nerdexam
HashiCorp

TA-002-P · Question #128

How can you ensure that the engineering team who has access to git repo will not create any non-compliant resources that might lead to a security audit failure in future. your team is using Hashicorp

The correct answer is C. Since your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and. To prevent non-compliant resource creation in Terraform Enterprise, the most effective method is to leverage Sentinel for automated policy enforcement.

Use Terraform Cloud and Terraform Enterprise capabilities

Question

How can you ensure that the engineering team who has access to git repo will not create any non-compliant resources that might lead to a security audit failure in future. your team is using Hashicorp Terraform Enterprise Edition.

Options

  • AUse Terraform OSS Sentinel Lite version , which will save cost , since there is no charge
  • BImplement a review process where every code will be reviewed before merging to the
  • CSince your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , and
  • DCreate a design /security document (in PDF) and share to the team , and ask them to

How the community answered

(21 responses)
  • A
    14% (3)
  • B
    10% (2)
  • C
    71% (15)
  • D
    5% (1)

Why each option

To prevent non-compliant resource creation in Terraform Enterprise, the most effective method is to leverage Sentinel for automated policy enforcement.

AUse Terraform OSS Sentinel Lite version , which will save cost , since there is no charge

There is no official 'Terraform OSS Sentinel Lite version' that provides policy enforcement for Terraform Enterprise.

BImplement a review process where every code will be reviewed before merging to the

While code reviews are a good practice, they are a manual process and prone to human error, making them less reliable for strict, automated compliance than policy as code.

CSince your team is using Hashicorp Terraform Enterprise Edition , enable Sentinel , andCorrect

HashiCorp Terraform Enterprise Edition includes Sentinel, HashiCorp's policy as code framework. By enabling Sentinel and implementing appropriate policies, organizations can automatically enforce security and compliance rules, preventing engineers from provisioning non-compliant resources before they are deployed.

DCreate a design /security document (in PDF) and share to the team , and ask them to

Creating a security document is a passive measure that relies on human diligence and does not technically prevent the creation of non-compliant resources.

Concept tested: Terraform Enterprise policy as code (Sentinel)

Source: https://developer.hashicorp.com/terraform/cloud-docs/policy-enforcement/sentinel

Topics

#Terraform Enterprise#Sentinel#Policy as Code#Security Compliance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full TA-002-P Practice