Courseiva

CCNA Collaborative Workflows Questions

32 questions · Collaborative Workflows · All types, answers revealed

1
MCQmedium

A downstream workspace in HCP Terraform needs to automatically trigger a plan after a successful apply in an upstream workspace. How do you configure this?

A.Configuring Run Triggers in the downstream workspace
B.Enabling 'Auto-apply' in the upstream
C.Setting a 'TF_VAR' environment variable
D.Using a local variable
AnswerA

Run triggers are defined in the downstream workspace to watch an upstream source.

Why this answer

Run triggers are configured in the downstream workspace settings to listen for successful outputs from an upstream workspace.

2
MCQmedium

You need to enforce that only specific VM sizes are used in your infrastructure. Which Sentinel feature provides this capability?

A.Run trigger
B.Policy enforcement
C.Workspaces
D.Policy Set
AnswerB

Policy enforcement evaluates the plan against defined rules.

Why this answer

Sentinel policies allow you to evaluate plan data and return a boolean decision to allow or block the plan.

3
Multi-Selecteasy

Which TWO ways can you connect a workspace to your version control provider?

Select 2 answers
A.Direct VCS integration
B.CLI-driven workflow
C.Manual UI file upload
D.FTP upload
E.Emailing code to Terraform support
AnswersA, B

Native integrations with platforms like GitHub exist.

Why this answer

HCP Terraform supports direct VCS integration (GitHub/GitLab/Bitbucket) and CLI-driven workflows.

4
MCQmedium

You have a Terraform configuration that uses a module from the public registry. How do you ensure your team uses a specific version?

A.By manually deleting other versions
B.By configuring a Sentinel policy
C.Using a provider block
D.Using the 'version' argument
AnswerD

Version arguments in module blocks provide exact pinning.

Why this answer

The 'version' attribute within the 'source' block of the module ensures version pinning.

5
Multi-Selecteasy

Which TWO of the following are benefits of using HCP Terraform for teams?

Select 2 answers
A.Centralized state management
B.Automated run triggers
C.Local execution only
D.No need for version control
E.Lower costs
AnswersA, B

Provides a single source of truth for all team members.

Why this answer

Centralized state management and automated run triggers are key team collaboration features.

6
Multi-Selectmedium

Which TWO types of variables can be set in HCP Terraform?

Select 2 answers
A.Environment variables
B.Policy-level variables
C.State-level variables
D.Hardcoded module variables
E.Terraform variables
AnswersA, E

Used for configuration like AWS_ACCESS_KEY_ID.

Why this answer

HCP Terraform supports both Terraform variables (HCL) and environment variables (for provider configuration).

7
Multi-Selecthard

When troubleshooting a failed plan in HCP Terraform, which THREE sources should you check?

Select 3 answers
A.Policy check results
B.Terraform init output
C.The provider source code
D.Run logs
E.Organization billing page
AnswersA, B, D

Policies might have blocked the run.

Why this answer

Logs, policy evaluation results, and the terraform init output are essential for debugging.

8
MCQhard

When using 'terraform state mv', what is the impact on the collaboration workflow?

A.It changes the state file, which affects subsequent runs
B.It is only possible in local state
C.It requires all team members to re-run init
D.It automatically updates the git repository
AnswerA

State modification changes the mapping of resources in the remote backend.

Why this answer

Modifying the state file manually requires careful coordination to avoid conflicts with other team members' operations.

9
MCQmedium

You have a team-based collaboration project. Where should you store sensitive credentials like AWS secret keys so they are not hardcoded in your Terraform files?

A.In environment variables marked as 'sensitive'
B.In a .tfvars file
C.In a version-controlled .env file
D.In the state file
AnswerA

Sensitive workspace variables are encrypted at rest and masked in logs.

Why this answer

HCP Terraform variables marked as 'sensitive' are stored securely and never displayed in the UI.

10
MCQhard

Which HCP Terraform feature allows you to manage infrastructure across multiple cloud accounts using a single organization?

A.Shared modules
B.Projects
C.Provider aliases
D.Remote execution
AnswerB

Projects allow grouping of workspaces for cross-account organization.

Why this answer

Organization structure in HCP Terraform supports centralized management of projects and workspaces across various cloud accounts.

11
MCQeasy

What happens if two team members try to apply changes to the same workspace in HCP Terraform simultaneously?

A.The state file will be corrupted
B.The latest one wins
C.Both runs will fail
D.The second run is queued
AnswerD

HCP Terraform automatically manages concurrency via queuing.

Why this answer

HCP Terraform serializes runs; the second run will be queued until the first completes.

12
Multi-Selecthard

Which THREE factors influence the choice of using an HCP Terraform Agent?

Select 3 answers
A.Need for private network connectivity
B.To increase the speed of the provider download
C.Compliance requirements for data locality
D.The need to access internal APIs
E.To remove the need for a VCS
AnswersA, C, D

Agents bridge the private network to HCP Terraform.

Why this answer

Agents are used for private network connectivity, compliance requirements, and accessing resources that don't allow public internet access.

13
Multi-Selectmedium

Which TWO features help maintain consistency across multiple workspaces?

Select 2 answers
A.Unique state files for every module
B.Using local execution only
C.Manual copy-pasting of code
D.Shared modules
E.Variable sets
AnswersD, E

Promotes reusable code across workspaces.

Why this answer

Shared modules and variable sets ensure that configurations and inputs remain consistent across teams and workspaces.

14
Multi-Selectmedium

Which THREE actions occur when you execute a Terraform run in HCP Terraform?

Select 3 answers
A.Immediate infrastructure destruction
B.Policy evaluation
C.Manual approval
D.Plan generation
E.Local environment cleanup
AnswersB, C, D

Sentinel/OPA policies are evaluated against the plan.

Why this answer

The process involves plan generation, policy evaluation, and then awaiting approval before applying.

15
MCQeasy

Which of the following is an advantage of using HCP Terraform over local state for team collaboration?

A.It provides state locking and run history
B.It converts HCL to JSON
C.It eliminates the need for AWS providers
D.It is always free
AnswerA

These are core benefits of remote backend management.

Why this answer

HCP Terraform provides centralized state management, locking, and a history of runs, which are critical for teams.

16
MCQmedium

You are using HCP Terraform agents. Why would you choose to use an agent instead of the public HCP Terraform execution environment?

A.To increase execution speed
B.To access resources in a private network
C.To bypass OPA policies
D.To avoid paying for HCP Terraform
AnswerB

Private network access is the primary use case for agents.

Why this answer

Agents allow Terraform to run in a private network, accessing resources that are not reachable from the public internet.

17
MCQeasy

In HCP Terraform, you want to allow team members to see runs but prevent them from approving plans. Which team permission set should you assign?

A.Write
B.Admin
C.Read
D.Cost Estimation
AnswerC

Read only allows viewing information.

Why this answer

The 'read' permission allows viewing runs and state without modification capabilities.

18
MCQeasy

Where can you view the historical state versions in HCP Terraform?

A.The Variables tab
B.The Runs tab
C.The States tab
D.The Settings tab
AnswerC

This tab lists all previous state versions.

Why this answer

The 'States' tab within a specific workspace shows the full history of state versions.

19
Multi-Selectmedium

Which THREE pieces of information are displayed in the HCP Terraform Run UI?

Select 3 answers
A.The user who initiated the run
B.The raw state file in plain text
C.Policy check status
D.Plan output
E.Private cloud provider passwords
AnswersA, C, D

Audit logs record the initiator.

Why this answer

The UI shows the plan output, the policy check status, and the user who initiated the run.

20
MCQmedium

You want to automate the approval process for non-production environments in HCP Terraform. Which setting enables this?

A.Configure Run Triggers
B.Set Sentinel policy to advisory
C.Enable Auto-apply
D.Use API-driven workflows
AnswerC

Auto-apply removes the manual approval step.

Why this answer

Auto-apply in workspace settings allows runs to proceed to completion without manual intervention.

21
MCQhard

In a workspace, you define a variable named 'region'. How can you override this value for a specific run without changing the workspace configuration?

A.By editing the state file
B.By modifying the provider block
C.Using -var flag in terraform apply
D.By adding a new workspace
AnswerC

CLI flags override workspace variables for that specific run.

Why this answer

CLI-driven runs or API overrides can pass different variables to a specific run execution.

22
MCQmedium

You are managing state in a multi-region deployment. You need to ensure that simultaneous terraform apply operations do not corrupt the state file. Which backend configuration parameter primarily enables this functionality?

A.workspace_key_prefix
B.kms_key_id
C.acl
D.dynamodb_table
AnswerD

DynamoDB tables are the standard mechanism for S3 state locking.

Why this answer

The 'dynamodb_table' parameter is used with the S3 backend to enable state locking, preventing concurrent operations.

23
MCQhard

You are writing an OPA (Open Policy Agent) policy to restrict resource creation. You want to deny any EC2 instance that does not include the 'CostCenter' tag. How do you access the resource attributes in the policy?

A.terraform.tags
B.input.resource_changes
C.state.output
D.var.tags
AnswerB

input.resource_changes contains the details of planned modifications.

Why this answer

In OPA/Sentinel, you access the plan data structure which contains the resource changes and their associated attributes.

24
Multi-Selecteasy

Which THREE components are part of the 'Workspace' object in HCP Terraform?

Select 3 answers
A.State file
B.Billing invoice history
C.Global provider plugins
D.Run history
E.Variables
AnswersA, D, E

The workspace holds the current state.

Why this answer

A workspace includes state, variables, and history/runs.

25
MCQhard

You have a workspace configured for 'CLI-driven' workflow. What does this mean for how you apply changes?

A.The user triggers operations via the CLI
B.Operations are always automatic
C.It disables remote state
D.The plan happens locally, apply remotely
AnswerA

The CLI is the driver for the remote run.

Why this answer

CLI-driven workflows require the user to trigger the plan/apply locally, while the state is managed remotely.

26
MCQhard

When migrating from local state to HCP Terraform, which command is used to initialize the migration?

A.terraform login
B.terraform push
C.terraform init
D.terraform migrate
AnswerC

Running init with a new cloud backend configuration prompts migration.

Why this answer

'terraform init' detects the backend configuration and initiates the migration process.

27
MCQeasy

You have accidentally committed a secret to your VCS repository. After rotating the secret, what is the best practice to ensure it is not used in your workspace?

A.Delete the repository
B.Disable VCS integration
C.Run terraform destroy
D.Use HCP Terraform sensitive variables
AnswerD

Sensitive variables ensure secrets are not stored in VCS.

Why this answer

You must remove the secret from the VCS and update the workspace variable to use a secure, non-version-controlled source.

28
MCQmedium

If you need to share output values between workspaces, what is the best practice in HCP Terraform?

A.Emailing the values
B.Hardcoding the IDs
C.Exporting to a flat file
D.Using the 'terraform_remote_state' data source
AnswerD

This is the native way to access remote state outputs.

Why this answer

Using a workspace data source allows one workspace to read outputs from another safely.

29
MCQeasy

Your team is using HCP Terraform. You need to isolate development, staging, and production environments using the same set of configuration files. Which feature should you implement?

A.Modules
B.Sentinel Policies
C.Workspaces
D.Run Triggers
AnswerC

Workspaces allow distinct state and variables for different environments.

Why this answer

Workspaces in HCP Terraform provide a way to maintain separate state files and variable sets for the same configuration.

30
Multi-Selecthard

Which TWO of the following are true regarding OPA/Sentinel policies?

Select 2 answers
A.They run after the apply phase
B.They can only be used with AWS
C.They can be set to advisory mode
D.They can be scoped to specific workspaces
E.They replace the need for IAM
AnswersC, D

Advisory mode allows the run to proceed with a warning.

Why this answer

They can be applied at the organization or workspace level and can be set to advisory or mandatory.

31
MCQeasy

Which organization-level setting in HCP Terraform governs who can create new workspaces?

A.Global settings
B.Team permissions
C.Agent pool settings
D.Workspace settings
AnswerB

Workspace creation is controlled by team roles within the organization.

Why this answer

Permissions for creating workspaces are managed via Organization Team permissions.

32
MCQhard

When implementing OPA policies, what is the 'soft-mandatory' enforcement level?

A.It blocks the run completely
B.It allows the run if overridden
C.It is a deprecated feature
D.It only logs the event
AnswerB

Soft-mandatory provides a warning that can be bypassed.

Why this answer

Soft-mandatory policies can be overridden by users with sufficient permissions after a warning is issued.

Ready to test yourself?

Try a timed practice session using only Collaborative Workflows questions.