Which flag would you add to terraform plan to save the execution plan to a file?
Type your answer in the field provided. The text field is not case-sensitive and all variations of the correct answer are accepted.

Comment: *

Name: *

Email: *

Verification: *

A colleague has informed you that a new version of a Terraform module that your team hosts on an Amazon S3 bucket is broken. The Amazon S3 bucket has versioning enabled. Your colleague tells you to make sure you are not using the latest version in your configuration. You have the following configuration block in your code that refers to the module:
module "infranet" { source = "s3::https://s3-us-west-2.amazonaws.com/infrabucket/infra_module.zip"} What is the best way to ensure that you are not using the latest version of the module?

• A.Add a module version constraint in your configuration's backend block and specify a previous version.
• B.Add a version key to the module configuration and specify a previous version.
• C.Delete the latest version of the module in S3 to rollback to the previous version.
• D.Add a version property to the module in Terraform's state file and specify a previous version.

Comment: *

Name: *

Email: *

Verification: *

Select the most accurate statement to describe the Terraform language from the following list.

• A.Terraform is an immutable, declarative, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally JSON.
• B.Terraform is a mutable, declarative, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.
• C.Terraform is an immutable, procedural, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.
• D.Terraform is a mutable, procedural, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally YAML.

Comment: *

Name: *

Email: *

Verification: *

How can you ensure that the engineering team who has access to git repo will not create any non-compliant resources that might lead to a security audit failure in future. your team is using Hashicorp Terraform Enterprise Edition.

• A.Use Terraform OSS Sentinel Lite version , which will save cost , since there is no charge for OSS , but it can still check for most non-compliant rules using Policy-As-Code.
• B.Implement a review process where every code will be reviewed before merging to the master branch.
• C.Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and write Policy-As-Code rules that will check for non-compliant resource provisioning , and prevent/report them.
• D.Create a design /security document (in PDF) and share to the team , and ask them to always follow that document , and never deviate from it.

Comment: *

Name: *

Email: *

Verification: *

If a module uses a local variable, you can expose that value with a terraform output.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *