HashiCorp Exam VA-002-P Topic 9 Question 58 Discussion

Actual exam question for HashiCorp's VA-002-P exam

Question #: 58
Topic #: 9

[All VA-002-P Questions]

In regards to Terraform state file, select all the statements below which are correct: (select four)

Astoring state remotely can provide better security

Bthe Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access

CTerraform Cloud always encrypts state at rest

Dusing the mask feature, you can instruct Terraform to mask sensitive data in the state file

Ewhen using local state, the state file is stored in plain-text

Fthe state file is always encrypted at rest

Show Suggested Answer

Suggested Answer: A, B, C, E

Terraform state can contain sensitive data, depending on the resources in use and your definition of 'sensitive.' The state contains resource IDs and all resource attributes. For resources such as databases, this may contain initial passwords.

When using local state, state is stored in plain-text JSON files.

If you manage any sensitive data with Terraform (like database passwords, user passwords, or private keys), treat the state itself as sensitive data.

Storing Terraform state remotely can provide better security. As of Terraform 0.9, Terraform does not persist state to the local disk when remote state is in use, and some backends can be configured to encrypt the state data at rest.

by Peggie at Nov 15, 2022, 09:03 PM

Limited Time Offer

25%

Off

Get Premium VA-002-P Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!