Your team manages a shared Kubernetes cluster using a Terraform configuration. Another team needs the cluster endpoint and kubeconfig to deploy applications. The cluster configuration uses a GCS backend and exposes the endpoint and kubeconfig as outputs. What should the application team do to consume these outputs?

Ask the cluster team to manually provide the values and hardcode them in the application configuration

Use a data source for google_container_cluster to fetch the endpoint and kubeconfig

Use a terraform_workspace data source to access the cluster outputs

Add a terraform_remote_state data source with the GCS backend configuration and read the outputs

Your organization has a central platform team that manages shared networking infrastructure in one Terraform configuration. Multiple application teams need to read the outputs from this configuration's remote state to deploy their workloads. However, application teams should not be able to modify the networking state or see sensitive values that are not exposed as outputs. What is the most appropriate access control strategy?

Grant application teams full access to the state file so they can read all values directly

Copy the state file to a separate bucket that application teams can read

Grant application teams read-only access to the state file in the backend, and ensure sensitive values are not exposed as outputs

Use a data source that queries the AWS API for the resources instead of the state file

Your company has two separate Terraform configurations: one for the production VPC and one for the application workloads. The application configuration needs the VPC ID and subnet IDs from the VPC configuration. The VPC configuration uses an Azure backend with a storage account container. What should you configure in the application configuration to access the VPC outputs?

A terraform_remote_state data source with the same Azure backend configuration and the correct container and key for the VPC state

A variable that is manually set to the VPC ID and subnet IDs

A data source for azurerm_virtual_network that queries the Azure API for the VPC

An output block in the application configuration that imports the VPC outputs

You have two separate Terraform configurations: one for a shared database and one for an application that uses the database. The database configuration uses a local backend, and the application configuration is in a different directory. What is the best way to share the database endpoint with the application configuration?

Hardcode the database endpoint in the application configuration

Use a data source for the database resource type to query the cloud provider API

Use a terraform_workspace data source to access the database outputs

Use a terraform_remote_state data source with a local backend pointing to the database configuration's state file

HashiCorp Certified:Terraform Authoring and Operations Professional

Domain 3Objective 4

3d TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Part of the Develop collaborative Terraform workflows domain, which makes up ~16% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

Questions 11–15

11application · medium
Your team manages a shared Kubernetes cluster using a Terraform configuration. Another team needs the cluster endpoint and kubeconfig to deploy applications. The cluster configuration uses a GCS backend and exposes the endpoint and kubeconfig as outputs. What should the application team do to consume these outputs?
Select an answer first
12application · medium
Your organization has a central platform team that manages shared networking infrastructure in one Terraform configuration. Multiple application teams need to read the outputs from this configuration's remote state to deploy their workloads. However, application teams should not be able to modify the networking state or see sensitive values that are not exposed as outputs. What is the most appropriate access control strategy?
Select an answer first
13foundation · easy
When configuring a terraform_remote_state data source, which block is used to specify the backend and its configuration?
Select an answer first
14application · medium
Your company has two separate Terraform configurations: one for the production VPC and one for the application workloads. The application configuration needs the VPC ID and subnet IDs from the VPC configuration. The VPC configuration uses an Azure backend with a storage account container. What should you configure in the application configuration to access the VPC outputs?
Select an answer first
15application · medium
You have two separate Terraform configurations: one for a shared database and one for an application that uses the database. The database configuration uses a local backend, and the application configuration is in a different directory. What is the best way to share the database endpoint with the application configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

3d TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

When configuring a terraform_remote_state data source, which block is used to specify the backend and its configuration?

Keep studying — Develop collaborative Terraform workflows