TA-002-P Exam Questions and Answers | Exam-Dumps (Page: 15)

QUESTION: 71

Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files?

Delete the state file every time you run Terraform
Store the state in an encrypted backend
Edit your state file to scrub out the sensitive data
Always store your secrets in a secrets.tfvars file.

Answer(s): B

Reveal Solution Next Question

QUESTION: 72

In contrast to Terraform Open Source, when working with Terraform Enterprise and Cloud Workspaces, conceptually you could think about them as completely separate working directories.

True
False

Answer(s): A

Explanation:

"When run locally, Terraform manages each collection of infrastructure with a persistent working directory, which contains a configuration, state data, and variables. Since Terraform CLI uses content from the directory it runs in, you can organize infrastructure resources into meaningful groups by keeping their configurations in separate directories.

Reference:

https://www.terraform.io/cloud-docs/workspaces

Reveal Solution Next Question

QUESTION: 73

You want to know from which paths Terraform is loading providers referenced in your Terraform configuration (files). You need to enable debug messages to find this out.
Which of the following would achieve this?

Set the environment variable TF_LOG=TRACE
Set verbose logging for each provider in your Terraform configuration
Set the environment variable TF_VAR_log=TRACE
Set the environment variable TF_LOG_PATH

Answer(s): A

Explanation:

Although this will only output to stderr and if you need to review log file you will need to include TF_LOG_PATH=pathtofile

Reference:

https://www.terraform.io/internals/debugging

Reveal Solution Next Question

QUESTION: 74

How is terraform import run?

As a part of terraform init
As a part of terraform plan
As a part of terraform refresh
By an explicit call
All of the above

Answer(s): D

Explanation:

"The current implementation of Terraform import can only import resources into the state. It does not generate configuration. A future version of Terraform will also generate configuration. Because of this, prior to running terraform import it is necessary to write manually a resource configuration block for the resource, to which the imported object will be mapped. While this may seem tedious, it still gives Terraform users an avenue for importing existing resources."

Reference:

https://www.terraform.io/cli/import/usage

Reveal Solution Next Question

QUESTION: 75

You have a simple Terraform configuration containing one virtual machine (VM) in a cloud provider. You run terraform apply and the VM is created successfully.
What will happen if you delete the VM using the cloud provider console, and run terraform apply again without changing any Terraform code?

Terraform will remove the VM from state file
Terraform will report an error
Terraform will not make any changes
Terraform will recreate the VM

Answer(s): D

Reveal Solution Next Question

HashiCorp TA-002-P Exam (page: 15) HashiCorp Certified: Terraform Associate Updated on: 15-Feb-2026

QUESTION: 71

QUESTION: 72

Explanation:

Reference:

QUESTION: 73

Explanation:

Reference:

QUESTION: 74

Explanation:

Reference:

QUESTION: 75

HashiCorp TA-002-P Exam (page: 15)
HashiCorp Certified: Terraform Associate
Updated on: 15-Feb-2026