- (Exam Topic 2)
The Terraform language does not support user-defined functions, and so only the functions built in to the language are available for use.

1. A. False
2. B. True

Correct Answer: B
https://www.terraform.io/docs/configuration/functions.html

- (Exam Topic 4)
Why does this backend configuration not follow best practices?

1. A. You should not store credentials in Terraform Configuration
2. B. You should use the local enhanced storage backend whenever possible
3. C. An alias meta-argument should be included in backend blocks whenever possible
4. D. The backend configuration should contain multiple credentials so that more than one user can execute terraform plan and terraform apply

Correct Answer: A

- (Exam Topic 2)
How can you ensure that the engineering team who has access to git repo will not create any non-compliant resources that might lead to a security audit failure in future. your team is using Hashicorp Terraform Enterprise Edition.

1. A. Use Terraform OSS Sentinel Lite version , which will save cost , since there is no charge for OSS , but it can still check for most non-compliant rules using Policy-As-Code.
2. B. Implement a review process where every code will be reviewed before merging to the master branch.
3. C. Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and writePolicy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.
4. D. Create a design /security document (in PDF) and share to the team , and ask them to always follow that document , and never deviate from it.

Correct Answer: C
https://www.terraform.io/docs/cloud/sentinel/index.html

- (Exam Topic 2)
You have created a custom variable definition file testing.tfvars. How will you use it for provisioning infrastructure?

1. A. terraform apply -var-state-file ="testing.tfvars"
2. B. terraform plan -var-file="testing.tfvar"
3. C. terraform apply -var-file="testing.tfvars"
4. D. terraform apply var-file="testing.tfvars"

Correct Answer: C
https://www.terraform.io/docs/configuration/variables.html

- (Exam Topic 4)
Which of the following locations can Terraform use as a private source for modules? (Choose two.)

1. A. Internally hosted SCM (Source Control Manager) platform
2. B. Public Terraform Module Registry
3. C. Private repository on GitHub
4. D. Public repository on GitHub

Correct Answer: AC