AWS provider Practice Test 2 — 25 Questions

Question 1

What is the recommended approach for managing a module that has grown too large?

Accepted Answer

Break the module into smaller, focused sub-modules.. Refactoring into smaller, single-purpose sub-modules improves maintainability and readability.

Answer

Use 'terraform import' to split the resources.

Answer

Combine all files into a single 'main.tf'.

Answer

Rename the module to something more generic.

Question 2

When using 'replace_triggered_by', what happens if the referenced resource is deleted?

Accepted Answer

The plan fails because the dependency cannot be evaluated.. If the referenced resource is deleted, the expression for replace_triggered_by becomes invalid, and Terraform will return an error during the plan phase.

Answer

The resource is destroyed as well.

Answer

The resource is kept as is.

Answer

The trigger is ignored.

Question 3

Which THREE of the following are required components of a Sentinel Policy Set?

Accepted Answer

A list of policies.. Policy sets require a name, a link to the policy code (VCS), and a definition of which workspaces apply to the policies.

Answer

A paid subscription license key.

Answer

A list of allowed IP addresses.

Question 4

Which directory structure is considered standard for a Terraform module?

Accepted Answer

A directory containing main.tf, variables.tf, and outputs.tf.. A standard module should contain at least main.tf, variables.tf, and outputs.tf.

Answer

One single file named 'all.tf'.

Answer

A binary executable file that compiles the infrastructure.

Answer

A separate folder for every single resource.

Question 5

Which THREE of the following are components of the 'source' string when using the Terraform Registry?

Accepted Answer

Provider.. The registry source string format is 'namespace/name/provider'.

Answer

Git branch name.

Answer

Operating system.

Question 6

What is the purpose of the 'terraform providers lock' command?

Accepted Answer

To secure the provider versions and checksums.. It updates the .terraform.lock.hcl file to include all necessary provider checksums for the current configuration.

Answer

To encrypt the state file.

Answer

To prevent others from running init.

Answer

To download all providers.

Question 7

You have a nested module structure. How can you pass a variable from the root module through an intermediate module to a leaf module?

Accepted Answer

You must define the variable in the intermediate module and pass it to the leaf module.. Each intermediate module must define a variable and then pass it down using the 'source' or 'module' call block.

Answer

Define the variable only in the leaf module and refer to root by index.

Answer

You can use the 'global_vars' block in the root.

Answer

The intermediate module automatically inherits all root variables.

Question 8

Which THREE of these are benefits of using modules in Terraform?

Accepted Answer

Enforcing standardized configurations across teams.. Modules improve code reuse, organization, and standardization.

Answer

Increasing the execution speed of API calls.

Answer

Automatically preventing all resource drift.

Question 9

Which THREE of the following are true about 'lifecycle' blocks?

Accepted Answer

They are defined inside the resource configuration block.. They are per-resource, support specific arguments, and are defined inside the resource body.

Answer

They allow changing the provider version dynamically.

Answer

They are inherited from the provider block.

Question 10

You are designing a module that should conditionally create resources based on a boolean input. What feature should you use?

Accepted Answer

Use the 'count' meta-argument with a ternary expression.. The 'count' meta-argument is commonly used to toggle resource creation based on a boolean value.

Answer

Define multiple resources and use 'depends_on' to link them.

Answer

Use an 'if' block around the resource definition.

Answer

Use the 'module' meta-argument inside the resource.

Question 11

Which argument in a module block allows you to provide a custom name to the module instance?

Accepted Answer

The label immediately following the 'module' keyword.. The module block itself uses the label to name the instance, but the 'source' argument defines the location.

Answer

'name'

Answer

'instance_name'

Answer

'alias'

Question 12

Which TWO of the following are valid ways to pass a provider configuration to a child module?

Accepted Answer

Using the 'providers' meta-argument inside the module block.. Providers are either inherited from the root or passed explicitly using the 'providers' map in the module block.

Answer

Defining the provider inside the module's 'main.tf'.

Answer

Passing the provider as a string input variable.

Answer

Using a global variable for provider credentials.

Question 13

Which TWO of the following are true regarding variable validation in modules?

Accepted Answer

Validation blocks must return a boolean value.. Validation blocks and type constraints are the primary mechanisms for ensuring valid inputs.

Answer

Validation errors will only show during 'terraform apply'.

Answer

Validation blocks can read from other modules.

Answer

You can only validate string variables.

Question 14

You need to share a module across your entire organization. Which registry type should you use?

Accepted Answer

A private module registry in Terraform Cloud or Enterprise.. Terraform Cloud or Terraform Enterprise private module registries are the standard for internal organization-wide sharing.

Answer

The public Terraform Registry.

Answer

A shared network drive.

Answer

An S3 bucket with public read access.

Question 15

Which THREE items should be included in a well-documented Terraform module?

Accepted Answer

Clear documentation for each output.. Documentation should cover how to use the module, its inputs, and its outputs.

Answer

A list of all possible provider configurations.

Answer

The raw state file of the module's resources.

Question 16

What is the impact of using 'sensitive = true' in a module output?

Accepted Answer

It prevents the value from being printed in the CLI output.. It marks the output as sensitive, preventing it from being printed to the console during 'terraform apply' or 'plan'.

Answer

It disables the ability to use that output in other modules.

Answer

It encrypts the data in the state file.

Answer

It automatically rotates the sensitive credentials.

Question 17

Which TWO meta-arguments can be used within a module block?

Accepted Answer

'count'. 'count' and 'for_each' are the two meta-arguments available for module blocks.

Answer

'provisioner'

Answer

'depends_on'

Answer

'lifecycle'

Question 18

When should you use the 'for_each' meta-argument within a module?

Accepted Answer

To instantiate multiple copies of a module based on a map or set.. 'for_each' is used to create multiple instances of a module based on a map or set of strings.

Answer

To iterate over a list of variables inside a resource block.

Answer

To replace the 'count' meta-argument when you only need one instance.

Answer

To speed up the execution of the provider.

Question 19

Which THREE of the following are valid sources for a Terraform module?

Accepted Answer

The Terraform Registry.. Terraform supports modules from local paths, the Terraform Registry, and version control providers like Git.

Answer

A directly linked SQL database.

Answer

A raw HTTP file download link.

Question 20

Which TWO of the following are true about the '.terraform' directory?

Accepted Answer

It contains the module source code downloaded from registries.. The '.terraform' directory is used locally by Terraform to store module files and provider plugins.

Answer

It should be committed to version control.

Answer

It contains the permanent state file.

Answer

It is where custom provider binaries are compiled.