nerdexam
HashiCorpHashiCorp

TERRAFORM-ASSOCIATE-004 · Question #145

TERRAFORM-ASSOCIATE-004 Question #145: Real Exam Question with Answer & Explanation

The correct answer is A: You can enforce a list of approved AWS AMIs. Sentinel is a policy-as-code framework integrated into Terraform Cloud that enforces rules before infrastructure changes are applied. A is correct: you can write policies that restrict which AMI IDs are approved for use. B is correct: Sentinel lets teams encode and enforce securi

Submitted by ricky.ec· Apr 18, 2026Understand Terraform Cloud and Enterprise Capabilities

Question

What are some benefits of using Sentinel with Terraform Cloud/Terra form Cloud? Choose three correct answers.

Options

  • AYou can enforce a list of approved AWS AMIs
  • BPolicy-as-code can enforce security best practices
  • CYou can check out and check in cloud access keys
  • DYou can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.
  • ESentinel Policies can be written in HashiCorp Configuration Language (HCL)

Explanation

Sentinel is a policy-as-code framework integrated into Terraform Cloud that enforces rules before infrastructure changes are applied. A is correct: you can write policies that restrict which AMI IDs are approved for use. B is correct: Sentinel lets teams encode and enforce security best practices programmatically. D is correct: you can restrict dangerous configurations like open CIDR ranges (0.0.0.0/0). C is incorrect - checking out/in cloud access keys is a feature of HashiCorp Vault, not Sentinel. E is incorrect - Sentinel policies are written in the Sentinel language, not HCL.

Topics

#Sentinel#Policy as Code#Terraform Cloud#Security Enforcement

Community Discussion

No community discussion yet for this question.

Full TERRAFORM-ASSOCIATE-004 PracticeBrowse All TERRAFORM-ASSOCIATE-004 Questions