Question 1

A colleague asks what the difference is between terraform show and terraform state show. What is the correct explanation? (select three)

Options :

A : terraform state show automatically formats its output as JSON for machine parsing

B : terraform show is useful when you want a complete overview of all managed infrastructure

C : terraform show displays the entire state file without requiring any additional arguments

D : terraform state show can display multiple resources by separating them with commas

E : terraform show only displays resources that have pending changes

F : terraform state show requires you to specify a resource address to view that specific resource

Answer: B,C,F

Question 2

You have an existing VPC in your account and have added the data block to your configuration, as shown below. How would you reference the id of the VPC?data "aws_vpc" "production" { tags = { Name = "prod" }}

Options :

A : aws_vpc.production.id

B : var.vpc_id

C : data.aws_vpc.production.vpc.id

D : data.aws_vpc.production.id

Answer: D

Question 3

You’re using the local backend. In the current workspace, terraform.tfstate was accidentally deleted, but the configuration is unchanged. You run terraform plan.Which statements are true? (select three)

Options :

A : Data sources may still read remote systems during planning, but they do not fix the resource state.

B : State locking will prevent the plan from running until the state is restored.

C : terraform destroy cannot identify any resources to destroy until state is restored

D : Terraform will try to create previously managed resources.

E : Previous terraform output values are still available.

Answer: A,C,D

Question 4

You are configuring remote state and must keep backend credentials out of both the .terraform directory and any saved plan files. Which method will meet this requirement?

Options :

A : supply the credentials using environment variables on the machine executing plan/apply

B : add your secrets in terraform.tfvars and pass -var-file when running plan/apply

C : add secrets in the provider block and configure a .gitignore to exclude that file

D : pass secrets with -backend-config=secrets.hcl

Answer: A

Question 5

In HCP Terraform, what is the purpose of using a run trigger?

Options :

A : to require human approval before applying changes in specific workspaces, such as production environments

B : to automatically queue a new run in one workspace after another workspace applies successfully

C : to provide temporary cloud credentials so a workspace can authenticate with least privilege during runs

D : to force a workspace to always run from the newest commit of its VCS branch

Answer: B

Confidently Practice Online with Free Terraform-Associate-004 Exam Cram

Buying Options: