AWS provider Practice Test 2 — 10 Questions

Question 1

When refactoring a large infrastructure configuration, you move a resource into a child module. How do you handle the existing state to prevent Terraform from destroying and recreating the resource?

Accepted Answer

Use the 'terraform state mv' command to move the resource address.. The 'terraform state mv' command is required to map the old address to the new module-relative address.

Answer

Run 'terraform refresh' to automatically detect the move.

Answer

Rename the resource in the configuration to match the old state.

Answer

Delete the state file and run 'terraform apply'.

Question 2

You are using a module that depends on a specific provider version. Where should this constraint be defined?

Accepted Answer

In the 'required_providers' block within the module's 'terraform' block.. The 'required_providers' block within the 'terraform' block of the module is the correct location to pin versions.

Answer

In the 'provider' block of the calling root module.

Answer

In the root module only.

Answer

In a shell environment variable.

Question 3

Why would you use a 'locals' block within a module instead of passing everything through variables?

Accepted Answer

To reduce repetition and perform transformations on inputs.. 'locals' are ideal for transforming inputs, combining data, or creating complex naming conventions that the user shouldn't have to define.

Answer

To allow the user to override internal values easily.

Answer

To bypass input validation.

Answer

To store state data securely.

Question 4

You want to use a module that is hosted in a private GitHub repository. Which authentication method should Terraform use to access it?

Accepted Answer

Use the same credentials that 'git clone' would use for that repository.. Terraform uses the credentials configured in the local environment (e.g., ~/.git-credentials or SSH keys) to authenticate with private repositories.

Answer

The module must be public for Terraform to access it.

Answer

Terraform requires a special 'git_token' variable in the module block.

Answer

Embed your GitHub password in the source URL.

Question 5

If you have a module that creates an S3 bucket, and you want the bucket name to be prefixed by a value provided by the caller, how do you achieve this?

Accepted Answer

Use string interpolation in the bucket name attribute.. Concatenate the variable inside the resource block using string interpolation.

Answer

Use a local variable that reads from the provider config.

Answer

Define the bucket name in the root module and override the child resource.

Answer

Use the 'module_name' variable provided by Terraform.

Question 6

What is the primary benefit of using a module registry compared to a local file path for module distribution?

Accepted Answer

It enables version control and easier sharing across the organization.. Registries provide versioning, documentation generation, and centralized discovery for teams.

Answer

It allows you to run Terraform commands faster.

Answer

It removes the need for input variables.

Answer

It automatically converts your code to a higher-level language.

Question 7

How can you protect a module's inputs from receiving incorrect types of data?

Accepted Answer

Use a 'validation' block with a condition inside the variable declaration.. Defining the 'type' constraint in the variable block ensures Terraform validates the input before applying changes.

Answer

Use the 'provider' block to enforce input types.

Answer

Write a custom bash script to check the inputs.

Answer

Terraform automatically validates all inputs as strings.

Question 8

When a module is updated, how do you ensure that all environments using this module get the update?

Accepted Answer

Run 'terraform init -upgrade' to fetch the latest version allowed by the constraints.. You must update the version constraint (if pinned) and run 'terraform init -upgrade' to fetch the new version.

Answer

The module updates automatically on every 'apply'.

Answer

Delete the state file and re-run apply.

Answer

Restart the Terraform CLI process.

Question 9

What happens if a Sentinel policy results in an 'advisory' output?

Accepted Answer

The run logs display a warning, but the process continues.. Advisory policies provide information or warnings in the run logs but do not block the execution.

Answer

The plan is marked as failed.

Answer

The policy is treated as a hard-mandatory failure.

Answer

The run is paused for manual intervention.

Question 10

Your team requires a custom module to be versioned strictly to prevent breaking changes during deployments. What is the recommended way to reference a module from a private Git repository?

Accepted Answer

Use the 'ref' parameter in the source URL string.. Using the 'version' argument in the source block allows pinning to specific tags or branches, ensuring stability.

Answer

Set the 'version' block inside the module definition.

Answer

Copy the module code locally every time a new version is released.

Answer

Use the 'module_version' argument in the module block.