EMT Practice Test

1. Question Content...

---

Question1: Choose the correct answer which fixes the syntax of the following Terraform code:

Question2: Which of the following variable declarations is going to result in an error?

Question3: Terraform Enterprise (also referred to as pTFE) requires what type of backend database for a clustered deployment?

Question4: The Vault Agent provides which of the following benefits? (select three)

Question5: Which of the following is an invalid variable name?

Question6: What are some of the features of Terraform state? (select three)

Question7: Which is not a benefit of running HashiCorp Vault in your environment?

Question8: Which of the following secrets engine can generate dynamic credentials? (select three)

Question9: Unsealing Vault creates the encryption keys, which is used to unencrypt the data on the storage backend.

Question10: The Terraform language supports a number of different syntaxes for comments. Select all that are supported. (select three)

Question11: After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?

Question12: You've logged into the Vault CLI and attempted to enable an auth method, but received this error message. What can be done to resolve the error and configure Vault?
Error enabling userpass auth: Post https://127.0.0.1:8200/v1/sys/auth/userpass: http: server gave HTTP response to HTTPS client

Question13: The userpass auth method has the ability to access external services in order to provide authentication to Vault.

Question14: When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other relevant data are not inadvertently shared with others. What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)

Question15: Anyone can publish and share modules on the Terraform Public Module Registry, and meeting the requirements for publishing a module is extremely easy. Select from the following list all valid requirements. (select three)

Question16: Beyond encryption and decryption of data, which of the following is not a function of the Vault transit secrets engine?

Question17: In the example below, the depends_on argument creates what type of dependency?
1. esource "aws_instance" "example" {
2. ami = "ami-2757f631"
3. instance_type = "t2.micro"
4. depends_on = [aws_s3_bucket.company_data]
5. }

Question18: Your organization has moved to AWS and has manually deployed infrastructure using the console. Recently, a decision has been made to standardize on Terraform for all deployments moving forward.
What can you do to ensure that all existing is managed by Terraform moving forward without interruption to existing services?

Question19: Vault's User Interface (UI) needs to be enabled in the command line before it can be used.

Question20: From the options below, select the benefits of using the PKI (certificates) secrets engine: (select three)

Question21: Which of the following Vault features is available only in the Enterprise version? (select three)

Question22: Which type of Vault replication copies all data from Vault, including K/V data, policies, and client tokens?

Question23: You are deploying Vault in a local data center, but want to be sure you have a secondary cluster in the event the primary cluster goes offline. In the secondary data center, you have applications that are running, as they are architected to run active/active. Which type of replication would be best in this scenario?

Question24: Given the Terraform configuration below, in which order will the resources be created?
1. resource "aws_instance" "web_server" {
2. ami = "i-abdce12345"
3. instance_type = "t2.micro"
4. }
5. resource "aws_eip" "web_server_ip" {
6. vpc = true
7. instance = aws_instance.web_server.id
8. }

Question25: The command vault lease revoke -prefix aws/ will revoke all leases associated with the secret engine mounted at aws/

Question26: When administering Vault on a day-to-day basis, why is logging in with the root token, as shown below, a bad idea? (select two).

Question27: Which of the following is not an activity associated with the Vault transit secrets engine?

Question28: When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

Question29: To prepare for day-to-day operations, the root token should be safety saved outside of Vault in order to administer Vault

Question30: True or False:
A list(...) may contain a number of values of the same type while an object(...) can contain a number of values of different types.

Question31: Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

Question32: True or False:
When using the transit secrets engine, setting the min_decryption_version will determine the minimum key length of the data key (i.e., 2048, 4096, etc.)

Question33: True or False: When encrypting data with the transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

Question34: Which of the following connection types are supported by the remote-exec provisioner? (select two)

Question35: After logging into the Vault UI, a user complains that they cannot enable Replication. Why would the replication configuration be missing?

Question36: Your organization is running Vault open source and has decided it wants to use the Identity secrets engine. You log into Vault but are unable to find it in the list to enable. What gives?

Question37: What are some of the problems of how infrastructure was traditionally managed before Infrastructure as Code? (select three)

Question38: Select the policies below that permit you to create a new entry of foo=bar at the path /secrets/apps/my_secret (select three)

Question39: What happens when a terraform apply command is executed?

Question40: A user has created a module called "my_test_module" and committed it to GitHub. Over time, several commits have been made with updates to the module, each tagged in GitHub with an incremental version number. Which of the following lines would be required in a module configuration block in terraform to select tagged version v1.0.4?

Question41: A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?

Question42: Which commands are available only after Vault has been unsealed? (select two)

Question43: What does the command terraform fmt do?

Question44: In regards to using a K/V v2 secrets engine, select the three correct statements below: (select three)

Question45: Which of the following best describes a token accessor?

Question46: Which of the following allows Terraform users to apply policy as code to enforce standardized configurations for resources being deployed via infrastructure as code?

Question47: True or False? Each Terraform workspace uses its own state file to manage the infrastructure associated with that particular workspace.

Question48: By default, the max TTL for a token is how many days?

Question49: Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)

Question50: Vault has failed to start. You inspect the log and find the error below. What needs to be changed in order to successfully start Vault?
"Error parsing config.hcl: At 1:12: illegal char"

Question51: When creating a dynamic secret in Vault, Vault returns what value that can be used to renew or revoke the lease?

Question52: In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?

Question53: Which two characters can be used when writing a policy to reflect a wildcard or path segment? (select two)

Question54: When a primary Vault cluster fails, Vault will automatically promote a secondary cluster to ensure maximum uptime.

Question55: You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?

Question56: Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

Question57: Select all features which are exclusive to Terraform Enterprise. (select three)

Question58: What is the result of the following terraform function call?
lookup({a="hello", b="goodbye"}, "c", "what?")

Question59: In the following code snippet, the block type is identified by which string?
1. resource "aws_instance" "db" {
2. ami = "ami-123456"
3. instance_type = "t2.micro"
4. }

Question60: In regards to deploying resources in multi-cloud environments, what are some of the benefits of using Terraform rather than a provider's native tooling? (select three)

Question61: The security barrier protects all of the following Vault components except ___.