AWS provider Practice Test 16 — 15 Questions

Question 1

Which block is used to configure provider-level settings like region or profile?

Accepted Answer

provider "aws" {}. The 'provider' block is used to configure the provider itself.

Answer

module {}

Answer

terraform {}

Answer

resource "aws_instance" {}

Question 2

Which command helps verify if the providers are properly initialized?

Accepted Answer

terraform providers. 'terraform providers' lists all providers required by the configuration, confirming they are initialized.

Answer

terraform validate

Answer

terraform show

Answer

terraform plan

Question 3

How can you restrict the ability of team members to delete workspaces?

Accepted Answer

Remove the 'Delete' permission from the team's project-level permissions.. RBAC in HCP Terraform is granular. You must ensure users do not have the 'Admin' or 'Delete' permissions on the specific workspace.

Answer

Set the workspace status to 'Locked'.

Answer

Change the workspace execution mode to local.

Answer

Enable 'Prevent Destroy' in Terraform code.

Question 4

You need to output a complex object from a child module to be used by the root module. What is the best practice for defining the output?

Accepted Answer

Define an output block in the child module and reference it in the root module using the module prefix.. Using explicit output blocks in the child module makes the data available for access via 'module..'.

Answer

Assign the output to a global variable in the root module.

Answer

Use a data source to read the child module's internal state.

Answer

Write the output to a local file inside the module and read it in the root.

Question 5

When using Cost Estimation in HCP Terraform, which of the following is true?

Accepted Answer

It requires the Terraform provider to support the cost estimation feature.. HCP Terraform uses the current plan to calculate cost impact against the existing state.

Answer

It calculates costs based on real-time AWS billing API calls.

Answer

It applies to all resources, including custom providers.

Answer

It only works for paid HCP Terraform tiers.

Question 6

Which THREE of the following attributes are available to a Sentinel policy via the 'tfrun' import?

Accepted Answer

User who triggered the run.. The 'tfrun' import provides access to metadata about the current run, including the workspace, the user, and the organization.

Answer

The provider source code.

Answer

The raw state file contents.

Question 7

What are common reasons to use multiple provider instances? (Select TWO)

Accepted Answer

Using different credentials for different resources.. Multiple instances are primarily used for multi-region or multi-account deployments.

Answer

Increasing performance of the Terraform CLI.

Answer

Installing multiple versions of the same provider.

Answer

Bypassing the need for a state file.

Question 8

Which TWO of the following are true regarding Private Module Registry versioning?

Accepted Answer

Versions must follow Semantic Versioning (SemVer).. Versions are managed by tags in VCS, and Semantic Versioning (SemVer) is required.

Answer

Versions can be deleted at any time without restriction.

Answer

You can only have one version per module.

Answer

Versions are created manually by uploading files.

Question 9

Which THREE tasks are performed by 'terraform init -upgrade'?

Accepted Answer

Upgrading provider binaries.. The '-upgrade' flag forces the re-download of modules and providers to the latest versions within constraints.

Answer

Migrating the state file to a new format.

Answer

Automatically fixing HCL syntax errors in modules.

Question 10

Which are characteristics of the Terraform Plugin SDK? (Select TWO)

Accepted Answer

It provides a way to define schema for resources.. It handles the communication between Terraform and the provider binary, and it provides helper functions to define resources.

Answer

It replaces the Terraform CLI.

Answer

It manages the Terraform state lock.

Answer

It compiles HCL to Go code.

Question 11

What are requirements for a custom provider to be recognized by Terraform? (Select THREE)

Accepted Answer

Must be a compiled binary.. Custom providers need a specific binary name, a specific directory structure, and possibly a configuration in .terraformrc or CLI config.

Answer

Must be uploaded to the registry.

Answer

Must be signed by HashiCorp.

Question 12

A team is using the Private Module Registry and needs to ensure that only approved module versions are available for use in workspaces. Which feature should they implement?

Accepted Answer

Use module sharing permissions to manage access to the registry.. Module sharing levels allow teams to restrict access to modules, but 'Module Versioning' and 'Module Status' (beta/deprecated) are the standard ways to manage availability in the Private Module Registry.

Answer

Implement Sentinel policies on the registry.

Answer

Enable auto-publish for all versions.

Answer

Set the module to Private and grant access only to specific organizations.

Question 13

How can you view the detailed breakdown of cost estimates for a specific Terraform plan?

Accepted Answer

Open the run page in the HCP Terraform UI.. The run details page in the HCP Terraform UI displays the cost estimation summary, which can be expanded for details.

Answer

Run the 'terraform show' command on the state file.

Answer

Check the cloud provider's billing dashboard.

Answer

Use the Sentinel CLI tool.

Question 14

A team reports that their Terraform plan is failing because it cannot find a provider version. What is the most likely cause if the provider is in the Private Module Registry?

Accepted Answer

The provider is not configured in the 'required_providers' block.. Providers and Modules are different concepts in HCP Terraform. If a provider is required, it must be available in the registry or the provider cache.

Answer

The Private Module Registry does not host providers.

Answer

The workspace is in 'Local' execution mode.

Answer

The organization's subscription does not allow custom providers.

Question 15

Which THREE of the following can be managed using team permissions in HCP Terraform?

Accepted Answer

Project visibility.. Permissions control access to workspaces, projects, and the registry.

Answer

Global IP firewalling.

Answer

Organization billing limits.