TAO-Pro Terraform Authoring and Operations Professional Practice Questions

You are working on a Terraform configuration that provisions a multi-region application. You have a root module that instantiates a child module named network. The root module has two provider configurations for AWS: the default one (us-east-1) and an aliased one (us-west-2). You need to pass the aliased provider to the network module so it creates resources in us-west-2. Which syntax correctly achieves this?

You need to select ALL correct statements regarding the terraform plan -refresh-only command. (Select TWO)

Which Terraform function would you use to read the contents of a file from the local filesystem and return it as a string, while ensuring that the file contents are treated as UTF-8 encoded text?

You are designing a module that accepts a variable instance_count. You want to use this variable to create multiple EC2 instances, but only if the variable enable_instances is set to true. If enable_instances is false, no instances should be created. Which meta-argument combination is best suited for this conditional creation logic?

You have a root module that defines an aws_s3_bucket resource. You want to execute a script on your local machine immediately after this bucket is successfully created. Which provisioner should you use?

You are the Lead Terraform Architect for a financial services firm. You are refactoring a large monolithic configuration into smaller, reusable modules to improve maintainability. One specific resource, an aws_s3_bucket named logs, needs to be moved from the root configuration into a new child module named audit_logs. You must ensure that the existing bucket is NOT destroyed and recreated during this refactoring process, as it contains petabytes of compliance data. Which configuration block should you add to your root module to facilitate this state migration?

A DevOps engineer is tasked with importing a legacy EC2 instance into a Terraform configuration. The engineer has written the resource "aws_instance" "legacy" {} block but does not know the exact instance ID required for the import. However, they know the instance has a specific tag Role = "LegacyApp". Which approach allows the engineer to import this resource using Terraform 1.5+ declarative import syntax without manually looking up the ID first?

You are managing a critical production environment where applying a configuration that accidentally changes the user_data of an EC2 instance would trigger a replacement, causing unacceptable downtime. You want to ensure that any future terraform apply fails if it attempts to replace this specific instance due to a change in user_data. Which lifecycle configuration should you apply?