TERRAFORM-ASSOCIATE-004 · Question #150
What are some benefits of using Sentinel with Terraform Cloud/Terraform Cloud? Choose three correct answers.
The correct answer is A. You can restrict specific resource configurations, such as disallowing the use of D. Policy-as-code can enforce security best practices E. You can enforce a list of approved AWS AMIs. Sentinel is Terraform Cloud's policy-as-code framework that intercepts plans before they are applied. A is correct: you can write Sentinel rules that block specific dangerous resource configurations, such as open security group rules (0.0.0.0/0). D is correct: Sentinel enables…
Question
Options
- AYou can restrict specific resource configurations, such as disallowing the use of
- BYou can check out and check in cloud access keys
- CSentinel Policies can be written in HashiCorp Configuration Language (HCL)
- DPolicy-as-code can enforce security best practices
- EYou can enforce a list of approved AWS AMIs
How the community answered
(31 responses)- A90% (28)
- B6% (2)
- C3% (1)
Explanation
Sentinel is Terraform Cloud's policy-as-code framework that intercepts plans before they are applied. A is correct: you can write Sentinel rules that block specific dangerous resource configurations, such as open security group rules (0.0.0.0/0). D is correct: Sentinel enables teams to enforce security standards as automated, version-controlled policy code rather than manual review. E is correct: you can restrict which AWS AMIs are permitted across your organization's workspaces. B is incorrect - managing cloud access keys is a Vault feature. C is incorrect - Sentinel uses the Sentinel language, not HCL.
Topics
Community Discussion
No community discussion yet for this question.