Terraform vs Deployment Manager decision in GCP - Practice Questions

Challenge - 5 Problems

🧠 Conceptual

intermediate

Choosing Infrastructure as Code Tool for Multi-Cloud

You want to manage infrastructure across Google Cloud and AWS with a single tool. Which option best supports this goal?

A Use Terraform because it supports multiple cloud providers including Google Cloud and AWS.

B Use Deployment Manager because it is native to Google Cloud and supports AWS as well.

C Use Deployment Manager because it has built-in multi-cloud orchestration features.

D Use Terraform only for AWS and Deployment Manager only for Google Cloud, managing them separately.

💡 Hint

Think about which tool supports multiple clouds natively.

Terraform supports many cloud providers including Google Cloud and AWS, making it suitable for multi-cloud management. Deployment Manager is specific to Google Cloud only.

❓ Architecture

intermediate

Infrastructure State Management in Terraform vs Deployment Manager

You want to keep track of your infrastructure changes and state securely. Which tool automatically manages state remotely by default?

A Deployment Manager, which stores state files automatically in Google Cloud Storage.

B Terraform, which supports remote state storage in Google Cloud Storage or other backends.

C Terraform, which stores state only locally and requires manual backup.

D Deployment Manager, which does not track state and requires manual state management.

💡 Hint

Consider how each tool handles the record of deployed resources.

Terraform uses state files to track infrastructure and supports remote backends like Google Cloud Storage for secure state management. Deployment Manager does not use state files in the same way.

❓ security

advanced

Managing Secrets in Terraform vs Deployment Manager

You need to securely manage sensitive data like API keys in your infrastructure code. Which option correctly describes the best practice?

A Use Deployment Manager with inline secrets encrypted by default.

B Store secrets in Terraform variables files checked into version control.

C Use Terraform with integration to Google Secret Manager to reference secrets without hardcoding them.

D Embed secrets directly in Deployment Manager YAML files for simplicity.

💡 Hint

Think about how to avoid exposing secrets in code repositories.

Terraform can integrate with Google Secret Manager to securely reference secrets without exposing them in code. Deployment Manager does not provide built-in secret management and embedding secrets in YAML is insecure.

✅ Best Practice

advanced

Modular Infrastructure Code in Terraform vs Deployment Manager

You want to reuse infrastructure code components across projects. Which tool provides better support for modular and reusable code?

A Terraform, which supports modules to package and reuse infrastructure code easily.

B Deployment Manager, which uses templates but lacks a strong module system.

C Deployment Manager, which encourages copy-pasting YAML files for reuse.

D Terraform, which requires duplicating code for each project without modules.

💡 Hint

Consider which tool has built-in features for code reuse and sharing.

Terraform has a robust module system that allows packaging infrastructure code for reuse and sharing. Deployment Manager uses templates but its reuse capabilities are limited compared to Terraform modules.

❓ service_behavior

expert

Handling Drift Detection in Terraform vs Deployment Manager

You want to detect when infrastructure changes outside your code happen (drift). Which tool provides built-in drift detection and how does it behave?

A Deployment Manager automatically detects drift and reverts changes without user intervention.

B Deployment Manager requires manual scripts to detect drift as it has no built-in support.

C Terraform does not detect drift and blindly applies changes without comparison.

D Terraform detects drift during plan/apply by comparing real infrastructure state with the state file and shows differences.

💡 Hint

Think about how each tool compares actual resources to declared code.

Terraform compares the current infrastructure state with the saved state file during planning and alerts users to drift. Deployment Manager lacks automatic drift detection and requires manual checks.