terraform-associate question 369 discussion

View all HashiCorp Certified: Terraform Associate Exam here
back to hashicorp forum

Question 369

Why should secrets not be hard coded into Terraform code? Choose two correct answers

  • A. All passwords should be rotated on a quarterly basis.
  • B. The Terraform code is copied to the target resources to be applied locally and could expose secrets if a target resource is compromised.
  • C. Terraform code is typically stored in version control, as well as copied to the systems from h it's run. Any of those may not have robust security mechanisms.
  • D. It makes the code less reusable.
Answer:

C, D


User Votes:
A
50%
B 2 votes
50%
C 4 votes
50%
D 3 votes
50%
Discussions
0 / 1000
Greatman
1 month, 1 week ago

The two correct answers are:
B. The Terraform code is copied to the target resources to be applied locally and could expose secrets if a target resource is compromised.
C. Terraform code is typically stored in version control, as well as copied to the systems from which it's run. Any of those may not have robust security mechanisms.