Terraform-Associate-003 Free Practice Test

Which is the best way to specify a tag of v1.0.0 when referencing a module stored in Git (for example.
Git::https://example.com/vpc.git)?

1. A. Append pref=v1.0.0 argument to the source path
2. B. Add version = ??1.0.0?? parameter to module block
3. C. Nothing modules stored on GitHub always default to version 1.0.0

Correct Answer: A
The best way to specify a tag of v1.0.0 when referencing a module stored in Git is to append ?ref=v1.0.0 argument to the source path. This tells Terraform to use a specific Git reference, such as a branch, tag, or commit, when fetching the module source code. For example, source = "git::https://example.com/vpc.git?ref=v1.0.0". This ensures that the module version is consistent and reproducible across different environments. References = [Module Sources], [Module Versions]

What does the default "local" Terraform backend store?

1. A. tfplan files
2. B. State file
3. C. Provider plugins
4. D. Terraform binary

Correct Answer: B
The default ??local?? Terraform backend stores the state file in a local file named terraform.tfstate, which can be used to track and manage the state of your infrastructure3.

terraform validate confirms that your infrastructure matches the Terraform state file.

1. A. True
2. B. False

Correct Answer: B
terraform validate does not confirm that your infrastructure matches the Terraform state file. It only checks whether the configuration files in a directory are syntactically valid and internally consistent3. To confirm that your infrastructure matches the Terraform state file, you need to use terraform plan or terraform apply with the -refresh- only option.

It is best practice to store secret data in the same version control repository as your Terraform configuration.

1. A. True
2. B. False

Correct Answer: B
It is not a best practice to store secret data in the same version control repository as your Terraform configuration, as it could expose your sensitive information to unauthorized parties or compromise your security. You should use environment variables, vaults, or other mechanisms to store and provide secret data to Terraform.

You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (* files). You need to enable additional logging messages to find this out. Which of the following would achieve this?

1. A. Set verbose for each provider in your Terraform configuration
2. B. Set the environment variable TF_LOG_TRACE
3. C. Set the environment variable TF_LOG_PATH
4. D. Set the environment variable TF_log_TRACE

Correct Answer: B
This will enable additional logging messages to find out from which paths Terraform is loading providers referenced in your Terraform configuration files, as it will set the log level to TRACE, which is the most verbose and detailed level.