VA-002-P Premium Files Updated Oct-2023 Practice Valid Exam Dumps Question
Practice with VA-002-P Dumps for HashiCorp Security Automation Certified Exam Questions & Answer
NEW QUESTION # 48
Which of the following represents a feature of Terraform Cloud that is NOT free to customers?
- A. workspace management
- B. private module registry
- C. roles and team management
- D. VCS integration
Answer: C
NEW QUESTION # 49
After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?
- A. the resource will be updated in place
- B. the resource will be created
- C. Terraform can't determine how to proceed due to a problem with the state file
- D. the resource will be destroyed and recreated
Answer: A
Explanation:
The prefix -/+ means that Terraform will destroy and recreate the resource, rather than updating it in-place. Some attributes and resources can be updated in-place and are shown with the ~ prefix.
NEW QUESTION # 50
Select the operating systems which are supported for a clustered Terraform Enterprise: (select four)
- A. Unix
- B. Ubuntu
- C. Red Hat
- D. CentOS
- E. Amazon Linux
Answer: B,C,D,E
Explanation:
Note: (5/27/20) This Question: has been recently updated to reflect documentation updates on the HashiCorp website. It seems they have removed the clustering-specific requirements and are now following the standard Enterprise operating system requirements.
Terraform Enterprise currently supports running under the following operating systems for a Clustered deployment:
- Ubuntu 16.04.3 - 16.04.5 / 18.04
- Red Hat Enterprise Linux 7.4 through 7.7
- CentOS 7.4 - 7.7
- Amazon Linux
- Oracle Linux
Clusters currently don't support other Linux variants.
https://www.terraform.io/docs/enterprise/before-installing/index.html#operating-system-requirements
NEW QUESTION # 51
True or False? By default, Terraform destroy will prompt for confirmation before proceeding.
- A. False
- B. True
Answer: B
Explanation:
Terraform destroy will always prompt for confirmation before executing unless passed the -auto-approve flag.
$ terraform destroy
Do you really want to destroy all resources?
Terraform will destroy all your managed infrastructure, as shown above.
There is no undo. Only 'yes' will be accepted to confirm.
Enter a value:
NEW QUESTION # 52
What feature of Terraform Cloud and/or Terraform Enterprise can you publish and maintain a set of custom modules which can be used within your organization?
- A. remote runs
- B. Terraform registry
- C. private module registry
- D. custom VCS integration
Answer: C
Explanation:
You can use modules from a private registry, like the one provided by Terraform Cloud. Private registry modules have source strings of the form <HOSTNAME>/<NAMESPACE>/<NAME>/<PROVIDER>. This is the same format as the public registry, but with an added hostname prefix.
NEW QUESTION # 53
Which of the following best describes a Terraform provider?
- A. a plugin that Terraform uses to translate the API interactions with the service or provider
- B. serves as a parameter for a Terraform module that allows a module to be customized
- C. a container for multiple resources that are used together
- D. describes an infrastructure object, such as a virtual network, compute instance, or other components
Answer: A
Explanation:
A provider is responsible for understanding API interactions and exposing resources. Providers generally are an IaaS (e.g., Alibaba Cloud, AWS, GCP, Microsoft Azure, OpenStack), PaaS (e.g., Heroku), or SaaS services (e.g., Terraform Cloud, DNSimple, CloudFlare).
NEW QUESTION # 54
A user has created a module called "my_test_module" and committed it to GitHub. Over time, several commits have been made with updates to the module, each tagged in GitHub with an incremental version number. Which of the following lines would be required in a module configuration block in terraform to select tagged version v1.0.4?
- A. source = "git::https://wpexpertsupport.com/my_test_module.git?ref=v1.0.4"
- B. source = "git::https://wpexpertsupport.com/my_test_module.git#tag=v1.0.4"
- C. source = "git::https://wpexpertsupport.com/my_test_module.git@tag=v1.0.4"
- D. source = "git::https://wpexpertsupport.com/my_test_module.git&ref=v1.0.4"
Answer: A
Explanation:
By default, Terraform will clone and use the default branch (referenced by HEAD) in the selected repository. You can override this using the ref argument:
module "vpc" {source = "git::https://wpexpertsupport.com/vpc.git?ref=v1.2.0"} The value of the ref argument can be any reference that would be accepted by the git checkout command, including branch and tag names.
https://www.terraform.io/docs/modules/sources.html#selecting-a-revision
NEW QUESTION # 55
After enabling the vault to autocomplete feature, you type vault and press the tab button, but nothing happens. Why doesn't vault display the available completions?
1. $ vault -autocomplete-install
2. $ vault
- A. you don't have the permissions to use autocomplete
- B. your SSH client doesn't support autocompletion
- C. the SSH session needs to be restarted upon installation
- D. you didn't use -force when enabling the feature
Answer: C
Explanation:
Be sure to restart your shell after installing autocompletion!
NEW QUESTION # 56
Terraform has detailed logs which can be enabled by setting the _________ environmental variable.
- A. TF_TRACE
- B. TF_LOG
- C. TF_INFO
- D. TF_DEBUG
Answer: B
Explanation:
Terraform has detailed logs that can be enabled by setting the TF_LOG environment variable to any value. This will cause detailed logs to appear on stderr.
You can set TF_LOG to one of the log levels TRACE, DEBUG, INFO, WARN, or ERROR to change the verbosity of the logs. TRACE is the most verbose and it is the default if TF_LOG is set to something other than a log level name.
https://www.terraform.io/docs/internals/debugging.html
NEW QUESTION # 57
In regards to deploying resources in multi-cloud environments, what are some of the benefits of using Terraform rather than a provider's native tooling? (select three)
- A. Terraform simplifies management and orchestration, helping operators build large-scale, multi-cloud infrastructure
- B. Terraform can manage cross-cloud dependencies
- C. Terraform is not cloud-agnostic and can be used to deploy resources across a single public cloud
- D. Terraform can help businesses deploy applications on multiple clouds and on-premises infrastructure
Answer: A,B,D
Explanation:
Terraform is a cloud-agnostic tool, and therefore isn't limited to a single cloud provider, such as AWS CloudFormation or Azure Resource Manager. Terraform supports all of the major cloud providers and allows IT organizations to focus on learning a single tool for deploying its infrastructure, regardless of what platform it's being deployed on.
NEW QUESTION # 58
What command is used to renew a token, if permitted?
- A. vault token update
- B. vault new <token-id>
- C. vault token renew
- D. vault operator token renew
- E. vault update token
- F. vault renew token <token-id>
Answer: C
Explanation:
In order to renew a token, a user can issue a vault token renew command to extend the TTL. The token can also be renewed using the API
NEW QUESTION # 59
Which of the following is considered a Terraform plugin?
- A. Terraform tooling
- B. Terraform language
- C. Terraform logic
- D. Terraform provider
Answer: D
Explanation:
Terraform is built on a plugin-based architecture. All providers and provisioners that are used in Terraform configurations are plugins, even the core types such as AWS and Heroku. Users of Terraform are able to write new plugins in order to support new functionality in Terraform.
NEW QUESTION # 60
What Terraform feature is shown in the example below?
1. resource "aws_security_group" "example" {
2. name = "sg-app-web-01"
3. dynamic "ingress" {
4. for_each = var.service_ports
5. content {
6. from_port = ingress.value
7. to_port = ingress.value
8. protocol = "tcp"
9. }
10. }
11. }
- A. data source
- B. local values
- C. dynamic block
- D. conditional expression
Answer: C
Explanation:
You can dynamically construct repeatable nested blocks like ingress using a special dynamic block type, which is supported inside resource, data, provider, and provisioner blocks
NEW QUESTION # 61
What is the purpose of using the local-exec provisioner? (select two)
- A. ensures that the resource is only executed in the local infrastructure where Terraform is deployed
- B. to invoke a local executable
- C. to execute one or more commands on the machine running Terraform
- D. executes a command on the resource to invoke an update to the Terraform state
Answer: B,C
NEW QUESTION # 62
Why might a user opt to include the following snippet in their configuration file?
1. terraform {
2. required_version = ">= 0.12"
3. }
- A. versions before Terraform 0.12 were not approved by HashiCorp to be used in production
- B. this ensures that all Terraform providers are above a certain version to match the application being deployed
- C. the user wants to ensure that the application being deployed is a minimum version of 0.12
- D. Terraform 0.12 introduced substantial changes to the syntax used to write Terraform configuration
Answer: D
Explanation:
You can use required_version to ensure that a user deploying infrastructure is using Terraform 0.12 or greater, due to the vast number of changes that were introduced. As a result, many previously written configurations had to be converted or rewritten.
NEW QUESTION # 63
You've deployed Vault in your production environment and are curious to understand metrics on your Vault cluster, such as the number of writes to the backend, the status of WALs, and the seal status. What feature would you configure in order to view these metrics?
- A. audit device
- B. enable logs for each individual secrets engines
- C. telemetry
- D. nothing to configure, these are available in the Vault log found on the OS
Answer: C
Explanation:
The Vault server process collects various runtime metrics about the performance of different libraries and subsystems. These metrics are aggregated on a ten-second interval and are retained for one minute. This telemetry information can be used for debugging or otherwise getting a better view of what Vault is doing.
Telemetry information can be streamed directly from Vault to a range of metrics aggregation solutions as described in the telemetry Stanza documentation.
Reference link:- https://www.vaultproject.io/docs/internals/telemetry
NEW QUESTION # 64
Which of the following secrets engine can generate dynamic credentials? (select three)
- A. AWS
- B. key/value
- C. Azure
- D. database
- E. Transit
Answer: A,C,D
Explanation:
Vault has many secrets engines that can generate dynamic credentials, including AWS, Azure, and database secrets engines. The key/value secret engine is used to store data, and the transit secret engine is used to encrypt data.
NEW QUESTION # 65
When a primary Vault cluster fails, Vault will automatically promote a secondary cluster to ensure maximum uptime.
- A. False
- B. True
Answer: A
Explanation:
Vault secondary clusters must be manually promoted to a primary.
NEW QUESTION # 66
What is the purpose of using the local-exec provisioner? (select two)
- A. ensures that the resource is only executed in the local infrastructure where Terraform is deployed
- B. to invoke a local executable
- C. to execute one or more commands on the machine running Terraform
- D. executes a command on the resource to invoke an update to the Terraform state
Answer: B,C
Explanation:
The local-exec provisioner invokes a local executable after a resource is created. This invokes a process on the machine running Terraform, not on the resource.
Note that even though the resource will be fully created when the provisioner is run, there is no guarantee that it will be in an operable state - for example, system services such as sshd may not be started yet on compute resources.
NEW QUESTION # 67
After decrypting data using the transit secrets engine, the plaintext output does not match the plaintext credit card number that you encrypted. Which of the following answers provides a solution?
1. $ vault write transit/decrypt/creditcard\ ciphertext="vault:v1:cZNHVx+sxdMErXRSuDa1q/pz49fXTn1PScKfhf+PIZPvy8xKfkytpwKcbC0fF2U=" \
2.
3. Key Value
4. --- -----
5. plaintext Y3JlZGl0LWNhcmQtbnVtYmVyCg==
- A. The resulting plaintext data is base64-encoded. To reveal the original plaintext, use the base64 --decode command.
- B. The data is corrupted. Execute the encryption command again using a different data key
- C. Vault is sealed, therefore the data cannot be decrypted. Unseal Vault to properly decrypt the data
- D. the user doesn't have permission to decrypt the data, therefore Vault returns false data so as not to reveal if the data was actually encrypted by Vault
Answer: A
Explanation:
All plaintext data must be base64-encoded. The reason for this requirement is that Vault does not require that the plaintext is "text". It could be a binary file such as a PDF or image. The easiest safe transport mechanism for this data as part of a JSON payload is to base64-encode it.
Reference link:- https://learn.hashicorp.com/vault/encryption-as-a-service/eaas-transit
NEW QUESTION # 68
Which of the following cloud providers are not supported by Vault secrets engines?
- A. Azure
- B. Oracle
- C. AWS
- D. GCP
- E. AliCloud
Answer: B
Explanation:
Vault supports AWS, Azure, Google Cloud, and Alibaba Cloud out of the box for secrets engines
NEW QUESTION # 69
......
REAL VA-002-P Exam Questions With 100% Refund Guarantee : https://protechtraining.actualtestsit.com/HashiCorp/VA-002-P-exam-prep-dumps.html