QUESTION 35
True or False? Each Terraform workspace uses its own state file to manage the infrastructure associated with that particular workspace.

QUESTION 36
Vault configuration files can be written in what languages? (select two)

QUESTION 37
In order to extend Vault beyond a data center or cloud regional boundary, what feature should be used?

QUESTION 38
True or False: When encrypting data with the transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

QUESTION 39
Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
1. terraform {
2. required_providers {
3. aws = “~> 1.0”
4. }
5. }

QUESTION 40
Which of the following Vault features is available only in the Enterprise version? (select three)

QUESTION 41
What is the default method of authentication after first initializing Vault?

QUESTION 42
In order to make a Terraform configuration file dynamic and/or reusable, static values should be converted to use what?

QUESTION 43
After encrypting data using the transit secrets engine, you’ve received the following output. Which of the following is true based upon the output?
1. Key Value
2. — —–
3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

QUESTION 44
In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?

QUESTION 45
In terraform, most resource dependencies are handled automatically. Which of the following statements describes best how terraform resource dependencies are handled?

QUESTION 46
From the code below, identify the implicit dependency:
1. resource “aws_eip” “public_ip” {
2. vpc = true
3. instance = aws_instance.web_server.id
4. }
5. resource “aws_instance” “web_server” {
6. ami = “ami-2757f631”
7. instance_type = “t2.micro”
8. depends_on = [aws_s3_bucket.company_data]
9. }

QUESTION 47
Which is not a capability that can be used when writing a Vault policy?

QUESTION 48
The Terraform language supports a number of different syntaxes for comments. Select all that are supported. (select three)

QUESTION 49
Anyone can publish and share modules on the Terraform Public Module Registry, and meeting the requirements for publishing a module is extremely easy. Select from the following list all valid requirements. (select three)

QUESTION 50
Which of the following Vault policies will allow a Vault client to read a secret stored at secrets/applications/app01/api_key?

QUESTION 51
What happens to child tokens when a parent token is revoked?