Terraform Cloud/Enterprise features - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Terraform Cloud Workspaces Behavior

Which statement best describes how Terraform Cloud workspaces manage state files?

A Workspaces do not use state files; they rely on external databases for state management.

B Each workspace has its own isolated state file stored securely in Terraform Cloud.

C State files are stored locally on the user's machine and uploaded only during runs.

D All workspaces share a single global state file to simplify management.

💡 Hint

Think about how Terraform Cloud isolates environments and manages infrastructure state.

Terraform Cloud creates a separate state file for each workspace, ensuring isolation and secure storage. This allows multiple environments or projects to be managed independently.

❓ Architecture

intermediate

Terraform Enterprise Private Network Connectivity

In Terraform Enterprise, which method is recommended to securely connect the Terraform Enterprise instance to private cloud resources without exposing them publicly?

A Run Terraform Enterprise on a public cloud instance and access private resources via SSH tunneling.

B Expose the private resources with public IPs and restrict access with firewall rules.

C Use a VPN or Direct Connect to establish a private network link between Terraform Enterprise and the cloud environment.

D Use Terraform Cloud's public API endpoints to manage private resources remotely.

💡 Hint

Consider secure, private network connections that avoid public exposure.

Terraform Enterprise supports private network connectivity using VPN or Direct Connect, allowing secure communication with private cloud resources without exposing them publicly.

❓ security

advanced

Terraform Cloud Sentinel Policy Enforcement

What is the primary purpose of Sentinel policies in Terraform Cloud?

A To enforce rules and guardrails on Terraform runs by evaluating policy as code before applying changes.

B To automatically fix syntax errors in Terraform configuration files during runs.

C To provide a user interface for managing Terraform state files manually.

D To schedule Terraform runs at specific times without manual intervention.

💡 Hint

Think about how organizations enforce compliance and standards automatically.

Sentinel is a policy-as-code framework integrated with Terraform Cloud that evaluates policies to enforce compliance and governance before infrastructure changes are applied.

❓ service_behavior

advanced

Terraform Cloud Run Triggers Behavior

Which of the following best describes how run triggers work in Terraform Cloud?

A Run triggers require manual approval before starting any Terraform run in dependent workspaces.

B Run triggers disable automatic state locking during concurrent runs.

C Run triggers schedule Terraform runs at fixed time intervals regardless of other workspace states.

D Run triggers automatically start a Terraform run in one workspace when another workspace completes a run successfully.

💡 Hint

Consider how Terraform Cloud coordinates runs across related workspaces.

Run triggers allow one workspace to automatically start a run in another workspace after a successful run, enabling orchestration of dependent infrastructure changes.

✅ Best Practice

expert

Managing Sensitive Variables in Terraform Cloud

Which approach is the most secure and recommended way to manage sensitive variables in Terraform Cloud?

A Mark variables as sensitive in Terraform Cloud and avoid printing them in logs or outputs.

B Store sensitive variables in plain text in Terraform configuration files checked into version control.

C Use environment variables on local machines and never store them in Terraform Cloud.

D Encrypt sensitive variables manually and store encrypted blobs as regular variables.

💡 Hint

Think about built-in features Terraform Cloud offers for secrets management.

Terraform Cloud allows marking variables as sensitive, which prevents them from being shown in logs or UI, providing secure handling of secrets within the platform.