AWS provider Practice Questions 1 — 50 Questions

Question 1

You have a Terraform configuration that uses a module from the public registry. How do you ensure your team uses a specific version?

Accepted Answer

Using the 'version' argument. The 'version' attribute within the 'source' block of the module ensures version pinning.

Answer

By manually deleting other versions

Answer

By configuring a Sentinel policy

Answer

Using a provider block

Question 2

Which function is most useful when you have a nested list of objects and want to create a single flat list to iterate over with for_each?

Accepted Answer

flatten(). The flatten() function is specifically designed to take nested lists and turn them into a single-level list.

Answer

concat()

Answer

lookup()

Answer

merge()

Question 3

Which of the following are valid provider version constraint operators? (Select TWO)

Accepted Answer

=. = and ~> are both standard operators for version constraints.

Answer

||

Answer

&&

Answer

!!

Question 4

You need to enforce that only specific VM sizes are used in your infrastructure. Which Sentinel feature provides this capability?

Accepted Answer

Policy enforcement. Sentinel policies allow you to evaluate plan data and return a boolean decision to allow or block the plan.

Answer

Run trigger

Answer

Workspaces

Answer

Policy Set

Question 5

Which TWO features help maintain consistency across multiple workspaces?

Accepted Answer

Shared modules. Shared modules and variable sets ensure that configurations and inputs remain consistent across teams and workspaces.

Answer

Unique state files for every module

Answer

Using local execution only

Answer

Manual copy-pasting of code

Question 6

What happens if two team members try to apply changes to the same workspace in HCP Terraform simultaneously?

Accepted Answer

The second run is queued. HCP Terraform serializes runs; the second run will be queued until the first completes.

Answer

The state file will be corrupted

Answer

The latest one wins

Answer

Both runs will fail

Question 7

When troubleshooting a failed plan in HCP Terraform, which THREE sources should you check?

Accepted Answer

Policy check results. Logs, policy evaluation results, and the terraform init output are essential for debugging.

Answer

The provider source code

Answer

Organization billing page

Question 8

Which organization-level setting in HCP Terraform governs who can create new workspaces?

Accepted Answer

Team permissions. Permissions for creating workspaces are managed via Organization Team permissions.

Answer

Global settings

Answer

Agent pool settings

Answer

Workspace settings

Question 9

Which HCP Terraform feature allows you to manage infrastructure across multiple cloud accounts using a single organization?

Accepted Answer

Projects. Organization structure in HCP Terraform supports centralized management of projects and workspaces across various cloud accounts.

Answer

Shared modules

Answer

Provider aliases

Answer

Remote execution

Question 10

Which TWO of the following are valid uses of the 'for' expression?

Accepted Answer

Generating a list. for expressions can be used to generate lists (using brackets) or maps (using braces).

Answer

Defining a resource

Answer

Managing provider blocks

Answer

Creating dynamic blocks

Question 11

When refactoring a large infrastructure configuration, you move a resource into a child module. How do you handle the existing state to prevent Terraform from destroying and recreating the resource?

Accepted Answer

Use the 'terraform state mv' command to move the resource address.. The 'terraform state mv' command is required to map the old address to the new module-relative address.

Answer

Run 'terraform refresh' to automatically detect the move.

Answer

Rename the resource in the configuration to match the old state.

Answer

Delete the state file and run 'terraform apply'.

Question 12

You are using a module that depends on a specific provider version. Where should this constraint be defined?

Accepted Answer

In the 'required_providers' block within the module's 'terraform' block.. The 'required_providers' block within the 'terraform' block of the module is the correct location to pin versions.

Answer

In the 'provider' block of the calling root module.

Answer

In the root module only.

Answer

In a shell environment variable.

Question 13

Why would you use a 'locals' block within a module instead of passing everything through variables?

Accepted Answer

To reduce repetition and perform transformations on inputs.. 'locals' are ideal for transforming inputs, combining data, or creating complex naming conventions that the user shouldn't have to define.

Answer

To allow the user to override internal values easily.

Answer

To bypass input validation.

Answer

To store state data securely.

Question 14

You want to use a module that is hosted in a private GitHub repository. Which authentication method should Terraform use to access it?

Accepted Answer

Use the same credentials that 'git clone' would use for that repository.. Terraform uses the credentials configured in the local environment (e.g., ~/.git-credentials or SSH keys) to authenticate with private repositories.

Answer

The module must be public for Terraform to access it.

Answer

Terraform requires a special 'git_token' variable in the module block.

Answer

Embed your GitHub password in the source URL.

Question 15

If you have a module that creates an S3 bucket, and you want the bucket name to be prefixed by a value provided by the caller, how do you achieve this?

Accepted Answer

Use string interpolation in the bucket name attribute.. Concatenate the variable inside the resource block using string interpolation.

Answer

Use a local variable that reads from the provider config.

Answer

Define the bucket name in the root module and override the child resource.

Answer

Use the 'module_name' variable provided by Terraform.

Question 16

What is the primary benefit of using a module registry compared to a local file path for module distribution?

Accepted Answer

It enables version control and easier sharing across the organization.. Registries provide versioning, documentation generation, and centralized discovery for teams.

Answer

It allows you to run Terraform commands faster.

Answer

It removes the need for input variables.

Answer

It automatically converts your code to a higher-level language.

Question 17

How can you protect a module's inputs from receiving incorrect types of data?

Accepted Answer

Use a 'validation' block with a condition inside the variable declaration.. Defining the 'type' constraint in the variable block ensures Terraform validates the input before applying changes.

Answer

Use the 'provider' block to enforce input types.

Answer

Write a custom bash script to check the inputs.

Answer

Terraform automatically validates all inputs as strings.

Question 18

When a module is updated, how do you ensure that all environments using this module get the update?

Accepted Answer

Run 'terraform init -upgrade' to fetch the latest version allowed by the constraints.. You must update the version constraint (if pinned) and run 'terraform init -upgrade' to fetch the new version.

Answer

The module updates automatically on every 'apply'.

Answer

Delete the state file and re-run apply.

Answer

Restart the Terraform CLI process.

Question 19

What happens if a Sentinel policy results in an 'advisory' output?

Accepted Answer

The run logs display a warning, but the process continues.. Advisory policies provide information or warnings in the run logs but do not block the execution.

Answer

The plan is marked as failed.

Answer

The policy is treated as a hard-mandatory failure.

Answer

The run is paused for manual intervention.

Question 20

Your team requires a custom module to be versioned strictly to prevent breaking changes during deployments. What is the recommended way to reference a module from a private Git repository?

Accepted Answer

Use the 'ref' parameter in the source URL string.. Using the 'version' argument in the source block allows pinning to specific tags or branches, ensuring stability.

Answer

Set the 'version' block inside the module definition.

Answer

Copy the module code locally every time a new version is released.

Answer

Use the 'module_version' argument in the module block.