Your manager has instructed you to start using terraform for your day-to-day operations, but your security team is concerned about the terraform state files. They have heard it contains confidential information, and are worried that it will not be securely protected. What should be your response to the security team in this regard?

• A.Inform the security team that using terraform state is optional . There are ways to avoid it , and you will do the same.
• B.Ensure that the state is managed in a remote backend , preferably an enterprise grade state management system like Terraform Cloud.
• C.Mask the confidential entries in the terraform state file , using Vault Enterprise, another Hashicorp product , while keeping it locally.
• D.Keep the state file locally on each developer machine , and ensure that there is a local protection software like KeyPass protecting it.

Comment: *

Name: *

Email: *

Verification: *

I78
correct?

• A.When using local state, the state file is stored in plain-text.
• B.The state file is always encrypted at rest.
• C.Storing state remotely can provide better security.
• D.Using the mask feature, you can instruct Terraform to mask sensitive data in the state file.
• E.The Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access.
• F.Terraform Cloud always encrypts state at rest.

Comment: *

Name: *

Email: *

Verification: *

You have recently started a new job at a retailer as an engineer. As part of this new role, you have been tasked with evaluating multiple outages that occurred during peak shopping time during the holiday season. Your investigation found that the team is manually deploying new compute instances and configuring each compute instance manually. This has led to inconsistent configuration between each compute instance.
How would you solve this using infrastructure as code?

• A.Replace the compute instance type with a larger version to reduce the number of required deployments
• B.Implement a provisioning pipeline that deploys infrastructure configurations committed to your version control system following code reviews
• C.Implement a ticketing workflow that makes engineers submit a ticket before manually provisioning and configuring a resource
• D.Implement a checklist that engineers can follow when configuring compute instances

Comment: *

Name: *

Email: *

Verification: *

In Terraform Enterprise, a workspace can be mapped to how many VCS repos?

• A.5
• B.2
• C.3
• D.1

Comment: *

Name: *

Email: *

Verification: *

Dawn has created the below child module. Without changing the module, can she override the instance_type from t2.micro to t2.large form her code while calling this module?
1. resource "aws_instance" "myec2"
2. {
3. ami = "ami-082b5a644766e0e6f"
4. instance_type = "t2.micro
5. }

• A.YES
• B.No

Comment: *

Name: *

Email: *

Verification: *