TA-002-P Free Practice Test

- (Exam Topic 2)
While using generic git repository as a module source, which of the below options allows terraform to select a specific version or tag instead of selecting the HEAD.

1. A. Append ref argument asmodule "vpc" { source = "git::https://example.com/vpc.git?ref=v1.2.0"}
2. B. Append version argument asmodule "vpc" { source = "git::https://example.com/vpc.git?version=v1.2.0"}
3. C. Append ref argument asmodule "vpc" { source = "git::https://example.com/vpc.git#ref=v1.2.0"}
4. D. By default, Terraform will clone and use the default branch (referenced by HEAD) in the selected repository and you can not override this.

Correct Answer: A
By default, Terraform will clone and use the default branch (referenced by HEAD) in the selected repository. You can override this using the ref argument:
module "vpc" {
source = "git::https://example.com/vpc.git?ref=v1.2.0"
}
The value of the ref argument can be any reference that would be accepted by the git checkout command, including branch and tag names.
https://www.terraform.io/docs/modules/sources.html

- (Exam Topic 4)
Provider dependencies are created in several different ways. Select the valid provider dependencies from the following list: (select three)

1. A. Explicit use of a provider block in configuration, optionally including a version constraint.
2. B. Use of any resource belonging to a particular provider in a resource or data block in configuration.
3. C. Existence of any resource instance belonging to a particular provider in the current state.
4. D. Existence of any provider plugins found locally in the working directory.

Correct Answer: ABC
The existence of a provider plugin found locally in the working directory does not itself create a provider dependency. The plugin can exist without any reference to it in the terraform configuration. https://www.terraform.io/docs/commands/providers.html

- (Exam Topic 4)
Valarie has created a database instance in AWS and for ease of use is outputting the value of the database password with the following code. Valarie wants to hide the output value in the CLI after terraform apply that's why she has used sensitive parameter.
* 1. output "db_password" {
* 2. value = local.db_password
* 3. sensitive = true
* 4. }
Since sensitive is set to true, will the value associated with db password be available in plain-text in the state file for everyone to read?

1. A. Yes
2. B. No

Correct Answer: A
Outputs can be marked as containing sensitive material by setting the sensitive attribute to true, like this: output "sensitive" {
sensitive = true value = VALUE
}
When outputs are displayed on-screen following a terraform apply or terraform refresh, sensitive outputs are redacted, with displayed in place of their value.
Limitations of Sensitive Outputs
The values of sensitive outputs are still stored in the Terraform state, and available using the terraform output command, so cannot be relied on as a sole means of protecting values.
Sensitivity is not tracked internally, so if the output is interpolated in another module into a resource, the value will be displayed.

- (Exam Topic 1)
What type of block is used to construct a collection of nested configuration blocks?

1. A. for_each
2. B. repeated
3. C. nesting
4. D. dynamic

Correct Answer: D
https://www.terraform.io/language/expressions/dynamic-blocks

- (Exam Topic 4)
You have just developed a new Terraform configuration for two virtual machines with a cloud provider. You would like to create the infrastructure for the first time.
Which Terraform command should you run first?

1. A. terraform apply
2. B. terraform plan
3. C. terraform show
4. D. terraform init

Correct Answer: D