Terraform Associate 004Preview

What is an advantage of immutable infrastructure?

A child module can always access variables declared in its parent module.

Where does HashiCorp recommend you store API tokens and other secrets within your team’s Terraform workspaces? (Choose three.)

You are responsible for a set of infrastructure which is managed by two workspaces: example-network and example-compute. The example-compute workspace uses data from output values configured in the example-network workspace, and must be deployed afterward. Currently, this is a manual process:
An operator deploys changes to the example-network workspace.
They manually copy the output values from the example-network workspace to input variables configured for the example-compute workspace.
They deploy the example-compute workspace.
Which HCP Terraform features can you use to automate this process? (Choose two.)

Which HCP Terraform feature is recommended when you want to use the same cloud provider credentials across multiple workspaces?

You can configure multiple cloud blocks in your Terraform configuration to connect your workspace to both HCP Terraform and your Terraform Enterprise instance.

You manage two workspaces in your HCP Terraform organization. The first workspace manages your network configuration. The second workspace manages your compute resources, and retrieves values from the networking workspace.
What HCP Terraform feature lets you run an apply operation on the compute workspace every time you update the networking workspace?

Which of the following does HCP Terraform perform during a health assessment for a workspace? (Choose two.)

Your team uses HCP Terraform to manage your infrastructure. You need to make a change to an infrastructure stack running in a public cloud.
Which pattern follows Infrastructure as Code best practices for making a change?

You have never used Terraform before and would like to test it out using a shared team account for a cloud provider. The shared team account already contains 15 VMs (virtual machines). You develop a new Terraform configuration containing one VM, perform terraform apply, and see that your VM was created successfully.
How do you delete the newly-created VM with Terraform?

You have a simple Terraform configuration containing one VM (virtual machine) in a cloud provider. You run terraform apply and the VM is created successfully.
You delete the VM using the cloud provider console, then run terraform apply again without changing any Terraform code.
What happens next?

What does terraform destroy do?

You just scaled your VM infrastructure and realize you set the count variable to the wrong value. You correct the value and save your change.
What must you do next to make your infrastructure match your configuration?

When a check block’s assertion fails, Terraform blocks the current operation from executing.

If you manually destroy resources within your infrastructure, what is the best practice for reflecting this change in Terraform?

You have a Terraform configuration that defines a single virtual machine with no references to it. You’ve run terraform apply to create the resource, then removed the resource definition from your Terraform configuration file.
What will happen when you run terraform apply in the working directory again?

A senior admin accidentally deleted some of your cloud instances.
What will Terraform do when you run terraform apply?

terraform destroy is the only way to remove infrastructure with Terraform.

The -refresh-only parameter will update your state file when used with terraform plan.

What Terraform command always causes a state file to be updated with changes that might have been made outside of Terraform?

When should you use the force-unlock command?

You’ve just finished refactoring part of your Terraform workspace’s configuration to use a module to manage some of your resources. When you plan your changes, you notice that Terraform will destroy and recreate the affected resources. Doing so could cause unintended downtime in the application your workspace manages.
What supported approach should you take to complete the refactor without destroying and recreating your resources?

What is the purpose of state locking in a remote backend?

You want to bring in an existing database under Terraform management.
What information is required to create a new import block for the database? (Choose two.)