Terraform Cloud overview - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Terraform Cloud workspace state management

Which statement best describes how Terraform Cloud manages state files in workspaces?

A Terraform Cloud stores state files remotely and locks them during runs to prevent conflicts.

B Terraform Cloud requires users to manually upload state files after each run.

C Terraform Cloud deletes state files after each successful apply to save space.

D Terraform Cloud stores state files locally on the user's machine by default.

💡 Hint

Think about how Terraform Cloud helps teams avoid state conflicts.

Terraform Cloud automatically stores state files remotely and locks them during runs. This prevents multiple users from making conflicting changes at the same time.

❓ service_behavior

intermediate

Terraform Cloud run triggers

What happens when a new VCS commit is pushed to a repository connected to a Terraform Cloud workspace?

A Terraform Cloud automatically queues a plan and applies it without manual approval.

B Terraform Cloud queues a plan and waits for manual approval before applying changes.

C Terraform Cloud ignores the commit unless manually triggered by the user.

D Terraform Cloud deletes the workspace and creates a new one.

💡 Hint

Consider the default safety mechanism for applying changes.

By default, Terraform Cloud queues a plan when a new commit is detected and waits for manual approval before applying changes. This helps prevent unintended infrastructure changes.

❓ Architecture

advanced

Terraform Cloud team and policy architecture

Which architecture best supports enforcing security policies across multiple teams using Terraform Cloud?

A Create multiple organizations with separate policies for each team.

B Manage policies locally on each user's machine to allow flexibility.

C Use a single organization with multiple teams and apply Sentinel policies at the organization level.

D Disable policies to speed up deployments across teams.

💡 Hint

Think about centralized policy enforcement for consistency.

Using a single organization with multiple teams and applying Sentinel policies at the organization level ensures consistent security enforcement across all teams.

❓ security

advanced

Terraform Cloud sensitive variable handling

How does Terraform Cloud protect sensitive variables in workspaces?

A Sensitive variables must be stored in external files and cannot be set in Terraform Cloud.

B Sensitive variables are stored in plain text but hidden in the UI.

C Sensitive variables are shared openly with all workspace users for transparency.

D Sensitive variables are encrypted and never displayed in logs or UI after entry.

💡 Hint

Consider how secrets should be handled securely.

Terraform Cloud encrypts sensitive variables and ensures they are never shown in logs or the UI after being entered, protecting secrets from exposure.

✅ Best Practice

expert

Optimizing Terraform Cloud runs for large teams

Which practice best optimizes Terraform Cloud runs to reduce wait times and improve collaboration in large teams?

A Use multiple workspaces targeting smaller parts of infrastructure and enable run triggers between them.

B Use a single workspace for all infrastructure to simplify management.

C Disable state locking to allow parallel runs.

D Manually merge all Terraform configurations into one file to reduce complexity.

💡 Hint

Think about breaking down infrastructure and coordinating runs.

Splitting infrastructure into multiple workspaces and using run triggers allows parallel work and coordinated updates, reducing wait times and improving collaboration.