A security team requires that database credentials generated by a Terraform configuration never appear in plan output or in `terraform output` when run without explicit flags. They also need to reference these credentials in another module. Which approach satisfies both requirements?

Mark the resource attribute as sensitive and output it normally.

Do not output the credentials; instead, use a data source to fetch them in the other module.

Use a `null_resource` to write credentials to a file and output the file path.

Mark the output as `sensitive = true` and reference it as `module.db.credentials` in the other module.

HashiCorp Certified:Terraform Authoring and Operations Professional

Domain 2Objective 5

2e TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Part of the Develop and troubleshoot dynamic configuration domain, which makes up ~20% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~19–32 in this domain), expect 3–5 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

6concepts

Questions 16–18

16application · medium
A security team requires that database credentials generated by a Terraform configuration never appear in plan output or in `terraform output` when run without explicit flags. They also need to reference these credentials in another module. Which approach satisfies both requirements?
Select an answer first
17foundation · easy
Which attribute within a `variable` block is used to provide a human-readable explanation of the variable's purpose?
Select an answer first
18foundation · easy
Which Terraform expression can be used in an output to return a map of resource attributes keyed by a specific attribute?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

2e TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Questions 16–18

A security team requires that database credentials generated by a Terraform configuration never appear in plan output or in `terraform output` when run without explicit flags. They also need to reference these credentials in another module. Which approach satisfies both requirements?

Which attribute within a `variable` block is used to provide a human-readable explanation of the variable's purpose?

Which Terraform expression can be used in an output to return a map of resource attributes keyed by a specific attribute?

Keep studying — Develop and troubleshoot dynamic configuration