AWS provider Practice Test 7 — 10 Questions

Question 1

When using for_each on a resource, how do you access the value of the current iteration inside the resource configuration?

Accepted Answer

each.value. The 'each.value' object is the standard way to access the value in the collection currently being processed by for_each.

Answer

each.key

Answer

item.value

Answer

count.index

Question 2

Which TWO actions can be taken to resolve issues where a resource must be replaced, but 'prevent_destroy' is enabled?

Accepted Answer

Run 'terraform state rm' to remove the resource from state and re-import.. You must either remove the meta-argument from the code or use the state management to remove the resource constraint before re-applying.

Answer

Use 'terraform apply -auto-approve'.

Answer

Use 'terraform refresh' to update the constraint.

Answer

Set the prevent_destroy argument to false in the CLI.

Question 3

Which THREE of these are reasons to use the 'ignore_changes' lifecycle meta-argument?

Accepted Answer

To ignore tags applied by external cost-allocation tools.. These are common scenarios for ignoring drifts or auto-populated fields in Terraform.

Answer

To force the creation of a new resource.

Answer

To prevent Terraform from destroying a database.

Question 4

Your team is using HCP Terraform. You need to isolate development, staging, and production environments using the same set of configuration files. Which feature should you implement?

Accepted Answer

Workspaces. Workspaces in HCP Terraform provide a way to maintain separate state files and variable sets for the same configuration.

Answer

Modules

Answer

Sentinel Policies

Answer

Run Triggers

Question 5

When implementing OPA policies, what is the 'soft-mandatory' enforcement level?

Accepted Answer

It allows the run if overridden. Soft-mandatory policies can be overridden by users with sufficient permissions after a warning is issued.

Answer

It blocks the run completely

Answer

It is a deprecated feature

Answer

It only logs the event

Question 6

When migrating from local state to HCP Terraform, which command is used to initialize the migration?

Accepted Answer

terraform init. 'terraform init' detects the backend configuration and initiates the migration process.

Answer

terraform login

Answer

terraform push

Answer

terraform migrate

Question 7

Which THREE actions occur when you execute a Terraform run in HCP Terraform?

Accepted Answer

Policy evaluation. The process involves plan generation, policy evaluation, and then awaiting approval before applying.

Answer

Immediate infrastructure destruction

Answer

Local environment cleanup

Question 8

In a workspace, you define a variable named 'region'. How can you override this value for a specific run without changing the workspace configuration?

Accepted Answer

Using -var flag in terraform apply. CLI-driven runs or API overrides can pass different variables to a specific run execution.

Answer

By editing the state file

Answer

By modifying the provider block

Answer

By adding a new workspace

Question 9

You have accidentally committed a secret to your VCS repository. After rotating the secret, what is the best practice to ensure it is not used in your workspace?

Accepted Answer

Use HCP Terraform sensitive variables. You must remove the secret from the VCS and update the workspace variable to use a secure, non-version-controlled source.

Answer

Delete the repository

Answer

Disable VCS integration

Answer

Run terraform destroy

Question 10

In HCP Terraform, you want to allow team members to see runs but prevent them from approving plans. Which team permission set should you assign?

Accepted Answer

Read. The 'read' permission allows viewing runs and state without modification capabilities.

Answer

Write

Answer

Admin

Answer

Cost Estimation