Question 1

Which of the following is the correct method to implement state locks in Terraform?

Options :

A :

Use the `terraform lock` command to place a lock on the state file.

B : Use Amazon S3 bucket to store the state file and enable versioning for optimistic-locking.

C : Use Consul as the backend to store the state and enable locking in the Consul configuration.

D : Store the state file in a version control system and use file locking mechanisms provided by version control system.

Answer: B

Question 2

When using Terraform, where can you install providers from? (select four)

Options :

A : Terraform registry

B : Terraform plugin cache

C : official HashiCorp releases site

D : the provider-s source code

E : plugins directory

Answer: A,B,C,E

Question 3

In regards to Terraform state file, select all the statements below which are correct: (select four)

Options :

A : the state file is always encrypted at rest

B : the Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access

C : when using local state, the state file is stored in plain-text

D : storing state remotely can provide better security

E : using the mask feature, you can instruct Terraform to mask sensitive data in the state file

F : Terraform Cloud always encrypts state at rest

Answer: B,C,D,F

Question 4

True or False? Any sensitive values referenced in the Terraform code, even as variables, will end up in plain text in the state file.

Options :

A : False

B : True

Answer: B

Question 5

Your organization uses IaC to provision and manage resources in a public cloud platform. A new employee has developed changes to existing code and wants to push it into production.

What best practice should the new employee follow to submit the new code?

Options :

A : Execute the code locally on the developer-s machine to make the changes directly to the infrastructure.

B : Make the change directly using the cloud provider-s API to ensure the changes are valid. Store the code locally and email a copy of the code to a teammate so they have an extra copy.

C : Submit a merge/pull request of the proposed changes. Have a team member validate the changes and approve the request.

D : Submit the change to the change control board and wait for the approval. Commit the code directly to the main repository.

Answer: C

Higher Test Marks with Free Online HCTAO-003 Exam Practice

Buying Options: