3d TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In Terraform Cloud, how is data shared between workspaces that use the same configuration?

   • ABy using the output values from the current workspace only
   • BBy using the data "terraform_workspace" data source
   • CBy using terraform_remote_state with a workspace key that specifies the target workspace
   • DBy using the same state file for all workspaces
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   Your organization uses a single Terraform configuration with workspaces for each environment. The prod workspace needs to read the database endpoint from the dev workspace. The dev workspace's state is stored in an S3 backend. The prod workspace's IAM role has read access to the dev workspace's state file. However, the terraform_remote_state data source in the prod workspace is failing with a permission error. What is the most likely cause?

   • AThe IAM role for the prod workspace does not have permission to read the state object in the S3 bucket
   • BThe prod workspace's IAM role does not have permission to list the S3 bucket
   • CThe terraform_remote_state data source is using the wrong key for the dev workspace's state file
   • DThe dev workspace's state file is corrupted
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   Your organization uses a single Terraform configuration with workspaces for each environment (dev, staging, prod). The prod workspace needs to read the VPC ID from the dev workspace to establish a peering connection. The dev workspace's VPC ID is not exposed as an output. You have read access to the dev workspace's state file. What is the most appropriate action?

   • AUse a data source for aws_vpc in the prod workspace to fetch the VPC ID by tag
   • BUse a terraform_remote_state data source in the prod workspace and reference the VPC ID directly from the state
   • CManually copy the VPC ID from the dev state file and hardcode it in the prod configuration
   • DAdd an output to the dev configuration for the VPC ID, apply it, and then use a terraform_remote_state data source in the prod workspace
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   Your organization has a central networking configuration that stores its state in an S3 bucket. Multiple application teams need to read the networking outputs. The networking team wants to ensure that application teams cannot read sensitive values that are not exposed as outputs. The S3 bucket policy currently grants read access to all authenticated users. What is the most secure way to restrict access?

   • AUse a data source that queries the AWS API for the resources instead of the state file
   • BKeep the current bucket policy but ensure that sensitive values are not exposed as outputs
   • CMove the state file to a private bucket and share the outputs via a separate JSON file
   • DCreate a specific IAM role for each application team that grants read-only access to the state object, and update the bucket policy to require that role
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of using remote state as a data-sharing mechanism between separate Terraform configurations?

   • ATo merge multiple state files into a single state
   • BTo automatically apply changes from one configuration to another
   • CTo store configuration code in a shared location
   • DTo allow one configuration to consume outputs produced by another configuration
   Reveal Solution Discussion Select an answer first