Download Full Version Terraform-Associate-004 HashiCorp Exam

The correct answer is D because marking a Terraform variable as sensitive does not, by itself, keep the value out of Terraform configuration files. The sensitive argument only changes how Terraform displays the value in CLI output, plans, and logs. It does not supply the value from outside the configuration, and it does not prevent sensitive values from being stored in state when those values are used by resources or outputs. Passing values through environment variables, command-line -var arguments, or secure external credential files can help avoid hardcoding secrets directly in .tf files. In Terraform workflows, sensitive values should be kept out of version-controlled configuration and handled through secure runtime mechanisms such as environment variables, HCP Terraform sensitive variables, or Vault.

Detailed Explanation:

Rationale for Correct Answer:terraform fmt rewrites Terraform configuration files (.tf, and commonly .tfvars) into Terraform’s canonical formatting style (indentation, alignment, spacing, etc.). By default, it formats files in the current directory (and with flags like -recursive, it can format subdirectories too).

Analysis of Incorrect Options (Distractors):

B: Incorrect because formatting is exactly what terraform fmt is designed to do.

Key Concept:Using terraform fmt to enforce consistent HCL formatting.

Terraform Cloud provides features like remote state storage and a web-based user interface for managing your Terraform runs. While it offers robust infrastructure as code capabilities, automatic backups of configuration and state are not directly provided by Terraform Cloud; instead, the state is stored remotely and secured.

State locking prevents other users from modifying the state file while a Terraform operation is in progress. This prevents conflicts and data loss1.