Infrastructure As Code (iac) MCQ Practice Test

Q1. You're managing a multi-region deployment using Terraform. Your main state file is stored in a remote backend (e.g., S3). A developer accidentally deletes a crucial resource in the 'us-east-1' region. Which Terraform command, executed in the root module directory, will MOST efficiently identify the difference between the desired state (defined in your Terraform configuration) and the actual state in 'us-east-1', *without* applying changes?

• A. terraform plan -target=us-east-1 ✓
• B. terraform show -target=us-east-1
• C. terraform state list -target=us-east-1
• D. terraform refresh -target=us-east-1

Q2. You're managing infrastructure as code using Terraform for a multi-region application. Your state file is stored in a remote backend using the AWS S3 backend. To ensure that only authorized users can modify the state file and prevent accidental deletion or corruption, which of the following configurations offers the STRONGEST security posture?

• A. Enable AWS S3 bucket versioning and restrict access to the state bucket using an IAM role with only the necessary permissions (e.g., s3:GetObject, s3:PutObject, s3:DeleteObject). ✓
• B. Disable public access on the S3 bucket and enable server-side encryption (SSE-S3).
• C. Use the default configuration provided by Terraform without any additional security measures.
• D. Enable AWS S3 bucket versioning and restrict access using bucket policies, allowing only specific IP addresses to access the state file.

Q3. When using Terraform to manage AWS infrastructure as code, which of the following best describes the purpose of a "module"?

• A. A reusable collection of Terraform configurations that can be used to provision multiple resources. ✓
• B. A way to define a single resource, such as an EC2 instance, with its configuration and dependencies.
• C. A mechanism to manage state and ensure idempotence when provisioning infrastructure.
• D. A tool to automate the deployment of Terraform configurations to remote environments.

Q4. In a Terraform configuration, you want to create a resource that depends on another resource that is created by a different Terraform module. Which of the following Terraform constructs can be used to achieve this?

• A. Terraform Module Output ✓
• B. Terraform Resource Import
• C. Terraform Interpolation Function
• D. Terraform Data Source

Q5. In a Terraform configuration, which statement is used to specify the AWS IAM role that an AWS Lambda function assumes?

• A. provider "aws" region = "us-west-2"}
• B. resource "aws_lambda_function" "example" { \n filename = "lambda_function_payload.zip" \n handler = "index.handler" \n role = aws_iam_role.example.arn \n} ✓
• C. resource "aws_iam_role" "example" { \n name = "example-role" \n assume_role_policy = jsonencode({ \n Version = "2012-10-17" \n Statement = [ \n { \n Action = "sts:AssumeRole" \n Effect = "Allow" \n Principal = { Service = "lambda.amazonaws.com" } \n } \n ] \n }) \n}
• D. output "lambda_arn" { \n value = aws_lambda_function.example.arn \n}

Q6. In Terraform, what is the purpose of the 'terraform state' file?

• A. 'Terraform state' file is used to store Terraform configuration
• B. 'Terraform state' file is used to store the current state of the infrastructure ✓
• C. 'Terraform state' file is used to store the history of changes made to the Terraform configuration
• D. 'Terraform state' file is used to store the Terraform backend configuration

Q7. What is the primary purpose of using a “state file” in a Terraform configuration?

• A. To define a Terraform backend for remote state storage
• B. To specify a Terraform version for a specific module
• C. To manage the state of a Terraform infrastructure as code configuration ✓
• D. To enable Terraform drift detection

Q8. In a Terraform configuration, which of the following statements is used to create a new resource, but only if it doesn't already exist?

• A. resource
• B. provider
• C. data
• D. resource "null" ✓

Q9. In Terraform, what is the purpose of the "depends_on" argument in a resource block?

• A. To specify the order of resource creation
• B. To create a dependency between resources ✓
• C. To define a variable used by the resource
• D. To specify a timeout for resource creation

Q10. Which Terraform configuration statement is used to create a new AWS Elastic Load Balancer in a VPC?

• A. Creates a new AWS Elastic Load Balancer and assigns it to a VPC using the aws_lb resource type. ✓
• B. Creates a new VPC and assigns an Elastic Load Balancer to it using the aws_vpc resource type.
• C. Creates a new Elastic Load Balancer and assigns it to a VPC using the aws_elastic_lb resource type.
• D. Creates a new VPC and assigns an Elastic Load Balancer to it using the aws_elb resource type.

That was just a sample. Sign up to unlock the full question bank with timed tests and certificates.