Terraform vs CloudFormation vs Pulumi - Practice Questions

Challenge - 5 Problems

🧠 Conceptual

intermediate

Key Difference in State Management

Which tool manages infrastructure state locally by default, requiring explicit remote backend configuration for team collaboration?

A Terraform

B CloudFormation

C Pulumi

D All manage state remotely by default

💡 Hint

Think about which tool uses a state file that can be stored locally or remotely.

Terraform stores state locally by default in a file called terraform.tfstate. Remote backends must be configured for team use. CloudFormation and Pulumi manage state differently.

❓ Architecture

intermediate

Infrastructure as Code Language Support

Which tool allows you to write infrastructure code using general-purpose programming languages like TypeScript, Python, or Go?

A Terraform

B None support general-purpose languages

C CloudFormation

D Pulumi

💡 Hint

Consider which tool integrates with common programming languages for infrastructure definitions.

Pulumi supports writing infrastructure code in languages like TypeScript, Python, Go, and C#. Terraform and CloudFormation use domain-specific languages.

❓ service_behavior

advanced

CloudFormation Stack Update Behavior

What happens if you update a CloudFormation stack with a template that removes a resource without specifying a deletion policy?

A The resource remains unchanged in the cloud environment

B The resource is deleted from the cloud environment

C CloudFormation throws an error and refuses the update

D The resource is backed up automatically before deletion

💡 Hint

Think about default behavior when a resource is removed from the template.

By default, CloudFormation deletes resources removed from the template during stack update unless a DeletionPolicy is set to retain or snapshot.

❓ security

advanced

Secret Management in Terraform vs Pulumi

Which statement correctly describes secret handling differences between Terraform and Pulumi?

A Terraform encrypts secrets in state files by default, Pulumi stores secrets in plain text

B Both Terraform and Pulumi store secrets unencrypted by default

C Pulumi encrypts secrets in its state backend by default, Terraform requires manual encryption setup

D Neither Terraform nor Pulumi support secret management

💡 Hint

Consider which tool has built-in secret encryption in its backend.

Pulumi encrypts secrets automatically in its backend. Terraform requires configuring remote backends with encryption or using external secret managers.

✅ Best Practice

expert

Choosing the Right Tool for Multi-Cloud Infrastructure

You need to manage infrastructure across AWS, Azure, and Google Cloud with a single codebase using familiar programming languages. Which tool is best suited for this requirement?

A Pulumi

B Terraform

C CloudFormation

D Use separate CloudFormation templates for each cloud

💡 Hint

Think about multi-cloud support and language flexibility.

Pulumi supports multiple clouds and lets you write infrastructure code in general-purpose languages, making it ideal for multi-cloud with one codebase. Terraform supports multi-cloud but uses its own language. CloudFormation is AWS-only.