Ace HashiCorp TA-002-P Certification with Actual Questions Nov 17, 2023 Updated [Q20-Q40]

Q20. Terraform-specific settings and behaviors are declared in which configuration block type?

Q21. When should you use the force-unlock command?

Q22. You have a Terraform configuration that defines a single virtual machine with no references to it. You have
run terraform apply to create the resource, and then removed the resource definition from your Terraform
configuration file.
What will happen when you run terraform apply in the working directory again?

Q23. You want to share Terraform state with your team, store it securely and provide state locking. How would you do this? Choose three correct answers.

Q24. Jim has created several AWS resources from a single terraform configuration file. Someone from his team has manually modified one of the EC2 instance.
Now to discard the manual change, Jim wants to destroy and recreate the EC2 instance. What is the best way to do it?

Q25. When using remote state, state is only ever held in memory when used by Terraform.

Q26. Which of the following is not a valid Terraform string function?

Q27. Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

Q28. Which are forbidden actions when the Terraform state file is locked? (Choose three.)

Q29. When using a module block to reference a module stored on the public Terraform Module Registry such as:

How do you specify version 1.0.0?

Q30. You’re preparing to install Terraform on client workstations and want to see which operating systems are
supported. Which of the following operating systems is supported?

Q31. You want to define a single input variable to capture configuration values for a server. The values must represent memory as a number, and the server name as a string.
Which variable type could you use for this input?

Q32. What is not processed when running a terraform refresh?

Q33. You have provisioned some aws resources in your test environment through Terraform for a POC work. After the POC, now you want to destroy the resources but before destroying them you want to check what resources will be getting destroyed through terraform. what are the options of doing that? (Select TWO)

Q34. Refer to the below code where developer is outputting the value of the database password but has used
sensitive parameter to hide the output value in the CLI.
output “db_password” { value = aws_db_instance.db.password description = “The password for logging in to
the database.” sensitive = true}
Since sensitive is set to true, the value associated with db password will not be present in state file as
plain-text?

Q35. What is the purpose of using the local-exec provisioner? (Select Two)

Q36. When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

Q37. You want to get involved in the development of Terraform. As this is an open source project, you would like to contribute a fix for an open issue of Terraform. What programming language will need to use to write the fix?

Q38. What is a downside to using the Vault provider to read secrets from Vault?

Q39. In Terraform Enterprise, a workspace can be mapped to how many VCS repos?

Q40. Given the Terraform configuration below, in which order will the resources be created?
1. resource “aws_instance” “web_server”
2. {
3. ami = “ami-b374d5a5”
4. instance_type = “t2.micro”
5. }
6. resource “aws_eip” “web_server_ip”
7. {
8. vpc = true instance = aws_instance.web_server.id
9. }