8c Describe How to Organize and Use HCP Terraform Workspaces and Projects TERRAFORM-ASSOCIATE-004 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In HCP Terraform, how should sensitive variable values be handled?

   • AStore them in the Terraform configuration file
   • BMark the variable as sensitive so its value is hidden in the UI and logs
   • CThey cannot be stored in HCP Terraform
   • DUse the same value for all workspaces
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has two teams: 'Platform' and 'Applications'. They want to give the Platform team full control over shared infrastructure workspaces, while the Applications team should only have read access to those workspaces. How should they organize this?

   • ACreate separate projects for each team and duplicate the shared infrastructure configuration.
   • BUse a single project for all workspaces and assign permissions per workspace.
   • CCreate a project for shared infrastructure, assign Platform team 'Admin' permission, and Applications team 'Read' permission on that project.
   • DCreate a workspace for shared infrastructure and give both teams 'Write' permission.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of separating workspaces by environment (e.g., production, staging, development)?

   • ATo isolate state and reduce the blast radius of changes
   • BTo make it easier to delete all environments at once
   • CTo allow the same state file to be shared across environments
   • DTo reduce the number of Terraform configurations needed
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A workspace uses a variable set that contains a sensitive API key. A new developer is added to the team with 'Read' permission on the workspace. What can the developer see?

   • AThe variable's value because they have read access to the workspace.
   • BThe variable's name and that it is sensitive, but not its value.
   • CThe variable's value only if they also have 'Write' permission.
   • DNothing about the variable because it is in a variable set.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company has a compliance requirement that production changes must be approved by a separate team. They use HCP Terraform with VCS-driven runs. How can they enforce this?

   • AGive developers 'Write' permission on production and rely on post-apply audits.
   • BCreate a separate workspace for production and have developers apply changes there.
   • CConfigure the production workspace to require manual confirmation for applies, and restrict 'Write' permission to the approval team.
   • DUse a policy check that automatically approves all changes.
   Reveal Solution Discussion Select an answer first