HashiCorp
TA-002-P · Question #71
Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files?
Sign in or unlock TA-002-P to reveal the answer and full explanation for question #71. The question stem and answer options stay visible for context.
Implement and maintain state
Question
Your security team scanned some Terraform workspaces and found secrets stored in a plaintext in state files. How can you protect sensitive data stored in Terraform state files?
Options
- ADelete the state file every time you run Terraform
- BStore the state in an encrypted backend
- CEdit your state file to scrub out the sensitive data
- DAlways store your secrets in a secrets.tfvars file.
Unlock TA-002-P to see the answer
You've previewed enough free TA-002-P questions. Unlock TA-002-P for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Terraform state#State file security#Encrypted backends#Sensitive data