUESTION # 23
The_________determines how Terraform creates, updates, or delete resources.
- A. Terraform provisioner
- B. Terraform configuration
- C. Terraform provider
- D. Terraform core
Answer: C
Explanation:
Explanation
This is what determines how Terraform creates, updates, or deletes resources, as it is responsible for understanding API interactions with some service and exposing resources and data sources based on that API.
NEW QUESTION # 24
Which method for sharing Terraform configurations fulfills the following criteria:
1. Keeps the configurations confidential within your organization
2. Support Terraform's semantic version constrains
3. Provides a browsable directory
- A. Public Terraform module registry
- B. Subfolder within a workspace
- C. Terraform Cloud private registry
- D. Generic git repository
Answer: C
Explanation:
Explanation
This is the method for sharing Terraform configurations that fulfills the following criteria:
Keeps the configurations confidential within your organization
Supports Terraform's semantic version constraints
Provides a browsable directory
The Terraform Cloud private registry is a feature of Terraform Cloud that allows you to host and manage your own modules within your organization, and use them in your Terraform configurations with versioning and access control.
NEW QUESTION # 25
Which of the following is not a valid Terraform collection type?
- A. Map
- B. set
- C. Tree
- D. List
Answer: C
Explanation:
Explanation
This is not a valid Terraform collection type, as Terraform only supports three collection types: list, map, and set. A tree is a data structure that consists of nodes with parent-child relationships, which is not supported by Terraform.
NEW QUESTION # 26
As a member of an operations team that uses infrastructure as code (lac) practices, you are tasked with making a change to an infrastructure stack running in a public cloud. Which pattern would follow laC best practices for making a change?
- A. Make the change via the public cloud API endpoint
- B. Make the change programmatically via the public cloud CLI
- C. Clone the repository containing your infrastructure code and then run the code
- D. Use the public cloud console to make the change after a database record has been approved
- E. Submit a pull request and wait for an approved merge of the proposed changes
Answer: E
Explanation:
Explanation
You do not need to use different Terraform commands depending on the cloud provider you use. Terraform commands are consistent across different providers, as they operate on the Terraform configuration files and state files, not on the provider APIs directly.
NEW QUESTION # 27
How is terraform import run?
- A. As a part of terraform plan
- B. As a part of terraform refresh
- C. By an explicit call
- D. As a part of terraform init
- E. All of the above
Answer: C
Explanation:
Explanation
The terraform import command is not part of any other Terraform workflow. It must be explicitly invoked by the user with the appropriate arguments, such as the resource address and the ID of the existing infrastructure to import. References = [Importing Infrastructure]
NEW QUESTION # 28
You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (* files). You need to enable additional logging messages to find this out. Which of the following would achieve this?
- A. Set the environment variable TF_LOG_TRACE
- B. Set verbose for each provider in your Terraform configuration
- C. Set the environment variable TF_log_TRACE
- D. Set the environment variable TF_LOG_PATH
Answer: A
Explanation:
Explanation
This will enable additional logging messages to find out from which paths Terraform is loading providers referenced in your Terraform configuration files, as it will set the log level to TRACE, which is the most verbose and detailed level.
NEW QUESTION # 29
Which of these commands makes your code more human readable?
- A. Terraform validate
- B. Terraform fmt
- C. Terraform output
- D. Terraform show
Answer: B
Explanation:
Explanation
The command that makes your code more human readable is terraform fmt. This command is used to rewrite Terraform configuration files to a canonical format and style, following the Terraform language style conventions and other minor adjustments for readability. The command is optional, opinionated, and has no customization options, but it is recommended to ensure consistency of style across different Terraform codebases. Consistency can help your team understand the code more quickly and easily, making the use of terraform fmt very important. You can run this command on your configuration files before committing them to source control or as part of your CI/CD pipeline. References = : Command: fmt : Using Terraform fmt Command to Format Your Terraform Code
NEW QUESTION # 30
......
Terraform-Associate-003 Dumps Ensure Your Passing: https://www.vce4plus.com/HashiCorp/Terraform-Associate-003-valid-vce-dumps.html
Valid Terraform-Associate-003 Test Answers & Terraform-Associate-003 Exam PDF: https://drive.google.com/open?id=15dnewleTevEaEzf1-ZRv_aLD3VcYub6q