TA-003 Question 96

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files? A. Delete the state file every time you run Terraform B. Store the state in an encrypted backend C. Edit your state file to scrub out the sensitive data D. Always store your secrets in a secrets.tfvars file.

• 2

  B. Store the state in an encrypted backend Explanation: Storing the Terraform state in an encrypted backend is the recommended approach to protect sensitive data. Terraform supports various backends, and using an encrypted backend ensures that the state file is encrypted at rest, adding an extra layer of security.

• Chose B1

  B is the answer.