Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

HashiCorp Terraform-Associate-004 Exam - Topic 3 Question 10 Discussion

You're building a CI/CD (continuous integration/continuous delivery) pipeline and need to inject sensitive variables into your Terraform run. How can you do this safely?
D) Pass variables to Terraform with a -var flag
A) Copy the sensitive variables into your Terraform code
B) Store the sensitive variables in a secure_varS.tf file
C) Store the sensitive variables as plain text in a source code repository

HashiCorp Terraform-Associate-004 Exam - Topic 3 Question 10 Discussion

Actual exam question for HashiCorp's Terraform-Associate-004 exam
Question #: 10
Topic #: 3
[All Terraform-Associate-004 Questions]

You're building a CI/CD (continuous integration/continuous delivery) pipeline and need to inject sensitive variables into your Terraform run. How can you do this safely?

Show Suggested Answer Hide Answer
Suggested Answer: D

This is a secure way to inject sensitive variables into your Terraform run, as they will not be stored in any file or source code repository. You can also use environment variables or variable files with encryption to pass sensitive variables to Terraform.


by Lorenza at May 16, 2026, 01:11 PM

Limited Time Offer

25%

Off

Get Premium Terraform-Associate-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Stephaine
4 days ago
Storing in a secure_varS.tf? Sounds risky.
upvoted 0 times
...
Jill
9 days ago
D is the best option for security!
upvoted 0 times
...
Carol
14 days ago
B sounds like a good compromise, but how secure is it really?
upvoted 0 times
...
Sheron
19 days ago
I thought passing variables with -var was less secure, is it really safe?
upvoted 0 times
...
Tambra
24 days ago
A is definitely a no-go, that's just asking for trouble.
upvoted 0 times
...
Paris
29 days ago
Storing in a secure_varS.tf? Seems risky to me.
upvoted 0 times
...
Shaniqua
1 month ago
D is the best option for security!
upvoted 0 times
...
Ethan
1 month ago
Storing sensitive variables as plain text in a repo is definitely a no-go, so C is out for sure!
upvoted 0 times
...
Annmarie
1 month ago
Passing variables with the -var flag sounds familiar, but I can't recall if it's secure enough for sensitive data.
upvoted 0 times
...
Sina
2 months ago
I think using a secure_varS.tf file could be a good option, but I'm not entirely sure if that's the best practice.
upvoted 0 times
...
Georgene
3 months ago
I remember we discussed how sensitive data shouldn't be hardcoded in Terraform files, so A seems wrong.
upvoted 0 times
...

Save Cancel