Data source vs resource difference in Terraform - Practice Questions

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Terraform Data Sources

In Terraform, what is the primary purpose of a data source?

A To delete existing infrastructure resources

B To create new infrastructure resources managed by Terraform

C To fetch and use information about existing infrastructure outside Terraform's control

D To define variables for Terraform configurations

💡 Hint

Think about whether data sources create or just read information.

Data sources in Terraform are used to read or fetch information about existing infrastructure that Terraform does not manage directly. They do not create or modify resources.

🧠 Conceptual

intermediate

Terraform Resource Behavior

Which statement best describes a resource in Terraform?

A It is a temporary placeholder with no real effect

B It only reads information from existing infrastructure

C It is used to store configuration variables

D It represents infrastructure components that Terraform creates and manages

💡 Hint

Resources are the main building blocks Terraform controls.

Resources in Terraform define infrastructure components that Terraform creates, updates, and deletes as part of managing your infrastructure.

❓ Architecture

advanced

Choosing Between Data Source and Resource

You want to use an existing AWS VPC ID in your Terraform configuration without creating a new VPC. Which is the best approach?

A Use a <code>resource</code> block to create a new VPC with the existing ID

B Use a <code>data</code> block to fetch the existing VPC ID

C Use a variable to hardcode the VPC ID without fetching it

D Use a <code>resource</code> block to import the existing VPC

💡 Hint

Think about how to reference existing infrastructure without creating it.

Using a data source allows Terraform to read the existing VPC ID without managing or creating it. Creating a resource would attempt to create a new VPC.

❓ service_behavior

advanced

Terraform Resource Lifecycle Behavior

What happens when you remove a resource block from your Terraform configuration and run terraform apply?

A Terraform deletes the corresponding infrastructure resource

B Terraform ignores the resource and leaves it unchanged

C Terraform converts the resource into a data source

D Terraform throws an error and stops

💡 Hint

Consider how Terraform manages resources it no longer sees in the config.

When a resource block is removed, Terraform plans to delete the actual infrastructure resource to match the configuration state.

❓ security

expert

Security Implications of Using Data Sources

Which security risk is most relevant when using Terraform data sources to fetch sensitive information like passwords or keys?

A Sensitive data may be exposed in Terraform state files if not encrypted

B Data sources automatically encrypt sensitive data in logs

C Using data sources disables Terraform's access controls

D Data sources prevent any sensitive data from being stored locally

💡 Hint

Think about where Terraform stores fetched data and how it handles sensitive info.

Terraform stores all fetched data, including sensitive info from data sources, in its state file. If the state file is not secured or encrypted, this can expose secrets.