Free Cram & Latest Exams Dumps

Q20. Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
1. terraform {
2. required_providers {
3. aws = “~> 1.0”
4. }
5. }

Q21. Which of the following actions are performed during a terraform init? (select three)

Q22. By default, the max TTL for a token is how many days?

Q23. What command is used to renew a token, if permitted?

Q24. Terraform has detailed logs which can be enabled by setting the _________ environmental variable.

Q25. Choose the correct answer which fixes the syntax of the following Terraform code:

Q26. You’ve deployed Vault in your production environment and are curious to understand metrics on your Vault cluster, such as the number of writes to the backend, the status of WALs, and the seal status. What feature would you configure in order to view these metrics?

Q27. From the code below, identify the implicit dependency:
1. resource “aws_eip” “public_ip” {
2. vpc = true
3. instance = aws_instance.web_server.id
4. }
5. resource “aws_instance” “web_server” {
6. ami = “ami-2757f631”
7. instance_type = “t2.micro”
8. depends_on = [aws_s3_bucket.company_data]
9. }

Q28. Which TCP port does Vault replication use?

Q29. You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource’s current state, what must you do in order to prepare to manage these resources using Terraform?

Q30. A user runs terraform init on their RHEL based server and per the output, two provider plugins are downloaded:
1. $ terraform init
2.
3. Initializing the backend…
4.
5. Initializing provider plugins…
6. – Checking for available provider plugins…
7. – Downloading plugin for provider “aws” (hashicorp/aws) 2.44.0…
8. – Downloading plugin for provider “random” (hashicorp/random) 2.2.1…
9.
10. Terraform has been successfully initialized!
Where are these plugins downloaded to?

Q31. What Terraform feature is shown in the example below?
1. resource “aws_security_group” “example” {
2. name = “sg-app-web-01”
3. dynamic “ingress” {
4. for_each = var.service_ports
5. content {
6. from_port = ingress.value
7. to_port = ingress.value
8. protocol = “tcp”
9. }
10. }
11. }

Q32. You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext=”1234 5678 9101 1121″
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4

Q33. What is the purpose of using the local-exec provisioner? (select two)

Q34. Which of the following represents a feature of Terraform Cloud that is NOT free to customers?

Q35. From the answers below, select the advantages of using Infrastructure as Code. (select four)

Q36. What is the result of the following terraform function call?
zipmap([“a”, “b”], [1, 2])

Q37. Which of the following terraform subcommands could be used to remove the lock on the state for the current configuration?

Q38. A user has logged into the Vault user interface but cannot browse to a secret located at kv/applications/app3, however, the policy the user is bound by permits read permission to the secret.
Because of the read permission, the user should be able to read the secret in the Vault UI.

Q39. Beyond encryption and decryption of data, which of the following is not a function of the Vault transit secrets engine?

Q40. Complete the following sentence:
For the local state, the workspaces are stored directly in a…

Q41. Which of the following is not a valid Terraform string function?

Q42. What does the following API request return?
1. $ curl
2. –header “X-Vault-Token: …”
3. –request POST
4. –data @payload.json
5. http://127.0.0.1:8200/v1/sys/tools/random/164