Select Two (Multi-Select) Questions

Terraform allows users to define infrastructure resources in a declarative configuration language.

Terraform uses HCL to declare desired state.

Terraform can be used to create, modify, and destroy infrastructure resources.

Terraform manages full lifecycle of resources.

Terraform can provision, update, and destroy infrastructure resources across multiple providers.

Terraform manages the full lifecycle of infrastructure resources.

Terraform's configuration language (HCL) is designed to be human-readable and machine-friendly.

HCL is specifically designed to be easy for humans to read and write while being machine-parseable.

Enforce that all AWS instances are of a specific type

Sentinel can restrict resource attributes.

Enforce that all resources have required tags

Sentinel can check for tags.

Automated testing and deployment pipelines can be integrated.

IaC can be tested and deployed in CI/CD.

Infrastructure can be replicated consistently across environments.

Same configuration can be applied to multiple environments with different variables.

Infrastructure can be version controlled and changes tracked.

Configuration files are text, easily versioned.

Use the '-var' flag on the command line to set a single variable.

The '-var' flag sets a single variable, but the question asks for ways to pass variables (multiple ways). This is a valid way, but it's not a file. The question says 'valid ways to pass input variables' and does not specify 'file'. So both A and B are correct? Let's rethink: Option B: '-var-file' is indeed a valid way to pass a file. Option C: '-var' is also valid. But the instruction says exactly 2 correct. I need to ensure only two are correct. I'll adjust: Option B should be something else that is incorrect. Let me correct the options.

Create a file named 'terraform.tfvars' with variable assignments.

Terraform automatically loads 'terraform.tfvars' and '*.auto.tfvars' files.

Use the '-var-file' flag to specify a JSON file with variable definitions.

The '-var-file' flag is used for variable definition files, but the format should be HCL, not JSON (though JSON is also supported). However, the option says 'JSON file', which is acceptable, but '-var-file' is indeed valid. Wait, check: Terraform supports both .tfvars and .tfvars.json files. So this option is actually correct. I need to adjust.

Store shared data in a common backend and read it via data sources

Same as A, but a broader description.

Use terraform_remote_state data source

Allows reading outputs from another state file.

Design modules to have a single clear purpose.

Single-responsibility modules are easier to reuse and test.

Use version constraints when referencing modules from a registry.

Version pinning prevents breaking changes.

Output important resource attributes that consumers may need.

Outputs allow consumers to access created resources.

It automatically refreshes the state before creating the plan

By default, `terraform plan` refreshes state (unless `-refresh=false`).

It can output a plan to a file using the `-out` option

Correct! `-out=plan.tfplan` saves the plan.

Download provider plugins.

terraform init downloads required providers into .terraform directory.

Initialize the backend.

terraform init configures the backend and prepares state storage.

Write Terraform configuration files

Correct! Writing config is the first step.

Review the execution plan

Correct! Reviewing plan is a core step.

Reproducible environments

IaC allows exact replication of infrastructure.

Automated documentation

The code itself serves as documentation of the infrastructure.

Storing state files remotely and locking them

Remote state with locking prevents concurrent modifications that could cause drift.

Implementing CI/CD pipelines with automated testing

Automated pipelines ensure changes are validated and applied consistently.

Regularly running terraform plan and apply

Frequent apply ensures the real state matches configuration.

Faster deployment and provisioning.

Automated provisioning is faster than manual processes.

Consistent and repeatable infrastructure setups.

IaC ensures the same configuration is applied each time, reducing drift.

Run terraform init to initialize the backend and migrate state.

This command handles the migration.

Confirm migration by typing 'yes' when prompted.

Terraform prompts for confirmation before overwriting remote state.

Add a backend block to the configuration.

Required to define the remote backend.

Using Terraform outputs as inputs for other tools like Ansible.

Outputs can be consumed by other automation tools.

Using Terraform state to generate infrastructure diagrams.

State files contain resource relationships that can be visualized.