Terraform-Associate-003 Free Practice Test

What are some benefits of using Sentinel with Terraform Cloud/Terra form Cloud? Choose three correct answers.

1. A. You can enforce a list of approved AWS AMIs
2. B. Policy-as-code can enforce security best practices
3. C. You can check out and check in cloud access keys
4. D. You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.
5. E. Sentinel Policies can be written in HashiCorp Configuration Language (HCL)

Correct Answer: ABD
These are some of the benefits of using Sentinel with Terraform Cloud/Terraform Enterprise, as they allow you to implement logic-based policies that can access and evaluate the Terraform plan, state, and configuration. The other options are not true, as Sentinel does not manage cloud access keys, and Sentinel policies are written in Sentinel language, not HCL.

What are some benefits of using Sentinel with Terraform Cloud/Terraform Cloud? Choose three correct answers.

1. A. You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.
2. B. You can check out and check in cloud access keys
3. C. Sentinel Policies can be written in HashiCorp Configuration Language (HCL)
4. D. Policy-as-code can enforce security best practices
5. E. You can enforce a list of approved AWS AMIs

Correct Answer: ADE
Sentinel is a policy-as-code framework that allows you to define and enforce rules on your Terraform configurations, states, and plans1. Some of the benefits of using Sentinel with Terraform Cloud/Terraform Enterprise are:
•You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0, which would open up your network to the entire internet. This can help you prevent misconfigurations or security vulnerabilities in your infrastructure2.
•Policy-as-code can enforce security best practices, such as requiring encryption, authentication, or compliance standards. This can help you protect your data and meet regulatory requirements3.
•You can enforce a list of approved AWS AMIs, which are pre-configured images that contain the operating system and software you need to run your applications. This can help you ensure consistency, reliability, and performance across your infrastructure4. References =
•1: Terraform and Sentinel | Sentinel | HashiCorp Developer
•2: Terraform Learning Resources: Getting Started with Sentinel in Terraform Cloud
•3: Exploring the Power of HashiCorp Terraform, Sentinel, Terraform Cloud ??
•4: Using New Sentinel Features in Terraform Cloud – Medium

You must use different Terraform commands depending on the cloud provider you use.

1. A. True
2. B. False

Correct Answer: B
You do not need to use different Terraform commands depending on the cloud provider you use. Terraform commands are consistent across different providers, as they operate on the Terraform configuration files and state files, not on the provider APIs directly.

Which of these is true about Terraform's plugin-based architecture?

1. A. Terraform can only source providers from the internet
2. B. Every provider in a configuration has its own state file for its resources
3. C. You can create a provider for your API if none exists
4. D. All providers are part of the Terraform core binary

Correct Answer: C
Terraform is built on a plugin-based architecture, enabling developers to extend Terraform by writing new plugins or compiling modified versions of existing plugins1. Terraform plugins are executable binaries written in Go that expose an implementation for a specific service, such as a cloud resource, SaaS platform, or API2. If there is no existing provider for your API, you can create one using the Terraform Plugin SDK3 or the Terraform Plugin Framework4. References =
•1: Plugin Development - How Terraform Works With Plugins | Terraform | HashiCorp Developer
•2: Lab: Terraform Plug-in Based Architecture - GitHub
•3: Terraform Plugin SDK - Terraform by HashiCorp
•4: HashiCorp Terraform Plugin Framework Now Generally Available

Select the command that doesn??t cause Terraform to refresh its state.

1. A. Terraform destroy
2. B. Terraform apply
3. C. Terraform plan
4. D. Terraform state list

Correct Answer: D
This is the command that does not cause Terraform to refresh its state, as it only lists the resources that are currently managed by Terraform in the state file. The other commands will refresh the state file before performing their operations, unless you use the -refresh=false flag.