4a Use and Differentiate Resource and Data Blocks TERRAFORM-ASSOCIATE-004 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A team uses Terraform to manage infrastructure in Google Cloud. They have an existing VPC network that was created outside of Terraform. They need to create a new subnet inside that existing VPC. The subnet configuration must reference the VPC's self-link. Which block type should they use to obtain the VPC's self-link?

   • AA local value that hard-codes the VPC self-link.
   • BA variable block that accepts the VPC self-link as input from the user.
   • CA data block with the `google_compute_network` data source, filtering by the VPC name.
   • DA resource block with the `google_compute_network` resource, importing the VPC first.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company uses Terraform to manage a mix of existing and new AWS infrastructure. They have an existing IAM role that is used by multiple applications and must NOT be managed by Terraform. They need to create a new Lambda function that assumes this IAM role. The Lambda function's execution role ARN must reference the existing IAM role. What is the correct approach?

   • AUse a data block for the IAM role and a resource block for the Lambda function, referencing the data source's ARN.
   • BUse a resource block for the IAM role and a resource block for the Lambda function, importing the IAM role first.
   • CUse a local value for the IAM role's ARN and a resource block for the Lambda function.
   • DUse a variable for the IAM role's ARN and a resource block for the Lambda function.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What does Terraform do when a resource block is removed from the configuration and `terraform apply` is run?

   • AIt destroys the corresponding infrastructure object.
   • BIt errors out and refuses to apply until the resource block is restored.
   • CIt imports the resource back into the state to keep it managed.
   • DIt leaves the infrastructure object in place and only removes it from the state file.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A configuration needs to use the ID of an existing subnet that was created outside of Terraform. Which block type should be used to obtain this ID?

   • AAn output block that queries the subnet ID.
   • BA variable block that stores the subnet ID.
   • CA resource block with the subnet type.
   • DA data block with the subnet data source.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a Terraform data block, what is the purpose of the query arguments in the block body?

   • AThey define the desired state of the infrastructure object to be created.
   • BThey define the output values that the data block will expose.
   • CThey filter or select which existing infrastructure data to read.
   • DThey specify the provider version to use for the data source.
   Reveal Solution Discussion Select an answer first