HashiCorp Exam Terraform-Associate-003 Topic 3 Question 31 Discussion

Actual exam question for HashiCorp's Terraform-Associate-003 exam

Question #: 31
Topic #: 3

You want to use API tokens and other secrets within your team's Terraform workspaces. Where does HashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

AIn an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.

BIn HashiCorp Vault.

CIn a terraform.tfvars file, securely managed and shared with your team.

DIn a terraform.tfvars file, checked into your version control system.

EIn a plaintext document on a shared drive.

Show Suggested Answer

Suggested Answer: A, B, C

Sensitive values such as API tokens should be stored in a secure way, either in Terraform Cloud variables marked as sensitive or in HashiCorp Vault. Storing secrets in version control systems or plaintext files is not recommended.

References:

Terraform Cloud Environment Variables

by Rocco at Jan 13, 2025, 11:31 PM

Limited Time Offer

25%

Off

Get Premium Terraform-Associate-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Malcom

5 days ago

Definitely A and B! Those are the best practices.

upvoted 0 times

...

Allene

11 days ago

I’m pretty sure that checking sensitive values into version control is a big no-no, but I can't recall if the other options are all correct.

upvoted 0 times

...

Tomoko

16 days ago

I practiced a question similar to this, and I feel like storing secrets in a terraform.tfvars file isn't safe unless it's managed properly.

upvoted 0 times

...

Lonny

22 days ago

I think HashiCorp Vault is definitely one of the right answers, but I'm not sure about the others.

upvoted 0 times

...

Ettie

28 days ago

I remember that using HCP Terraform variables with the sensitive option checked is a secure way to store secrets.

upvoted 0 times

...

Trinidad

28 days ago

Okay, let's see here. Definitely don't want to just put sensitive info in a plaintext document or check it into version control. That's a big no-no. I think the Terraform Cloud variables and HashiCorp Vault are the way to go, but I'll double-check the other options to be sure.

upvoted 0 times

...

Jettie

28 days ago

Ah, this is a good one! I remember discussing this in our Terraform training. HashiCorp is pretty clear that you should use their own tools like Terraform Cloud variables or HashiCorp Vault to securely store secrets. I'll make sure to select those options.

upvoted 0 times

...

Noah

28 days ago

Hmm, I'm a bit unsure about this one. I know we need to store sensitive values securely, but I'm not totally familiar with all the HashiCorp tools and recommendations. I'll have to read through the options closely and try to remember what we covered in class.

upvoted 0 times

...

Laila

1 months ago

This is a tricky one, but I think the key is to focus on the security recommendations from HashiCorp. I'll need to carefully review the options and eliminate the ones that don't align with their best practices.

upvoted 0 times

...