State disaster recovery in Terraform - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Terraform State Backup

Which of the following best describes the purpose of backing up Terraform state files?

A To automatically update Terraform modules to their latest versions.

B To speed up Terraform plan operations by caching previous runs.

C To store user credentials securely for Terraform providers.

D To ensure infrastructure can be restored or recreated accurately after accidental deletion or corruption.

💡 Hint

Think about what happens if the state file is lost or damaged.

Backing up Terraform state files is critical because they hold the current infrastructure mapping. Losing them can cause Terraform to lose track of resources, leading to potential duplication or deletion.

❓ Configuration

intermediate

Configuring Remote State with Versioning

Which Terraform backend configuration snippet correctly enables remote state storage with versioning in AWS S3 for disaster recovery?

Terraform

terraform {
  backend "s3" {
    bucket = "my-terraform-state"
    key    = "prod/terraform.tfstate"
    region = "us-east-1"
    # Missing versioning configuration
  }
}

A Enable versioning on the S3 bucket outside Terraform; no config needed in backend block.

B Add 'versioning { enabled = true }' inside the backend block.

C Add 'enable_versioning = true' inside the backend block.

D Add 'versioning = true' inside the backend block.

💡 Hint

Think about how S3 versioning is managed.

S3 bucket versioning is a property set on the bucket itself, not configured inside Terraform backend. Terraform backend config does not support versioning flags.

❓ Architecture

advanced

Designing a Disaster Recovery Plan for Terraform State

You manage infrastructure with Terraform using a remote backend in AWS S3. Which architecture best supports disaster recovery for your Terraform state?

A Store state in a single S3 bucket with versioning enabled and replicate the bucket to another AWS region.

B Store state locally on developer machines and back up manually to external drives.

C Use Terraform Cloud remote backend without any additional backups or replication.

D Store state in an S3 bucket without versioning but enable lifecycle rules to delete old states.

💡 Hint

Consider geographic redundancy and automatic recovery options.

Enabling versioning and cross-region replication on S3 buckets ensures state files are protected against accidental deletion and regional failures, supporting disaster recovery.

❓ security

advanced

Securing Terraform State for Disaster Recovery

Which practice improves security and disaster recovery readiness for Terraform state stored in AWS S3?

A Disable encryption to improve performance and rely on network security only.

B Make the S3 bucket public for easy access and enable versioning.

C Enable server-side encryption with AWS KMS and restrict bucket access with IAM policies.

D Store state files in plaintext on an EC2 instance volume.

💡 Hint

Think about protecting sensitive data and controlling access.

Encrypting state files and restricting access ensures sensitive information is protected and reduces risk of unauthorized changes or data loss.

❓ service_behavior

expert

Terraform State Recovery Behavior After State File Corruption

After accidental corruption of the Terraform state file stored in a versioned S3 bucket, what is the expected behavior when you run terraform apply?

A Terraform will automatically detect and fix the corrupted state file without user intervention.

B Terraform will fail to apply changes due to state mismatch unless the corrupted state is restored from a previous version.

C Terraform will ignore the corrupted state and create all resources from scratch.

D Terraform will delete all existing resources to match the corrupted state.

💡 Hint

Consider how Terraform uses the state file to track resources.

Terraform relies on the state file to know current infrastructure. Corruption causes errors. Restoring a previous version is necessary to continue safely.