An organization stores its Terraform state files in a shared network drive. A security audit reveals that the state files contain sensitive information such as database passwords and API keys. What is the best practice to mitigate this risk?

Store state files in a remote backend with encryption and access controls

Remove sensitive data from the state file after each apply

Encrypt the state file with a password and share it via email

Use a version control system to store state files

In a Terraform template, what is the purpose of a resource block?

To declare a specific infrastructure component, such as a virtual machine or network

To output information about the infrastructure after deployment

To define a variable that can be used throughout the configuration

To specify the cloud provider and authentication details

Why is it important to avoid hard-coding secrets, such as passwords and API keys, in IaC templates?

Hard-coded secrets are not supported by most IaC tools

Hard-coded secrets make the code run slower

Hard-coded secrets can be exposed in version control and pose a security risk

Hard-coded secrets are difficult to read

A team is developing a Terraform module that will be used across multiple projects. They want to ensure that changes to the module do not break existing deployments. What should they implement?

Always use the latest version of the module in all projects

Avoid changing the module once it is created

Version the module and use semantic versioning in the source references

Copy the module code into each project

Which of the following is an example of automating infrastructure deployment using IaC?

Emailing a request to the operations team to provision resources

Running a script that uses the cloud provider's API to create resources

Using a configuration management tool to enforce desired state on existing servers

Manually creating a virtual machine in the cloud console

CompTIACloud+

Domain 2Objective 2

Infrastructure as Code (IaC) CV0-004 Practice Questions (Page 5)

Part of the Deployment domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

19%of the exam

Questions 21–25

21application · medium
An organization stores its Terraform state files in a shared network drive. A security audit reveals that the state files contain sensitive information such as database passwords and API keys. What is the best practice to mitigate this risk?
Select an answer first
22foundation · easy
In a Terraform template, what is the purpose of a resource block?
Select an answer first
23foundation · easy
Why is it important to avoid hard-coding secrets, such as passwords and API keys, in IaC templates?
Select an answer first
24application · medium
A team is developing a Terraform module that will be used across multiple projects. They want to ensure that changes to the module do not break existing deployments. What should they implement?
Select an answer first
25foundation · easy
Which of the following is an example of automating infrastructure deployment using IaC?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.