Which of the following is a valid method for authenticating a Terraform provider to a cloud service?

Storing credentials in the Terraform state file

Hardcoding the access key in the provider block

Using a shared configuration file that is not referenced by the provider

Using environment variables recognized by the provider

A team manages Terraform configurations for multiple AWS accounts. Developers run Terraform locally, while CI/CD pipelines run the same code. The team wants to avoid hardcoding credentials and ensure that local developers use their personal IAM roles while CI/CD uses a service role. Which approach should they use?

Create separate Terraform workspaces and assign credentials in each workspace

Use a shared credentials file with a single default profile

Use environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) set differently in local and CI/CD environments

Set static access keys in the provider block for each account

Which of the following is a valid way to configure provider credentials in a Terraform provider block?

Setting the `credentials` argument to a file path in the provider block

Setting the `token` argument to a static value in the provider block

Setting the `access_key` and `secret_key` arguments directly in the provider block

Using the `auth` argument with a JSON string in the provider block

A team manages Terraform configurations for multiple AWS accounts. They use Terraform workspaces to separate environments. They want to use different IAM roles for each workspace, but they also want to avoid duplicating the provider configuration. What is the best way to achieve this?

Use a single provider block with `assume_role` configured to use a role ARN that is selected based on the workspace name

Create an alias for each provider and use `terraform workspace` to select the alias

Use environment variables to set the role ARN, but this requires manual changes per environment

Use separate Terraform configurations for each environment

A Terraform configuration uses the Google Cloud provider. The developer wants to authenticate using a service account key file stored locally. Which authentication method should they use?

Use the `GOOGLE_CREDENTIALS` environment variable with the contents of the key file

Set the `GOOGLE_APPLICATION_CREDENTIALS` environment variable to the path of the key file

Use the `gcloud` CLI to set the active account

Place the key file in the same directory as the Terraform configuration

HashiCorp Certified:Terraform Authoring and Operations Professional

Domain 5Objective 3

5c TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Part of the Configure and use Terraform providers domain, which makes up ~16% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

4concepts

Questions 6–10

6foundation · easy
Which of the following is a valid method for authenticating a Terraform provider to a cloud service?
Select an answer first
7application · medium
A team manages Terraform configurations for multiple AWS accounts. Developers run Terraform locally, while CI/CD pipelines run the same code. The team wants to avoid hardcoding credentials and ensure that local developers use their personal IAM roles while CI/CD uses a service role. Which approach should they use?
Select an answer first
8foundation · easy
Which of the following is a valid way to configure provider credentials in a Terraform provider block?
Select an answer first
9expert · hard
A team manages Terraform configurations for multiple AWS accounts. They use Terraform workspaces to separate environments. They want to use different IAM roles for each workspace, but they also want to avoid duplicating the provider configuration. What is the best way to achieve this?
Select an answer first
10application · medium
A Terraform configuration uses the Google Cloud provider. The developer wants to authenticate using a service account key file stored locally. Which authentication method should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.