6d TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a CI/CD workflow, when are Sentinel policies typically evaluated?

   • AAfter the apply step, to verify compliance
   • BOnly when a pull request is created
   • CDuring the plan step, before the apply step
   • DDuring the build phase, before Terraform runs
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does policy as code integrate with version control workflows in HCP Terraform?

   • APolicies are written in the Terraform configuration files and applied during the plan
   • BPolicies are only applied when manually triggered by a user
   • CPolicies are defined in the same repository as Terraform configurations and are automatically fetched by HCP Terraform
   • DPolicies are stored in a separate repository and manually uploaded to HCP Terraform
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   At which point in the Terraform run lifecycle are Sentinel policies evaluated?

   • ABefore the plan step, to validate the configuration syntax
   • BDuring the plan step, before the apply step
   • COnly when a workspace is created, not during runs
   • DAfter the apply step, to verify the final state
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of audit logging in HCP Terraform?

   • ATo store Terraform state files for recovery
   • BTo provide real-time metrics on infrastructure performance
   • CTo record user actions and API calls for security and compliance
   • DTo automatically fix policy violations
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A developer triggers a plan on a workspace that has a hard-mandatory Sentinel policy set attached. The plan completes successfully, but the run is shown as 'planned and finished' with a policy check failure. What is the immediate next step in the run lifecycle, and what is the outcome?

   • AThe run proceeds to apply because the plan succeeded; the policy failure is only logged for audit.
   • BThe run is placed in a 'needs confirmation' state, and a user must manually confirm to proceed.
   • CThe run is automatically destroyed and rolled back to the last known good state.
   • DThe run is blocked; the apply phase will not start until the policy passes or is overridden.
   Reveal Solution Discussion Select an answer first