HashiCorp Exam Terraform-Associate-003 Topic 8 Question 14 Discussion

Actual exam question for HashiCorp's Terraform-Associate-003 exam

Question #: 14
Topic #: 8

[All Terraform-Associate-003 Questions]

What are some benefits of using Sentinel with Terraform Cloud/Terraform Cloud? Choose three correct answers.

AYou can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.

BYou can check out and check in cloud access keys

CSentinel Policies can be written in HashiCorp Configuration Language (HCL)

DPolicy-as-code can enforce security best practices

EYou can enforce a list of approved AWS AMIs

Show Suggested Answer

Suggested Answer: A, D, E

Sentinel is a policy-as-code framework that allows you to define and enforce rules on your Terraform configurations, states, and plans1. Some of the benefits of using Sentinel with Terraform Cloud/Terraform Enterprise are:

* You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0, which would open up your network to the entire internet. This can help you prevent misconfigurations or security vulnerabilities in your infrastructure2.

* Policy-as-code can enforce security best practices, such as requiring encryption, authentication, or compliance standards. This can help you protect your data and meet regulatory requirements3.

* You can enforce a list of approved AWS AMIs, which are pre-configured images that contain the operating system and software you need to run your applications. This can help you ensure consistency, reliability, and performance across your infrastructure4.

Reference =

* 1: Terraform and Sentinel | Sentinel | HashiCorp Developer

* 2: Terraform Learning Resources: Getting Started with Sentinel in Terraform Cloud

* 3: Exploring the Power of HashiCorp Terraform, Sentinel, Terraform Cloud ...

* 4: Using New Sentinel Features in Terraform Cloud - Medium

by Nu at May 18, 2024, 12:28 PM

Limited Time Offer

25%

Off

Get Premium Terraform-Associate-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tony

5 months ago

Checking in and out cloud access keys? That's a good one, B is definitely a keeper. Along with A and D, of course.

upvoted 0 times

Paris

5 months ago

Having the ability to restrict specific resource configurations is crucial, so A is a must-have as well.

upvoted 0 times

...

Alex

5 months ago

I agree, A and D are also important for enforcing security best practices.

upvoted 0 times

...

Shoshana

5 months ago

B is definitely a good option for managing access keys.

upvoted 0 times

...

Charolette

5 months ago

A, D, and E. Easy choice. Though I guess checking out keys could be handy if you're feeling a bit 007 today, Nobuko.

upvoted 0 times

...

Tamar

5 months ago

Hmm, C seems a bit redundant since Terraform already uses HCL. But the other three options are all great reasons to use Sentinel.

upvoted 0 times

Nobuko

5 months ago

D) Policy-as-code can enforce security best practices

upvoted 0 times

...

Sherita

5 months ago

A) You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.

upvoted 0 times

...

Lon

5 months ago

D) Policy-as-code can enforce security best practices

upvoted 0 times

...

Luisa

5 months ago

E) You can enforce a list of approved AWS AMIs

upvoted 0 times

...

Kenneth

5 months ago

A) You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.

upvoted 0 times

...

Aliza

5 months ago

D) Policy-as-code can enforce security best practices

upvoted 0 times

...

Rene

5 months ago

A) You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.

upvoted 0 times

...

Nobuko

6 months ago

Definitely A, D, and E. Disallowing 0.0.0.0/0 and approving AMIs are must-have features for cloud security.

upvoted 0 times

...

Juliann

6 months ago

A, D, and E seem like the most useful benefits to me. Restricting resource configurations and enforcing security best practices are crucial for managing infrastructure as code.

upvoted 0 times