HashiCorp Certified: Terraform Associate (003) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  In Terraform, when you define variables or outputs, and use an argument as a description, that information becomes part of the declarative configuration. The Terraform state file keeps a record of the current state of your infrastructure along with some important metadata, including descriptions.

• Chose B5

  It is generally considered insecure to store secret data, such as passwords, API keys, and other sensitive information, in the same version control repository as your Terraform configuration. This is because version control repositories are often publicly accessible, and if sensitive information is stored in the repository it can be easily accessed by unauthorized individuals. Additionally, version control repositories typically have a history of all changes made to files, so even if sensitive information is deleted at a later point, it can still be retrieved from the repository history. To properly secure secret data, it is recommended to store it in a secure and encrypted format, such as in a secure vault or by using a tool specifically designed for storing secrets.

• 3

  You should store secrets in vaults. And retrieve the secrets when used in your terraform application. So the answer is B false.