TA-002-P Exam Questions and Answers | Exam-Dumps (Page: 16)

QUESTION: 76

Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?

Defined in Environment variables
Inside the backend block within the Terraform configuration
Defined in a connection configuration outside of Terraform
None of above

Answer(s): A

Explanation:

Warning: We recommend using environment variables to supply credentials and other sensitive data. If you use -backend-config or hardcode these values directly in your configuration, Terraform will include these values in both the .terraform subdirectory and in plan files. This can leak sensitive credentials.

Reference:

https://www.terraform.io/language/settings/backends/configuration#credentials-and-sensitive-data

Reveal Solution Next Question

QUESTION: 77

Your DevOps team is currently using the local backend for your Terraform configuration. You would like to move to a remote backend to begin storing the state file in a central location.
Which of the following backends would not work?

Amazon S3
Artifactory
Git
Terraform Cloud

Answer(s): C

Reference:

https://www.terraform.io/cdktf/concepts/remote-backends
https://docs.gitlab.com/ee/user/infrastructure/iac/terraform_state.html

Reveal Solution Next Question

QUESTION: 78

Which backend does the Terraform CLI use by default?

Terraform Cloud
Consul
Remote
Local

Answer(s): D

Explanation:

"By default, Terraform implicitly uses a backend called local to store state as a local file on disk. Every other backend stores state in a remote service of some kind, which allows multiple people to access it. Accessing state in a remote service generally requires some kind of access credentials, since state data contains extremely sensitive information." https://www.terraform.io/language/settings/backends

Reveal Solution Next Question

QUESTION: 79

When you initialize Terraform, where does it cache modules from the public Terraform Module Registry?

On disk in the /tmp directory
In memory
On disk in the .terraform sub-directory
They are not cached

Answer(s): C

Explanation:

"A hidden .terraform directory, which Terraform uses to manage cached provider plugins and modules, record which workspace is currently active, and record the last known backend configuration in case it needs to migrate state on the next run. This directory is automatically managed by Terraform, and is created during initialization." https://www.terraform.io/cli/init

Reveal Solution Next Question

QUESTION: 80

You write a new Terraform configuration and immediately run terraform apply in the CLI using the local backend.
Why will the apply fail?

Terraform needs you to format your code according to best practices first
Terraform needs to install the necessary plugins first
The Terraform CLI needs you to log into Terraform cloud first
Terraform requires you to manually run terraform plan first

Answer(s): B

Reveal Solution Next Question

HashiCorp TA-002-P Exam (page: 16) HashiCorp Certified: Terraform Associate Updated on: 25-Dec-2025

QUESTION: 76

Explanation:

Reference:

QUESTION: 77

Reference:

QUESTION: 78

Explanation:

QUESTION: 79

Explanation:

QUESTION: 80

HashiCorp TA-002-P Exam (page: 16)
HashiCorp Certified: Terraform Associate
Updated on: 25-Dec-2025