Q 1. One of your colleagues is new to Terraform and wants to add a new workspace named new-hire. What command he should execute from the following?<\/em><\/h4>\nA. terraform workspace \u2013new \u2013new-hire
\nB. terraform workspace new new-hire
\nC. terraform workspace init new-hire
\nD. terraform workspace new-hire<\/p>\n
Option B:<\/strong>
\nterraform workspace new new-hire is the right syntax to be used whenever you want to create a new workspace.
\nExample :<\/strong>
\nterraform workspace new new-hire
\nCreated and switched to workspace “new-hire “!<\/p>\nQ 2. John is a newbie to Terraform and wants to enable detailed logging to find all the details<\/em>
\nWhich environment variable does he need to set?<\/em><\/h4>\nA. TF_help
\nB. TF_LOG
\nC. TF_Debug
\nD. TF_var_log<\/p>\n
Option: B is correct<\/strong>
\nBy default, Terraform does not provide detailed logging. To enable detailed logging, we have to set the environment variable TF_LOG.<\/p>\nBy enabling TF_LOG, you can set to TRACE, INFO, WARN or ERROR, DEBUG Levels.<\/p>\n
Q 3. Which option will you use to run provisioners that are not associated with any resources?<\/em><\/h4>\nA. Local-exec
\nB. Null_resource
\nC. Salt-masterless
\nD. Remote-exec<\/p>\n
Option B is correct<\/strong>
\nIf you need to run provisioners that aren’t directly associated with a specific resource, you can associate them with a null_resource.
\nRefer the link below for Explanation:<\/p>\nQ 4. Which language does terraform support from the below list?<\/em><\/h4>\nA. XML
\nB. Javascript
\nC. Hashicorp Language & JSON
\nD. Plaintext<\/p>\n
Option C is correct<\/strong>
\nTerraform supports Hashicorp Language & JSON, files ending in .tf and tf.json format.<\/p>\nQ 5. What is the provider version of Google Cloud being used in Terraform?<\/em>
\nGoogle = \u201c~> 1.9.0\u201d<\/em><\/h4>\nA. 1.9.1
\nB. 1.0.0
\nC. 1.8.0
\nD. 1.9.2<\/p>\n
Options A and D are correct<\/strong><\/p>\nAccording to the Terraform doc, the operator ~>(Pessimistic Constraint Operator) means only the minor (rightmost version increase) updates are accepted. Therefore, ~> 1.9.0 means the related module\/provider requirement accepts 1.9.1 to 1.9.x, but not 1.10.0, and absolutely not 1.0.0 or 1.8.0.
\nSource: expression\/version constraints in the Terraform docs.
\nIn reference to this question, terraform is looking for any update above 1.9.0, which can be either 1.9.1 or 1.9.2. Hence, both answers are correct.<\/p>\n
Q 6. On executing terraform plan, terraform scans the code and appends any missing argument before terraform apply.<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Option: False<\/strong>
\nOn executing terraform plan, terraform scans the code and checks for syntactical errors, missing arguments. Users need to fix these warnings before executing the code successfully.<\/p>\nQ 7. Do terraform workspaces help in adding\/allowing multiple state files for a single configuration?<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Option: True<\/strong>
\nTerraform workspaces allow configuring multiple state files and associating with a single configuration file<\/p>\nQ 8. Does terraform standard backend type support remote management system?<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Option: False<\/b><\/p>\n
The docs outline two <\/span>types of backends<\/b>: enhanced and standard. Enhanced <\/span>backends<\/b> are local, which is the default, and remote, which generally refers to <\/span>Terraform<\/b> Cloud. The one major feature of an enhanced <\/span>backend<\/b> is the <\/span>support<\/b> for remote operations<\/span><\/p>\nQ 9. Does terraform refresh command updates the state files?<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Option: True<\/strong>
\nYes, terraform refresh updates the state files to the latest unless there are any manual changes.<\/p>\nQ 10. Which command is used to launch terraform console?<\/em><\/h4>\nA. terraform apply -config
\nB. terraform console
\nC. terrafrom plan
\nD. terrafrom consul<\/p>\n
Answer : B<\/strong>
\nterraform console [options] [dir]
\nThis command helps with an interactive command-line console for evaluating and experimenting with expressions<\/p>\nQ 11. Which of the following below helps users to deploy policy as a code?<\/em><\/h4>\nA. Resources
\nB. Functions
\nC. Sentinel
\nD. Workspaces<\/p>\n
Answer: C<\/strong>
\nPolicy as code is the idea of writing code in a high-level language to manage and automate policies. By representing policies as code in text files, proven software development best practices can be adopted such as version control, automated testing, and automated deployment.
\nSentinel is built around the idea and provides all the benefits of policy as code.<\/p>\nQ 12. You have been asked to stop using static values and make code more dynamic. How can you achieve it? Select the correct option from below.<\/em><\/h4>\nA. Local values
\nB. Input variables
\nC. Depends_on
\nD. Functions<\/p>\n
Answer: B<\/strong>
\nIf we compare terraform with any conventional programming language, then,
\nInput Variables<\/strong>: Input variables are equivalent to function arguments.(Correct Answer)
\nLocal Values<\/strong>: Local value are like function’s temporary local variables.
\nTerraform Functions<\/strong>: The Terraform language includes a number of built-in functions that you can call from within expressions to transform and combine values. The Terraform language does not support user-defined functions, and so only the functions built in to the language are available for use.
\nDepends_On<\/strong>: It is a meta argument to signify explicit dependencies in terraform resource creation.<\/p>\nQ 13. Which of the following flags can be used with terraform apply command?<\/em><\/h4>\nA. Auto-approve
\nB. Init
\nC. Get
\nD. Console<\/p>\n
Answer – A<\/strong>
\nThe behavior of terraform apply differs significantly depending on whether you pass it the filename of a previously-saved plan file.
\nThe terraform apply command executes the actions proposed in a Terraform plan.
\n-auto-approve<\/strong>: Skips interactive approval of the plan before applying. This option is ignored when you pass a previously-saved plan file because Terraform considers you passing the plan file as the approval and so will never prompt in that case.
\n-compact-warnings<\/strong>: This shows any warning messages in a compact form which includes only the summary messages unless the warnings are accompanied by at least one error and thus the warning text might be useful context for the errors.
\n-input=false<\/strong>: Disables all of Terraform’s interactive prompts. Note that this also prevents Terraform from prompting for interactive approval of a plan, so Terraform will conservatively assume that you do not wish to apply the plan, causing the operation to fail. If you wish to run Terraform in a non-interactive context, see Running Terraform in Automation for some different approaches.
\n-lock=false<\/strong>: Disables Terraform’s default behavior of attempting to take a read\/write lock on the state for the duration of the operation.
\n-lock-timeout=DURATION<\/strong>: Unless locking is disabled with -lock=false, instructs Terraform to retry acquiring a lock for a period of time before returning an error. A duration syntax is a number followed by a time unit letter, such as “3s” for three seconds.
\n-no-color<\/strong>: Disables terminal formatting sequences in the output. Use this if you are running Terraform in a context where its output will be rendered by a system that cannot interpret terminal formatting.
\n-parallelism=n<\/strong>: Limit the number of concurrent operations as Terraform walks the graph. Defaults to 10.
\nFor configurations using the local backend only, terraform apply also accepts the legacy options -state, -state-out, and -backup.<\/p>\nQ 14. What is the default number of concurrent operations supported by <\/span>terraform apply<\/span> command?<\/span><\/em><\/h4>\nA. 100
\nB. 10
\nC. 5
\nD. 1<\/p>\n
Answer – B<\/strong>
\nThe default number of concurrent operations supported by Terraform apply command is 10.
\n-parallelism=n – Limit the number of concurrent operations as Terraform walks the graph and the default is 10<\/p>\nQ 15. You are trying to login into Terraform Enterprise. Which of the following command is used to save the API token?<\/em><\/h4>\nA. terraform get
\nB. terraform API-get
\nC. terraform login
\nD. terraform cloud \u2013 get api<\/p>\n
Answer – C<\/strong>
\nterraform login command can be used to automatically obtain and save an API token for Terraform Cloud, Terraform Enterprise, or any other host that offers Terraform services.
\nBy default, Terraform will obtain an API token and save it in plain text in a local CLI configuration file called credentials.tfrc.json. When you run terraform login, it will explain specifically where it intends to save the API token and give you a chance to cancel if the current configuration is not as desired.
\nThe syntax for Terraform login:
\nterraform login [hostname]
\nIf you don’t provide an explicit hostname, Terraform will assume you want to log in to Terraform Cloud at app.terraform.io.<\/p>\nQ 16. What are the two supported backend types in Terraform?<\/em><\/h4>\nA. Remote-backend
\nB. Enhanced
\nC. Local- backend
\nD. Standard<\/p>\n
Answer B, D<\/strong>
\nTerraform’s backends are divided into two main types, according to how they handle state and operations:<\/p>\n\n- Enhanced<\/strong> backends can both store state and perform operations. There are only two enhanced backends: local and remote.<\/li>\n
- Standard<\/strong> backends only store state and rely on the local backend for performing operations.<\/li>\n<\/ul>\n
Q 17. Is terraform state-unlock command used to unlock the locked state file?<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Answer: False<\/strong>
\nThe correct command is given below-
\nterraform force-unlock [options] LOCK_ID [DIR]
\nThe above command is used to unlock the state file.<\/p>\nQ 18. SMB(Server Message Block) and RDP(Remote Desktop) are supported connection types in the remote-exec provisioner. True or False?<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Answer: False<\/strong>
\nSsh and winrm are the supported connection types in remote-exec provisioner but not SMB and RDP.<\/p>\nQ 19. Community providers are downloaded automatically using terraform init command. True or False?<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Answer: True<\/strong>
\nAny community provider can be automatically downloaded from a Terraform registry by running the terraform init command.
\nCommunity providers are installed in the same way as other providers<\/p>\nQ 20. By using the count meta-argument, you can scale the resources by incrementing the number.<\/em><\/h4>\nA. True
\nB. False<\/p>\n
Answer: True<\/strong>
\nThe count is one of the reserved words. One can use count for scaling instead of repeating the resources again.
\nThe count meta-argument accepts a whole number and creates that many instances of the resource or module.<\/p>\nQ 21. A user wants to list all resources which are deployed using Terraform. How can this be done?<\/em><\/h4>\nA. terraform state show
\nB. terraform state list
\nC. terraform show
\nD. terraform show list<\/p>\n
Answer: B<\/strong><\/p>\n\n- Option A is INCORRECT<\/strong> because this command shows the attributes of a single resource in the Terraform state file<\/li>\n
- Option B is CORRECT<\/strong> because the terraform state list command is used to list resources within a Terraform state.<\/li>\n
- Option C is INCORRECT<\/strong> because this command will output all resources and attributes in a human-readable format.<\/li>\n
- Option D is INCORRECT<\/strong> because this option will try to display all resources and attributes in the list file. This command takes the list as an input file for the show command.
\nThe command will list all resources in the state file matching the given addresses (if any). If no addresses are given, all resources are listed.
\nThe resources listed are sorted according to module depth order followed by alphabetical. This means that resources that are in your immediate configuration are listed first, and resources that are more deeply nested within modules are listed last.
\nFor complex infrastructures, the state can contain thousands of resources it can filter using the id option.<\/li>\n<\/ul>\nQ 22. Which among the following log command should be set to get Maximum verbosity of terraform logs?<\/em><\/h4>\nA. set the TF_LOG=DEBUG in environment variable
\nB. set the TF_LOG=INFO in environment variable
\nC. set the TF_LOG=TRACE in environment variable
\nD. set the TF_LOG=WARN in environment variable<\/p>\n
Answer: C<\/strong><\/p>\n\n- Option A is INCORRECT<\/strong> because this command will not give detailed verbose information compared to trace<\/li>\n
- Option B is INCORRECT<\/strong> because this command will just give info but will output detailed information.<\/li>\n
- Option C is CORREC<\/strong>T because this command will output more verbose information compared all other options.<\/li>\n
- Option D is INCORRECT<\/strong> because this option will only print warn messages.
\nTerraform has detailed logs which can be enabled by setting the TF_LOG environment variable to any value. This will cause detailed logs to appear on stderr.
\nTo persist logged output you can set TF_LOG_PATH in order to force the log to always be appended to a specific file when logging is enabled. Note that even when TF_LOG_PATH is set, TF_LOG must be set in order for any logging to be enabled.<\/li>\n<\/ul>\nQ 23. Which among the following are not module source options?<\/em><\/h4>\nA. Local Path
\nB. Terraform registry
\nC. Bit bucket
\nD. HTTP URLs
\nE. BLOB storage<\/p>\n
Answer: E<\/strong>
\nOptions A, B, C, and D are INCORRECT<\/strong> because these are valid source options for a module.
\nOption E is CORRECT<\/strong> because we cannot use BLOB storage as a module source option.
\nThe source argument in a module block tells Terraform where to find the source code for the desired child module. Terraform uses this during the module installation step of terraform init to download the source code to a directory on a local disk so that it can be used by other Terraform commands.
\nCurrently following are the valid source options for a module:<\/p>\n\n- Local Paths<\/li>\n
- Terraform Registry<\/li>\n
- Github<\/li>\n
- Bitbucket<\/li>\n
- Generic Git, Mercurial repositories<\/li>\n
- HTTP URLs<\/li>\n
- S3 buckets<\/li>\n
- GCS buckets<\/li>\n<\/ul>\n
Q 24. Which of the following command can be used to syntactically check to terraform configuration before using apply or plan command?<\/em><\/h4>\nA. terraform fmt
\nB. terraform validate
\nC. terraform show
\nD. terraform check<\/p>\n
Answer: B<\/strong>
\nOption A is INCORRECT<\/strong> because fmt is used to rewrite Terraform configuration files to a canonical format and style.
\nOption B is CORRECT<\/strong> because it is used to validate the terraform configuration.
\nOption C is INCORRECT<\/strong> because the show is used to provide human-readable output from a state or plan file.
\nOption D is INCORRECT<\/strong> because there is no command in terraform called to check.
\nterraform validate command checks whether a configuration is syntactically valid and internally consistent, regardless of any provided variables or existing state.
\nValidation requires an initialized working directory with any referenced plugins and modules installed.<\/p>\nQ 25. When multiple team members are working on the same state file, the state file gets locked. How to remove the lock?<\/em><\/h4>\nA. terraform force-unlock LOCK_ID
\nB. terraform force-unlock STATE_FILE
\nC. terraform unlock LOCK_ID
\nD. terraform force-unlock=true<\/p>\n
Answer: A<\/strong><\/p>\n\n- Option A is CORRECT force-unlock with LOCK_ID is used to remove lock on state file.<\/li>\n
- Option B is INCORRECT because we need to pass LOCK_ID as argument not STATE_FILE.<\/li>\n
- Option C is INCORRECT because force-unlock is used not unlock is used to remove state lock.<\/li>\n
- Option D is INCORRECT because force-unlock needs LOCK_ID as an argument.
\nforce-unlock manually unlock the state for the defined configuration. This will not modify your infrastructure. This command removes the lock on the state for the current configuration. The behavior of this lock is dependent on the backend being used.
\nLocal state files cannot be unlocked by another process. Usage: terraform force-unlock LOCK_ID [DIR]<\/li>\n<\/ul>\n<\/span>Domain :\u00a0Use the Terraform CLI (outside of core workflow)<\/span><\/h3>\nQ26 : If you want to replace a particular object even though there are no configuration changes in the code, which command from below would be best suited.<\/em><\/h4>\nA.\u00a0<\/strong>terraform destroy
\nB.\u00a0<\/strong>terraform taint
\nC.\u00a0<\/strong>terraform replace